Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/MDqSjtL03mu5Rk8JfDN-KkwjAug.roa
File: MDqSjtL03mu5Rk8JfDN-KkwjAug.roa (raw, json)
Hash identifier: tw8gSwvvYuL/lnwbVWnOMcl6fDqC0YbYvvFR5ZHqJxE=
Subject key identifier: 30:3A:92:8E:D2:F4:DE:6B:B9:46:4F:09:7C:33:7E:2A:4C:23:02:E8
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01977CBB48D7E256F39C48F13542934B70E3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/MDqSjtL03mu5Rk8JfDN-KkwjAug.roa
Signing time: Tue 17 Jun 2025 07:12:18 +0000
ROA not before: Tue 17 Jun 2025 07:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 87.229.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Jun 2025 21:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:bb:48:d7:e2:56:f3:9c:48:f1:35:42:93:4b:70:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 17 07:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=303a928ed2f4de6bb9464f097c337e2a4c2302e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:6e:30:20:2a:71:7c:4b:c5:90:74:3b:8c:
11:d2:78:41:11:5f:f9:ba:a2:45:d6:2d:3c:7e:ad:
71:c0:2e:f3:3f:bc:39:02:2a:5d:32:2b:78:b3:2e:
c4:df:85:46:22:7d:3d:ec:2e:0c:fc:6a:44:19:d3:
92:b7:d8:f7:63:9c:54:95:c7:dd:e7:b9:fc:d1:3b:
7f:81:5d:31:5f:58:6f:52:94:0c:25:21:82:ed:47:
c2:e8:3d:16:ad:2c:74:f5:1a:73:f3:ae:e2:89:3c:
e7:e7:b3:64:88:6d:61:1a:f2:25:17:cb:74:54:95:
a2:93:ac:fc:fc:cc:77:80:1d:83:f8:f9:54:ec:82:
1d:f0:e6:98:04:f2:ad:d0:85:06:00:75:02:1e:88:
54:24:e5:f0:06:f2:c2:ba:16:56:a0:e3:85:35:a6:
d9:c2:4d:c5:91:42:62:51:d5:1f:32:55:cb:2c:27:
eb:9d:1f:89:5a:e8:c1:7e:97:18:a7:48:6e:39:67:
52:fa:1f:e0:63:3c:fc:7c:95:e8:cf:1e:84:3c:ff:
d2:a6:40:a0:15:7e:7f:02:48:9c:26:e9:7e:df:c4:
92:08:2a:fc:88:ab:cd:cc:f5:f2:13:b3:f4:0c:57:
00:fa:e5:13:96:5c:6e:32:be:72:da:d5:01:c4:0a:
ca:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3A:92:8E:D2:F4:DE:6B:B9:46:4F:09:7C:33:7E:2A:4C:23:02:E8
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/MDqSjtL03mu5Rk8JfDN-KkwjAug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ae:05:1f:31:83:78:58:5b:cc:1a:fe:a0:eb:97:e1:82:de:
9e:59:e4:5e:3b:41:6b:91:c8:35:27:47:a6:fe:a9:9d:c4:46:
90:df:26:ea:f5:9f:24:ba:ca:95:d1:27:ff:5e:37:60:1b:6a:
9b:86:6a:2b:83:d5:d5:25:c9:1e:11:18:4a:87:86:10:47:d8:
ec:7e:91:82:1d:6c:fa:a3:18:4b:31:f1:07:57:7b:8b:18:cb:
1d:39:91:df:a2:d8:15:67:e6:2e:cb:df:f3:ed:68:6b:ec:f8:
85:85:8a:81:46:6e:01:51:db:c7:00:48:4f:30:9b:77:09:c1:
1b:57:28:f8:c9:a8:80:ff:26:0a:f4:b3:1a:18:60:04:67:5b:
11:5f:9a:1e:ef:c6:3e:d6:02:7e:e0:68:b6:24:9f:2a:c4:71:
0b:a8:63:f1:30:93:18:2d:86:a6:a0:7b:7a:19:3e:cc:8e:8c:
cf:44:fd:df:62:01:e6:f2:48:91:7a:38:1d:34:e9:f7:4e:10:
a0:75:a0:d9:9e:8b:41:9c:ac:64:33:2b:5f:e4:3b:9a:d6:11:
aa:f5:8d:21:bf:a2:66:28:9b:11:d0:04:5f:f6:a2:e1:15:8a:
52:2e:31:21:7b:94:1b:e0:61:94:e8:c8:2d:e4:67:2e:27:db:
c2:d3:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:49:20 2025 by rpki-client