Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4HS4p4KpVg273aTaaRpkctW9pT8.roa
File: 4HS4p4KpVg273aTaaRpkctW9pT8.roa (raw, json)
Hash identifier: N0Cn1XyFYWMG04fq9ihxqEXsb4VhoslptCiiRy50Wmo=
Subject key identifier: E0:74:B8:A7:82:A9:56:0D:BB:DD:A4:DA:69:1A:64:72:D5:BD:A5:3F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019268C7F97CC155FE55D90132A2C8D2A9B3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4HS4p4KpVg273aTaaRpkctW9pT8.roa
Signing time: Mon 07 Oct 2024 20:59:48 +0000
ROA not before: Mon 07 Oct 2024 20:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
79.172.211.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.16.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.0.0/24 maxlen: 24
87.229.12.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.205.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.211.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
2a02:730::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 25 Oct 2024 12:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:68:c7:f9:7c:c1:55:fe:55:d9:01:32:a2:c8:d2:a9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Oct 7 20:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e074b8a782a9560dbbdda4da691a6472d5bda53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:aa:86:af:82:7c:12:87:8c:a1:c6:e3:97:
0c:32:be:30:74:26:47:25:95:b3:a2:08:9c:5b:16:
7c:e7:78:bf:6e:ed:be:dc:f6:83:11:0f:5d:f5:5e:
e3:14:66:78:af:fb:e7:98:fa:6e:7c:20:4a:3e:1b:
54:ad:ec:c1:6c:ef:ba:69:9e:59:47:f6:b2:76:75:
ab:83:d1:4a:b2:90:14:56:ec:3e:5d:14:fc:bf:b1:
eb:23:9f:22:b5:52:03:dc:3a:eb:98:d1:48:64:de:
62:ef:ba:09:9f:27:4e:dc:6d:61:9e:b4:1f:8e:27:
30:b6:6a:51:51:8c:42:be:7e:59:21:0e:42:5d:f8:
31:8b:96:4d:3c:56:19:52:5c:55:ba:de:fc:9f:67:
ee:93:c5:50:65:49:f9:4e:69:08:21:d0:72:b5:0d:
b1:66:dd:23:2f:2c:ac:ef:48:22:0e:b8:bc:61:3d:
40:c0:ba:f3:9d:07:71:2a:82:d6:2d:5e:1f:cf:55:
c3:78:8b:4e:96:d0:40:34:07:28:60:60:35:af:9c:
b6:eb:28:f6:fe:d1:81:46:b9:a0:c9:8c:30:78:3e:
6f:3c:74:33:09:d9:2a:fd:88:0a:8d:f7:3e:41:7d:
ba:d9:a3:06:9a:a0:e7:6b:f2:fd:e9:13:9f:56:59:
f1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:74:B8:A7:82:A9:56:0D:BB:DD:A4:DA:69:1A:64:72:D5:BD:A5:3F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4HS4p4KpVg273aTaaRpkctW9pT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.0.0/19
87.229.0.0/24
87.229.12.0/24
87.229.15.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.65.0-87.229.66.255
87.229.73.0-87.229.75.255
87.229.78.0/24
87.229.83.0/24
87.229.93.0-87.229.94.255
87.229.96.0/24
87.229.105.0/24
87.229.113.0-87.229.114.255
87.229.116.0/24
87.229.118.0/24
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/23
