Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1ACDzsajYjSRyTFQ7Q1so7-SQiU.roa
File: 1ACDzsajYjSRyTFQ7Q1so7-SQiU.roa (raw, json)
Hash identifier: MZ2cDRGVgurB6mYAzkae5Z49zZZuHVd3iivqsSDSDEU=
Subject key identifier: D4:00:83:CE:C6:A3:62:34:91:C9:31:50:ED:0D:6C:A3:BF:92:42:25
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0196DD201913FA4ED87DD059C2FC4AD9569B
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1ACDzsajYjSRyTFQ7Q1so7-SQiU.roa
Signing time: Sat 17 May 2025 07:23:10 +0000
ROA not before: Sat 17 May 2025 07:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.208.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.34.0/24 maxlen: 24
87.229.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 06:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:20:19:13:fa:4e:d8:7d:d0:59:c2:fc:4a:d9:56:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 17 07:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d40083cec6a3623491c93150ed0d6ca3bf924225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:a0:8a:0c:d4:a2:1d:c8:db:84:0b:d8:38:
a8:9f:42:44:4f:2a:e9:04:67:8b:ac:a3:42:7e:3d:
bc:a9:c1:fb:42:d6:5e:49:77:29:c0:1e:38:12:f9:
cf:16:e6:93:98:82:8c:cf:f1:a1:ab:03:e3:57:f2:
84:cd:96:11:b1:86:f5:19:92:5d:35:4b:7c:2b:de:
26:dc:cd:39:24:fd:60:04:09:d9:12:a6:17:5a:95:
52:28:39:04:a1:13:53:6c:1b:b4:06:00:77:85:8a:
2f:44:8b:9b:19:83:eb:26:78:ad:89:0c:c0:50:0a:
2a:a1:68:69:ce:99:7c:9f:aa:dd:c7:d7:99:43:80:
d8:b7:d3:13:b8:6f:ea:a7:fd:bf:83:86:fc:66:a1:
02:89:2a:3e:0d:dc:16:44:c6:d8:49:d2:04:a6:11:
76:fb:79:6e:99:58:cf:09:79:ed:63:33:75:d8:5a:
4f:bb:06:81:ef:a6:de:46:ff:a5:50:4e:eb:f4:2e:
80:3a:c8:ab:1a:58:68:f4:04:9b:f1:8b:26:f8:2e:
3b:52:43:19:9f:54:5c:93:e6:40:d5:df:8c:54:b2:
86:93:96:a8:01:3a:00:75:bf:c7:58:2b:41:a0:03:
9e:ab:77:21:58:f1:57:14:22:bf:98:89:94:e8:6e:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:00:83:CE:C6:A3:62:34:91:C9:31:50:ED:0D:6C:A3:BF:92:42:25
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1ACDzsajYjSRyTFQ7Q1so7-SQiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.208.0/24
79.172.228.0/24
87.229.8.0/22
87.229.34.0/24
87.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
56:55:02:93:b9:fc:d5:88:7e:ca:55:8e:87:01:50:43:e9:16:
e1:2e:93:31:46:bd:b4:6e:65:c1:b9:ad:b4:a5:0f:5d:00:f6:
d2:7c:1f:50:36:b4:c8:13:11:b8:08:fe:57:a2:20:24:9d:ad:
c6:52:c3:c3:15:2c:4f:da:f9:57:db:71:9f:40:82:99:55:81:
ed:f4:e4:cc:e5:5b:f8:97:dd:58:82:8c:9b:13:4a:78:59:32:
15:52:4e:99:5a:22:38:61:56:37:a8:4d:93:2f:ec:77:25:e2:
68:c9:fa:57:5b:db:3a:1f:18:b2:dc:9f:f5:59:e8:4a:4d:e3:
79:ea:ff:e9:4e:7c:41:f3:f4:fa:05:6f:1c:59:1c:26:57:d5:
2e:93:b8:8f:c0:4c:36:5f:d9:fa:9e:32:92:26:82:4f:c6:68:
7f:18:e4:58:fb:44:9a:61:3b:cf:2e:d3:49:6f:66:d1:1a:32:
17:ca:79:45:6a:12:3e:67:f9:51:0a:c9:21:4a:a5:1c:ff:8f:
03:a4:3f:a7:76:e1:9a:25:9b:cf:71:b9:6a:a4:7b:97:7c:d4:
f9:96:24:51:83:fc:38:c7:3f:f9:ed:b3:08:cf:3a:16:0e:0e:
ac:cd:0e:44:95:eb:32:44:db:d8:1b:16:f4:3d:fb:0b:e2:9d:
5c:52:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:45 2025 by rpki-client