Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_EC4LDgzCngrDaIITpLBDILiQKk.roa
File: _EC4LDgzCngrDaIITpLBDILiQKk.roa (raw, json)
Hash identifier: Af6ogS8RJptwUO2JtMsduJ+mLk0PrRB9+HuhHQ+UUJM=
Subject key identifier: FC:40:B8:2C:38:33:0A:78:2B:0D:A2:08:4E:92:C1:0C:82:E2:40:A9
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01977CBB4858D22E54417E86273C9EBBD285
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_EC4LDgzCngrDaIITpLBDILiQKk.roa
Signing time: Tue 17 Jun 2025 07:12:17 +0000
ROA not before: Tue 17 Jun 2025 07:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.208.0/24 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 08:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:bb:48:58:d2:2e:54:41:7e:86:27:3c:9e:bb:d2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 17 07:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc40b82c38330a782b0da2084e92c10c82e240a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:c5:be:ae:94:70:7f:aa:28:86:8e:dd:aa:
32:a8:04:49:57:3f:b0:3b:c1:28:e9:77:8f:62:99:
fb:1e:b1:c9:09:29:f8:61:25:51:33:8e:9b:bd:47:
88:a5:f8:61:13:7f:53:87:1b:40:f6:ea:85:83:3b:
41:ef:5b:89:41:0d:7f:ad:a7:a5:74:66:12:fb:94:
93:ac:1d:80:8e:66:96:7e:6d:42:25:4c:de:fc:49:
a4:99:c8:f8:9a:1e:63:95:87:e1:cb:eb:75:f3:40:
f7:58:2f:9a:e4:b5:0b:01:99:8e:bd:12:3c:65:bf:
af:7c:1f:9b:85:d0:9f:40:32:7a:96:87:4f:f7:8a:
58:04:2c:f5:c4:83:4d:94:6f:03:00:7a:75:2e:91:
6a:45:66:ff:4e:a0:79:3b:e1:27:cd:8d:21:b8:ee:
3e:97:da:47:fa:94:28:bd:97:4e:fa:1c:52:2d:ab:
94:75:d8:08:b2:90:49:8c:e4:f0:30:ee:0a:a6:46:
d2:28:e0:0a:6e:3e:7f:48:d7:d3:13:7f:be:ac:74:
a7:dd:41:e8:d6:57:55:6a:e1:71:4f:58:4a:39:42:
67:3b:8d:cd:f7:34:23:09:b9:f5:0a:f5:de:a1:d6:
11:d3:75:7b:95:ac:79:cd:10:d9:8a:ba:9e:51:89:
e1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:40:B8:2C:38:33:0A:78:2B:0D:A2:08:4E:92:C1:0C:82:E2:40:A9
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_EC4LDgzCngrDaIITpLBDILiQKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.208.0/24
87.229.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:50:b8:46:d1:a2:53:c9:0f:8f:ae:65:c5:4c:78:13:a9:71:
0f:93:17:f2:53:ff:3e:da:64:23:73:41:1a:73:e3:3b:c5:b6:
c7:2f:fc:50:02:1e:9c:16:30:24:54:f9:e1:fc:4f:c4:85:d6:
e1:d4:c9:fb:aa:1c:eb:25:1c:19:a3:f2:90:8b:bc:27:f2:79:
bc:70:a2:b8:f8:0f:11:08:71:e0:6a:a4:76:10:fd:a9:2b:75:
d6:ae:73:4f:a2:5a:48:62:00:7c:ca:18:15:ca:c6:e3:78:f1:
d7:26:fc:6e:17:94:77:d2:6a:58:f0:05:f2:7c:31:da:bc:91:
76:92:16:fa:6d:59:ed:14:51:1a:ee:78:60:c6:76:f9:ea:de:
a6:6b:74:71:0f:40:48:c1:16:7e:40:2f:f8:50:9e:72:19:f8:
c0:93:38:09:be:e4:79:e0:76:93:e9:ed:95:85:53:43:74:b8:
b3:3f:8d:0d:01:38:15:ac:95:32:90:2c:82:d6:86:df:ae:be:
88:60:65:6b:81:10:2f:c7:0f:14:0e:2f:9e:f9:75:10:c9:c7:
cc:78:94:00:d6:98:3b:b4:de:13:6f:b4:7c:a5:71:65:c1:ad:
7a:d5:f2:2f:93:c6:6f:bb:2d:e5:60:e7:49:f0:27:c4:0d:1c:
7e:e2:e9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:29:47 2025 by rpki-client