Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/YD6qq8jLL3A6YZbeTyxIRVw7XGQ.roa
File: YD6qq8jLL3A6YZbeTyxIRVw7XGQ.roa (raw, json)
Hash identifier: PbpBNj2uuxa0Zou90nkSU9JcPrBfoqlToSwKGXl+fpQ=
Subject key identifier: 60:3E:AA:AB:C8:CB:2F:70:3A:61:96:DE:4F:2C:48:45:5C:3B:5C:64
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0197C62EC273EB73DA672138EEA6A55D56B9
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/YD6qq8jLL3A6YZbeTyxIRVw7XGQ.roa
Signing time: Tue 01 Jul 2025 13:30:42 +0000
ROA not before: Tue 01 Jul 2025 13:30:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.8.0/22 maxlen: 22
87.229.23.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Jul 2025 11:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:2e:c2:73:eb:73:da:67:21:38:ee:a6:a5:5d:56:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 1 13:30:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=603eaaabc8cb2f703a6196de4f2c48455c3b5c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:1f:e3:8e:5d:d7:3a:92:04:d0:b9:a3:b0:
ed:26:ee:ee:1d:19:ae:a3:90:be:69:b2:7f:29:31:
0f:9b:8c:62:00:0d:1c:78:40:c3:26:c5:82:bf:a2:
3f:c0:0e:56:c8:dd:f6:da:13:50:d4:a8:a3:1d:86:
19:17:3d:79:e9:08:6e:06:d3:27:5c:69:52:77:20:
03:60:b9:97:f4:2e:78:f3:7a:89:95:fb:a1:4a:aa:
f9:a2:e2:78:ca:81:df:99:76:23:6e:67:9e:b0:52:
5d:05:e4:9b:10:65:a3:63:5f:ab:0b:65:0c:d5:3e:
ee:97:b8:db:92:22:40:8d:5b:94:6a:a1:1e:32:b4:
29:7b:64:8f:4e:ee:88:bc:a3:c2:f2:23:75:2b:b3:
58:11:6b:7b:0a:44:e8:5d:0d:f3:60:6b:6d:71:f1:
f0:00:41:ef:46:19:dd:fd:5c:46:6d:4a:30:c9:8b:
1a:f0:e3:21:1b:5b:af:64:e8:aa:5a:24:b9:cc:79:
3b:b4:5b:39:74:1e:f5:c1:4f:e3:c9:52:b3:69:f7:
7c:dc:66:e0:3a:48:c5:da:67:e2:76:c9:61:28:03:
12:44:80:05:b2:8b:ec:c0:69:ed:d5:50:1b:d9:50:
3d:88:87:6c:23:38:1d:f0:c0:1f:49:a8:76:e7:02:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3E:AA:AB:C8:CB:2F:70:3A:61:96:DE:4F:2C:48:45:5C:3B:5C:64
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/YD6qq8jLL3A6YZbeTyxIRVw7XGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.8.0/22
87.229.23.0/24
87.229.37.0/24
87.229.108.0/24
87.229.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a6:0b:e7:40:4d:cf:9a:52:21:bc:4c:a4:fe:4a:b4:0b:29:
8e:ea:18:17:ef:8f:06:c8:0f:f8:66:b6:39:11:76:14:d7:5b:
4a:25:52:8e:48:f9:da:ac:91:a6:b2:81:c5:8d:9b:b3:bd:ca:
a6:fc:cd:9e:a4:6f:f2:22:36:2a:19:8c:50:3d:80:6f:04:71:
80:72:d8:8f:d8:c2:65:0a:b2:ce:b6:fa:16:38:5b:c6:46:86:
98:4b:a1:c2:2b:a9:b9:5b:71:8b:45:78:6b:65:2d:a5:57:bb:
dd:be:b7:71:dc:9f:4f:74:3a:1e:cb:1c:02:47:33:59:9a:a4:
1c:48:b6:3b:10:da:b8:a6:cb:c2:d4:aa:7f:d6:ab:cb:e3:2a:
ef:c3:45:22:67:78:c8:bc:ff:3a:a9:be:c9:aa:89:b7:07:f8:
6a:52:1e:9f:26:1d:43:66:ed:5e:10:b5:3c:1a:6f:bb:4d:8b:
f8:8a:76:87:25:db:d1:3d:19:e6:76:ca:8d:01:3f:78:c5:eb:
47:27:74:0d:3d:1f:df:c7:44:f5:a3:a8:46:dc:94:56:2b:c7:
34:fb:40:92:e5:79:3f:a3:89:69:f4:f4:d0:32:1b:7e:be:11:
0b:ef:8a:0b:a2:d7:7f:b5:a0:37:f5:a2:cb:7c:2c:ec:33:06:
c6:20:29:30
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZfGLsJz63PaZyE47qalXVa5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNzAxMTMzMDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDNlYWFhYmM4Y2IyZjcwM2E2MTk2ZGU0ZjJjNDg0NTVjM2I1YzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplcf445d1zqSBNC5o7DtJu7uHRmu
o5C+abJ/KTEPm4xiAA0ceEDDJsWCv6I/wA5WyN322hNQ1KijHYYZFz156QhuBtMn
XGlSdyADYLmX9C5483qJlfuhSqr5ouJ4yoHfmXYjbmeesFJdBeSbEGWjY1+rC2UM
1T7ul7jbkiJAjVuUaqEeMrQpe2SPTu6IvKPC8iN1K7NYEWt7CkToXQ3zYGttcfHw
AEHvRhnd/VxGbUowyYsa8OMhG1uvZOiqWiS5zHk7tFs5dB71wU/jyVKzafd83Gbg
OkjF2mfidslhKAMSRIAFsovswGnt1VAb2VA9iIdsIzgd8MAfSah25wLSxQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGA+qqvIyy9wOmGW3k8sSEVcO1xkMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvWUQ2cXE4akxMM0E2WVpiZVR5eElSVnc3WEdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCV+UIAwQA
V+UXAwQAV+UlAwQAV+VsAwQAV+VwMA0GCSqGSIb3DQEBCwUAA4IBAQCOpgvnQE3P
mlIhvEyk/kq0CymO6hgX748GyA/4ZrY5EXYU11tKJVKOSPnarJGmsoHFjZuzvcqm
/M2epG/yIjYqGYxQPYBvBHGActiP2MJlCrLOtvoWOFvGRoaYS6HCK6m5W3GLRXhr
ZS2lV7vdvrdx3J9PdDoeyxwCRzNZmqQcSLY7ENq4psvC1Kp/1qvL4yrvw0UiZ3jI
vP86qb7Jqom3B/hqUh6fJh1DZu1eELU8Gm+7TYv4inaHJdvRPRnmdsqNAT94xetH
J3QNPR/fx0T1o6hG3JRWK8c0+0CS5Xk/o4lp9PTQMht+vhEL74oLotd/taA39aLL
fCzsMwbGICkw
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:45:08 2025 by rpki-client