213.181.207.0/24
213.181.210.0/23
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.53.255
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
60:df:95:ee:8b:2c:ea:e0:d2:cd:b2:f9:67:86:77:e0:aa:48:
73:09:eb:46:68:ac:f8:a9:46:40:7a:7f:f0:f4:30:23:31:e5:
f9:09:f5:19:af:9b:7e:85:1f:f1:00:fb:e8:34:87:fd:cc:0f:
23:cc:9d:6a:f4:34:a8:5c:2d:c0:14:4b:c3:7e:b1:1f:ff:5c:
57:a0:f0:7c:41:88:86:a5:13:a4:00:84:df:92:b2:6a:c6:02:
2d:9e:9c:2f:a0:b0:9b:e2:c8:13:3c:62:88:c2:c6:cf:5c:e0:
5a:9c:bd:d9:42:ba:5c:24:f6:c2:13:a5:b9:16:a6:ff:0c:e4:
c7:15:b6:99:7f:dc:ce:b1:6b:6d:6b:7a:3d:37:94:c3:6c:63:
18:42:5f:a9:77:3c:0f:39:3a:6b:b9:de:9e:aa:fd:8d:e3:c7:
6e:39:85:10:63:12:42:bc:15:fb:05:e6:a3:91:ec:51:46:fe:
32:05:03:6f:8e:1f:ac:6c:4c:d9:d6:4d:22:e0:f5:ee:2e:67:
e8:8b:b0:7c:b7:b5:22:ad:93:0b:13:b5:92:9d:0e:d1:3d:ab:
d3:12:27:9e:5c:ba:be:95:35:be:e8:e3:6f:c4:97:15:4e:df:
bd:5f:2f:9a:db:86:43:59:02:ad:0a:ae:fb:a0:e5:e6:da:2a:
f9:2d:fb:b4
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgISAZJox/l8wVX+VdkBMqLI0qmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQxMDA3MjA1OTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDc0YjhhNzgyYTk1NjBkYmJkZGE0ZGE2OTFhNjQ3MmQ1YmRhNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhaqhq+CfBKHjKHG45cMMr4wdCZH
JZWzogicWxZ853i/bu2+3PaDEQ9d9V7jFGZ4r/vnmPpufCBKPhtUrezBbO+6aZ5Z
R/aydnWrg9FKspAUVuw+XRT8v7HrI58itVID3DrrmNFIZN5i77oJnydO3G1hnrQf
jicwtmpRUYxCvn5ZIQ5CXfgxi5ZNPFYZUlxVut78n2fuk8VQZUn5TmkIIdBytQ2x
Zt0jLyys70giDri8YT1AwLrznQdxKoLWLV4fz1XDeItOltBANAcoYGA1r5y26yj2
/tGBRrmgyYwweD5vPHQzCdkq/YgKjfc+QX262aMGmqDna/L96ROfVlnxxwIDAQAB
o4IDGTCCAxUwHQYDVR0OBBYEFOB0uKeCqVYNu92k2mkaZHLVvaU/MB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvNEhTNHA0S3BWZzI3M2FUYWFScGtjdFc5cFQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLQYIKwYBBQUHAQcBAf8EggEcMIIBGDCCAQUEAgABMIH+
AwQGT6zAAwQFVBUAAwQAV+UAAwQAV+UMAwQAV+UPAwQAV+UaAwQBV+UgAwQAV+Ut
MAwDBABX5TUDBANX5TADBAFX5TowDAMEAFflQQMEAFflQjAMAwQAV+VJAwQCV+VI
AwQAV+VOAwQAV+VTMAwDBABX5V0DBABX5V4DBABX5WADBABX5WkwDAMEAFflcQME
AFflcgMEAFfldAMEAFfldgMEA1+KwAMEBLLu0AMEANW1yAMEAdW1zAMEANW1zwME
AdW10gMEANW12wMEANW13TAMAwQB2XEyAwQB2XE0AwQA2XE9AwQA2XE/MAwDBATZ
kDADBADZkDIDBAPZkDgwDQQCAAIwBwMFACoCBzAwDQYJKoZIhvcNAQELBQADggEB
AGDfle6LLOrg0s2y+WeGd+CqSHMJ60ZorPipRkB6f/D0MCMx5fkJ9Rmvm36FH/EA
++g0h/3MDyPMnWr0NKhcLcAUS8N+sR//XFeg8HxBiIalE6QAhN+SsmrGAi2enC+g
sJviyBM8YojCxs9c4FqcvdlCulwk9sITpbkWpv8M5McVtpl/3M6xa21rej03lMNs
YxhCX6l3PA85Omu53p6q/Y3jx245hRBjEkK8FfsF5qOR7FFG/jIFA2+OH6xsTNnW
TSLg9e4uZ+iLsHy3tSKtkwsTtZKdDtE9q9MSJ55cur6VNb7o42/ElxVO371fL5rb
hkNZAq0Krvug5ebaKvkt+7Q=
-----END CERTIFICATE-----
Generated at Sun Apr 13 13:11:10 2025 by rpki-client