Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/MySCQz1rqmS9c_VV43IWBQNQbKM.roa
File: MySCQz1rqmS9c_VV43IWBQNQbKM.roa (raw, json)
Hash identifier: Ev0O2Dr/kyIC0ZPi7bmVlYpobGsShvp4vSvplaw4WgQ=
Subject key identifier: 33:24:82:43:3D:6B:AA:64:BD:73:F5:55:E3:72:16:05:03:50:6C:A3
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01979453B5C860C14080E9992AEB2A28A113
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/MySCQz1rqmS9c_VV43IWBQNQbKM.roa
Signing time: Sat 21 Jun 2025 21:10:03 +0000
ROA not before: Sat 21 Jun 2025 21:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.8.0/22 maxlen: 22
87.229.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jun 2025 06:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:94:53:b5:c8:60:c1:40:80:e9:99:2a:eb:2a:28:a1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 21 21:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=332482433d6baa64bd73f555e372160503506ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:d8:b6:b3:ce:36:1f:c0:33:39:96:92:6f:
8b:8a:9b:12:d3:1c:1a:80:e5:db:da:b9:c9:a6:5a:
e0:96:e2:15:d9:68:82:f8:5a:f6:f6:b8:8f:91:47:
5b:bc:75:f8:2c:73:0b:98:62:c0:38:ef:10:b5:fb:
44:83:3f:8e:b7:6e:8b:de:64:a0:bd:28:9b:40:f6:
bb:66:2b:0a:91:c7:2e:ae:6f:bc:fa:d0:1c:bd:fd:
4d:20:9d:c8:b3:f1:21:9b:6d:9a:49:63:ba:94:30:
af:5e:c6:7c:22:f9:27:e8:36:3c:86:df:b3:51:bc:
06:7f:64:d5:0a:ac:73:e6:d7:9f:00:99:af:8c:26:
7f:8d:44:93:61:b3:1c:40:34:27:a0:7e:2c:64:32:
31:b5:3e:d9:9e:03:2f:a3:65:29:10:18:54:10:4e:
8d:74:f0:e2:6c:11:33:58:2a:b1:d0:a4:b1:a7:f0:
7b:45:79:b4:1a:4b:d8:1c:20:6e:ff:07:a6:d5:99:
d5:b3:41:8f:d0:42:dc:e1:2f:ff:c2:a7:c3:0c:71:
62:66:19:1d:bd:d5:54:92:be:37:f7:69:b4:66:5d:
29:38:2e:a7:a9:60:7e:ab:0f:d2:d1:ad:e2:af:70:
68:6f:03:b5:08:86:87:6e:6d:e0:90:39:44:2b:c8:
8e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:24:82:43:3D:6B:AA:64:BD:73:F5:55:E3:72:16:05:03:50:6C:A3
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/MySCQz1rqmS9c_VV43IWBQNQbKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.8.0/22
87.229.23.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a7:ac:0d:bf:e3:1d:89:6a:5c:f8:a3:08:ec:6d:af:09:68:
ab:3a:b4:ad:96:94:1f:e2:6e:8c:c3:f6:50:48:45:de:45:25:
86:6e:c2:5a:47:f8:57:f8:61:d4:8a:1e:dd:0e:46:40:10:63:
31:85:ea:23:a1:73:7c:a6:45:26:6c:6a:57:81:b1:fe:6a:e2:
84:f6:b1:f9:77:32:ff:63:08:a5:fa:79:9e:6e:f9:0a:b1:6a:
21:22:7d:00:17:51:80:2a:b8:3e:6d:ed:56:78:0f:88:74:46:
24:75:83:cf:72:60:dd:3d:e7:0c:80:b2:80:4c:6e:94:d7:a5:
6a:fb:c7:ca:93:36:f2:2d:86:67:bf:9e:f3:74:e8:17:2b:6b:
60:d8:7c:2a:ef:67:1e:0c:b7:ff:57:97:bc:d8:9b:00:50:76:
a2:ba:b1:84:e0:2a:39:71:fc:5e:20:a1:ed:c8:f3:b8:0d:d7:
84:42:f1:61:b0:39:be:57:0f:32:47:80:87:8a:ef:9d:f8:5a:
80:5a:c1:b7:0f:e2:62:ec:8f:e1:72:56:f8:dd:2b:71:16:40:
dc:63:0d:b4:e0:3a:be:99:1f:09:74:12:53:f0:10:c7:b0:d3:
2f:c1:24:74:57:f8:5e:f8:28:18:ac:03:59:82:37:e2:8f:33:
b4:ab:ae:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:41:25 2025 by rpki-client