Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/8lN5mvr8BStBFp11_ZvXKINg8Ao.roa
File: 8lN5mvr8BStBFp11_ZvXKINg8Ao.roa (raw, json)
Hash identifier: +0IV10PC3/39hjHa74Pv3oBRvzVCkjAJ5ZLvmYkwNR4=
Subject key identifier: F2:53:79:9A:FA:FC:05:2B:41:16:9D:75:FD:9B:D7:28:83:60:F0:0A
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0197EDEE54C27037AC9FCD59E7AAE7A124B3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/8lN5mvr8BStBFp11_ZvXKINg8Ao.roa
Signing time: Wed 09 Jul 2025 06:45:08 +0000
ROA not before: Wed 09 Jul 2025 06:45:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.200.0/23 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.23.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Jul 2025 15:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ed:ee:54:c2:70:37:ac:9f:cd:59:e7:aa:e7:a1:24:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 9 06:45:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f253799afafc052b41169d75fd9bd7288360f00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:01:71:f8:3a:90:c5:12:63:37:4c:21:99:
5e:dc:b7:c6:7c:54:05:47:5d:ce:d6:cc:ad:0b:46:
ed:41:01:ba:a7:b7:05:fa:d8:3b:5c:c8:c1:16:11:
67:1c:00:0c:6c:6c:48:50:89:28:7c:6c:01:12:8c:
e7:af:ed:ff:e8:7d:8d:5e:a2:d6:c6:a8:40:33:d1:
74:1a:89:ea:e4:5e:1b:d8:0a:a3:c9:b8:67:b5:17:
7b:d1:58:4b:35:b1:f2:dd:3b:8b:e1:9c:c4:a4:53:
d9:26:04:df:a0:3e:c4:ca:61:27:d3:5c:a3:8d:71:
46:e5:78:97:4f:62:bf:11:a2:9f:b1:2d:0d:3b:4c:
f5:41:e8:f7:1e:54:1d:a3:2a:b7:f7:0d:61:3a:2b:
6c:94:94:48:36:c7:80:9a:bb:e8:e3:6c:48:64:45:
31:5c:ca:ea:b8:4b:9f:fa:19:f5:45:1a:a4:e4:e2:
01:e1:40:4a:5a:26:0e:0c:cc:de:d0:08:6c:ab:3a:
6f:08:37:91:6c:3a:a3:89:16:b3:4d:50:6b:7d:8f:
8d:90:2e:95:eb:bb:22:8e:0a:66:15:94:ec:40:c8:
0b:dc:f3:12:75:56:e9:eb:29:50:38:ed:79:ab:a2:
31:4d:a6:8c:98:3d:15:92:98:68:56:ef:68:16:05:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:53:79:9A:FA:FC:05:2B:41:16:9D:75:FD:9B:D7:28:83:60:F0:0A
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/8lN5mvr8BStBFp11_ZvXKINg8Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
79.172.250.0/23
87.229.8.0/22
87.229.23.0/24
87.229.37.0/24
87.229.97.0/24
87.229.108.0/24
87.229.112.0/24
Signature Algorithm: sha256WithRSAEncryption
80:69:6f:54:9c:e7:53:66:99:7b:b5:2e:8a:74:a5:49:a1:da:
b4:63:64:ea:42:65:4a:de:12:e2:92:92:af:7c:48:6a:f4:d6:
2d:04:03:6d:9d:6f:a6:fd:0e:e7:42:f8:8d:9a:95:6b:99:a5:
cb:b4:f2:05:db:c7:36:df:13:80:ae:cc:02:96:2b:6c:d4:75:
42:b0:b9:4c:da:a6:0c:cd:0a:7c:05:98:41:e9:cd:da:bb:41:
b4:35:c3:04:cc:93:56:55:22:4c:35:d6:46:94:0c:b0:1f:1b:
79:fe:82:34:d3:77:49:f8:81:0a:39:9b:4e:72:3b:f9:b6:d4:
d6:d8:ab:1e:06:4a:43:e6:28:d6:1f:a0:c1:6e:1b:8a:8d:18:
06:3b:fa:15:17:fe:eb:a7:50:d8:66:46:04:cc:79:91:46:5e:
71:29:4a:81:c1:62:6c:53:3c:9b:0e:29:64:ff:67:a5:3b:b6:
62:9b:fe:74:df:3b:26:ed:c8:18:fa:ad:60:08:44:5f:26:29:
6c:f1:71:56:76:88:47:b2:67:f9:04:43:ff:df:06:07:34:8f:
ac:0b:21:07:45:0b:34:6c:23:af:a1:cf:d9:28:48:28:d2:8e:
23:0a:92:7b:b4:c6:94:11:c9:c0:0f:ed:ca:2c:9e:7b:d3:a2:
07:cf:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:50:00 2025 by rpki-client