Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/GTZm6MQ4eFumHyoD8Pry-9Za-A0.roa
File: GTZm6MQ4eFumHyoD8Pry-9Za-A0.roa (raw, json)
Hash identifier: tMFIBm7D6ARtxH8NpHDp2dSDIJzLUfu6aPyOxlDjuaI=
Subject key identifier: 19:36:66:E8:C4:38:78:5B:A6:1F:2A:03:F0:FA:F2:FB:D6:5A:F8:0D
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01983B2A00BC76B168FBB3FC65CAA156E269
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/GTZm6MQ4eFumHyoD8Pry-9Za-A0.roa
Signing time: Thu 24 Jul 2025 06:41:05 +0000
ROA not before: Thu 24 Jul 2025 06:41:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.200.0/23 maxlen: 24
79.172.208.0/24 maxlen: 24
79.172.218.0/24 maxlen: 24
79.172.219.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
79.172.242.0/24 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.23.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Jul 2025 06:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:2a:00:bc:76:b1:68:fb:b3:fc:65:ca:a1:56:e2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 24 06:41:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=193666e8c438785ba61f2a03f0faf2fbd65af80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:10:58:54:6f:e4:ec:ff:76:7d:8e:2b:1f:
74:c6:39:c5:c6:60:33:cb:8e:f3:af:d0:d1:eb:38:
aa:1c:db:4c:51:20:3b:24:ca:0b:cd:eb:30:3d:d6:
d7:3e:76:84:2b:dd:0a:6e:39:22:da:c7:eb:dc:58:
ff:c6:26:1d:56:ad:5d:3b:df:0c:01:c6:3b:45:65:
09:70:22:29:23:87:00:4b:b3:d9:48:f4:4d:6e:6a:
1a:68:20:a6:3d:63:9c:b6:06:b4:16:9c:46:3f:d5:
30:50:3c:e1:d9:88:58:d4:b0:e7:74:4e:54:3a:76:
33:15:0a:13:80:19:78:de:3d:ff:f3:68:de:25:79:
83:18:0b:6a:f1:c5:14:68:09:8d:ae:71:16:e8:b7:
f8:09:ae:ed:91:9c:09:00:29:08:47:cf:ee:4d:34:
47:db:31:4f:a4:71:c8:57:bf:e7:00:19:9f:f1:dd:
71:c6:9d:04:59:62:76:ac:ae:67:f2:f8:49:7c:95:
a3:a7:d9:64:ee:08:67:f5:85:12:5a:4c:7e:ba:ed:
e8:3a:ad:7a:ca:6f:03:04:90:fb:e5:fd:16:a0:16:
f3:db:15:17:86:69:8f:3a:f0:9c:19:ff:f0:9d:b5:
56:2b:c2:6b:d3:17:a7:44:39:24:24:ca:71:36:6a:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:36:66:E8:C4:38:78:5B:A6:1F:2A:03:F0:FA:F2:FB:D6:5A:F8:0D
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/GTZm6MQ4eFumHyoD8Pry-9Za-A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
79.172.208.0/24
79.172.218.0/23
79.172.228.0/24
79.172.242.0/24
79.172.250.0/23
87.229.8.0/22
87.229.23.0/24
87.229.97.0/24
87.229.108.0/24
87.229.112.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:48:da:3d:c6:b5:cd:ee:74:c6:9b:12:89:b7:3b:bc:a0:63:
7d:d9:1b:f6:3b:e7:fa:ae:9a:da:fb:a1:8b:15:95:ef:d9:51:
2b:33:63:0f:ec:3b:54:e6:4d:a5:63:87:51:4f:fc:e4:14:7f:
06:e2:b0:5c:f9:ac:d6:9e:57:35:40:eb:89:2e:5d:9d:43:6e:
8f:6f:29:d2:ca:8e:2b:84:26:f3:dd:f6:cf:25:40:44:73:a7:
66:6e:d6:72:19:c5:ec:8c:e6:05:44:fb:2a:bf:4b:fb:20:53:
62:e9:32:f0:41:cd:1d:40:ce:c9:ff:cb:56:69:bc:0d:13:86:
13:1a:52:d5:6d:30:fc:54:95:64:73:bb:b8:fb:67:37:b3:7e:
ce:1b:7d:bd:43:95:70:87:37:45:f6:7c:1f:d7:0e:5d:85:43:
56:44:d9:a2:01:41:ee:ba:0b:ab:33:50:35:e8:83:40:12:a4:
df:4e:be:05:d6:e6:de:9f:ac:13:86:f0:5f:42:ed:8e:32:b0:
79:13:fb:96:6d:5b:c4:a7:d2:c5:e9:31:45:06:4b:5f:43:3f:
57:e3:a0:82:a2:b4:2f:f2:e2:2c:13:6f:50:cc:fd:a9:9c:f1:
84:eb:73:16:63:13:0a:97:50:e4:1b:4a:e8:f1:51:8b:a1:01:
98:b2:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:40:23 2025 by rpki-client