Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/a5A7pgf-saiC6ePXFOLi6Znm8r4.roa
File: a5A7pgf-saiC6ePXFOLi6Znm8r4.roa (raw, json)
Hash identifier: WiB75bxVTlArKQ//I8dN6SYqW3kMDS6k60el5ar0Jvo=
Subject key identifier: 6B:90:3B:A6:07:FE:B1:A8:82:E9:E3:D7:14:E2:E2:E9:99:E6:F2:BE
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0197E3CA68C8B807F1B3485F49F5533B8C4F
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/a5A7pgf-saiC6ePXFOLi6Znm8r4.roa
Signing time: Mon 07 Jul 2025 07:29:42 +0000
ROA not before: Mon 07 Jul 2025 07:29:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.200.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.23.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Jul 2025 06:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:ca:68:c8:b8:07:f1:b3:48:5f:49:f5:53:3b:8c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 7 07:29:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b903ba607feb1a882e9e3d714e2e2e999e6f2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:70:bd:41:7c:cd:f5:34:92:09:e5:79:a2:
b4:3b:c3:bb:2b:3e:c9:83:38:c6:be:80:a0:6b:b4:
75:56:80:8b:8b:40:cf:77:a4:48:b2:ec:a2:5a:30:
37:73:47:d4:60:c1:eb:a9:c6:7a:ab:6c:73:62:85:
52:2a:61:66:5f:8d:fd:8f:e7:d3:e1:c9:05:85:4a:
c0:06:f1:42:c3:a1:ea:94:4f:34:c4:f1:6c:c6:3b:
12:f5:b2:17:5a:34:50:ef:43:96:27:75:9b:75:59:
67:5f:ee:4f:04:10:c0:be:3a:e1:1e:46:75:f4:f8:
8e:c6:1b:f3:f0:a8:d0:95:e4:93:f0:84:56:69:27:
0e:84:bb:5c:06:a7:be:45:70:9f:29:ee:a5:0e:bb:
5d:e2:de:70:3e:93:3f:29:d4:a0:53:bb:22:3b:35:
50:52:c2:0f:0a:82:a0:ac:30:65:a1:26:18:a0:65:
b2:b0:b9:02:e2:a9:e3:a4:c6:43:57:89:3d:43:40:
b9:da:0b:1a:28:b9:21:bb:08:0b:d0:ec:47:8e:30:
dd:8c:e3:93:dc:1b:2e:36:0d:b5:d7:43:91:52:e5:
87:c5:27:93:5a:b7:30:23:83:52:f6:f3:d1:d5:af:
90:4a:08:b9:17:b6:91:3d:68:f0:26:4a:2f:86:df:
e3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:90:3B:A6:07:FE:B1:A8:82:E9:E3:D7:14:E2:E2:E9:99:E6:F2:BE
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/a5A7pgf-saiC6ePXFOLi6Znm8r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
87.229.8.0/22
87.229.23.0/24
87.229.37.0/24
87.229.97.0/24
87.229.108.0/24
87.229.112.0/24
Signature Algorithm: sha256WithRSAEncryption
48:dd:b8:af:98:6f:63:af:5d:d4:9d:5e:95:b6:14:2a:cc:c8:
ab:1f:ff:18:2b:b7:c8:17:35:90:3a:b1:00:0b:3c:cc:da:0c:
49:50:cd:7c:1e:d6:74:2b:4f:ab:e2:bd:d7:95:d3:7c:e1:7c:
47:b3:74:11:4b:9b:13:0c:b3:ce:90:b1:0a:be:e0:0f:14:81:
5e:30:4e:97:9e:42:41:ff:6a:c6:bd:7e:e3:0a:7f:ca:ea:b2:
d8:18:97:77:67:2b:65:76:c0:3d:2a:32:ee:74:48:44:4c:b6:
e2:5f:c9:0a:c4:d2:73:4a:6c:83:67:d2:f1:d2:74:d6:1b:5c:
fe:14:e6:99:2f:92:fb:22:d0:d6:c5:cd:6e:0e:5b:0d:7e:e8:
8e:fe:cd:05:1b:6e:fa:05:aa:d9:9c:43:b9:6b:22:0d:34:7a:
51:19:4b:f2:9f:a7:30:82:d6:6e:54:3d:35:35:10:a2:50:a0:
5a:6e:c2:ee:cc:e5:f2:a7:23:07:85:0b:e9:93:0d:f1:89:83:
73:a1:49:9f:62:f9:eb:08:6f:3a:89:7e:fa:7f:e2:36:29:87:
2d:e9:22:cd:dc:f3:09:9b:6b:6c:9c:5f:ed:4c:a8:e2:20:dd:
68:de:71:0e:97:00:c1:c6:4a:14:b4:ea:12:d0:f3:e9:2e:9e:
2f:cf:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:39:51 2025 by rpki-client