Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/52AUcuImFMUUJ0wMFIqbnBTg1Yw.roa
File: 52AUcuImFMUUJ0wMFIqbnBTg1Yw.roa (raw, json)
Hash identifier: 5g3ZbI0sigNxwb/AeQnXbgNbNKFwF2qladwbg1P7Lp4=
Subject key identifier: E7:60:14:72:E2:26:14:C5:14:27:4C:0C:14:8A:9B:9C:14:E0:D5:8C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0194D52020AB2670B721707B0CD26F17F4F7
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/52AUcuImFMUUJ0wMFIqbnBTg1Yw.roa
Signing time: Wed 05 Feb 2025 08:00:40 +0000
ROA not before: Wed 05 Feb 2025 08:00:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39679
IP address blocks: 79.172.220.0/24 maxlen: 24
87.229.71.0/24 maxlen: 24
213.181.201.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 08:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:20:20:ab:26:70:b7:21:70:7b:0c:d2:6f:17:f4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 5 08:00:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7601472e22614c514274c0c148a9b9c14e0d58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:84:ac:1e:86:b0:b6:53:e7:e5:0d:87:09:ff:
ed:c6:60:a4:23:5e:44:44:29:79:7c:cb:99:86:bb:
23:88:ff:ee:e0:68:8c:92:bf:98:39:1c:d5:82:23:
b4:f5:f1:f1:2d:25:28:de:f4:02:9b:b8:2a:f1:1b:
5b:07:40:bb:04:87:c9:ea:fd:46:4f:43:65:20:ad:
45:7b:f0:02:e5:92:0d:98:56:01:e3:a3:4d:7a:ae:
8d:9e:9b:81:7a:b2:31:3d:5d:5f:a2:8b:84:52:1f:
86:99:b9:be:99:51:ff:f9:f2:99:a3:29:21:6a:5a:
0e:a8:c0:8b:80:a1:da:ac:13:c1:3a:42:5a:30:01:
56:2b:9f:27:18:7c:f5:0d:05:99:0a:d4:d8:ff:62:
82:4a:27:a2:82:5c:8f:6d:05:18:90:79:59:7a:94:
25:be:82:5c:3d:59:02:49:b7:26:41:f5:e7:7c:17:
62:f8:d3:e1:15:7b:09:95:bb:58:1f:1b:a6:f9:9d:
70:5a:68:46:7c:37:ba:1a:e4:d1:33:f8:36:ac:6c:
ba:66:ee:cd:e6:37:7c:67:56:4a:db:1f:1f:5e:ce:
56:b6:95:9b:ea:41:75:7f:27:0f:cb:25:7e:bb:ae:
6f:67:d9:31:a9:ae:59:55:03:9e:1e:43:39:cb:ed:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:60:14:72:E2:26:14:C5:14:27:4C:0C:14:8A:9B:9C:14:E0:D5:8C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/52AUcuImFMUUJ0wMFIqbnBTg1Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.220.0/24
87.229.71.0/24
213.181.201.0/24
217.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a5:71:22:e3:92:94:26:fb:51:50:83:f3:bc:6b:b1:99:9b:
ba:07:0e:20:b8:4e:6d:e4:c5:3f:5e:a6:d8:4d:af:26:45:c1:
6d:d5:79:1f:6d:b1:98:9a:90:b4:d7:34:97:d9:fa:0a:08:94:
b0:f0:99:4e:0e:3b:88:86:13:66:1b:d5:f3:ac:c4:dd:c3:74:
ff:67:b2:0f:fb:31:13:22:08:71:c8:dc:9b:f3:f4:a4:cd:e3:
b0:b2:55:e4:32:0c:8b:2b:ba:1e:61:54:f8:57:20:69:96:39:
7f:1a:de:34:95:33:7e:91:5e:68:38:1b:38:d0:93:61:b3:55:
b8:d3:92:ea:f6:6c:2c:b4:12:d4:9b:b8:62:fd:ad:dc:02:a7:
b2:f8:af:de:b3:e9:e4:54:0a:1c:d9:94:f6:3c:ca:b4:b3:56:
1b:3c:ac:de:9a:22:7d:bf:54:a0:ee:21:79:41:66:ea:09:bf:
92:da:e7:36:4f:e5:46:92:19:e4:af:03:fd:d7:4e:59:70:9d:
ac:10:ee:6e:52:4e:b6:7c:ac:21:b0:ef:8a:08:10:af:96:7d:
c0:7f:38:dc:11:12:9b:1b:a6:f6:b2:c3:f9:ad:ba:cf:8d:46:
6e:04:71:a5:f4:0e:8f:58:f6:cd:e0:cb:d0:84:53:a3:b8:a5:
0e:68:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:11 2025 by rpki-client