Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/5_0gTLakf0_AybpVFP2AETrRBhQ.roa
File: 5_0gTLakf0_AybpVFP2AETrRBhQ.roa (raw, json)
Hash identifier: rPmqos2xA0IyWro34H3g3QAW9Pi5a1RjXhUwPS+1OKw=
Subject key identifier: E7:FD:20:4C:B6:A4:7F:4F:C0:C9:BA:55:14:FD:80:11:3A:D1:06:14
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0193AF7CA948F1756E536BA775FBD0614123
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/5_0gTLakf0_AybpVFP2AETrRBhQ.roa
Signing time: Tue 10 Dec 2024 07:33:22 +0000
ROA not before: Tue 10 Dec 2024 07:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 87.229.70.0/24 maxlen: 24
87.229.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:7c:a9:48:f1:75:6e:53:6b:a7:75:fb:d0:61:41:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Dec 10 07:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7fd204cb6a47f4fc0c9ba5514fd80113ad10614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:2f:29:cf:24:56:39:c9:eb:35:00:5e:40:
d3:40:20:5d:19:d2:f0:7f:18:39:29:fb:81:c5:f6:
4f:a7:6d:ec:24:e2:bd:66:da:24:90:bf:e4:3a:a8:
86:b6:b1:05:4e:87:cf:56:75:00:06:51:fd:e9:a4:
62:97:fe:55:45:d2:61:7c:1a:a5:a1:0c:05:83:6c:
8d:d8:77:a8:0e:d8:66:85:3b:cb:9e:69:06:7e:a3:
3f:27:fa:2f:0e:92:4f:a1:bc:65:b6:46:d2:b8:54:
88:e1:dd:88:7d:2e:1f:d7:26:92:cc:d7:6e:3d:63:
54:71:f3:81:1e:9c:b9:e5:be:90:0d:44:8e:9e:b5:
b8:79:20:2d:a8:1f:8d:1c:19:a2:37:f3:2f:bd:24:
f5:e0:d7:d4:2c:5b:e7:07:ce:7e:cf:5b:5a:d0:0b:
6d:d7:22:64:6d:a6:60:ce:e9:5c:e7:38:68:2b:88:
e0:86:93:7b:cb:67:20:60:0b:76:1c:2b:4b:76:a3:
22:17:f9:24:cb:c4:9e:7a:f2:94:34:61:89:d2:32:
34:82:79:ce:1a:89:7f:ff:e9:40:52:96:af:0a:94:
ef:52:e6:57:6e:ff:2b:c5:79:de:62:c9:f2:88:5c:
ac:31:99:ed:28:2d:dc:b0:02:c5:66:10:15:5f:ff:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FD:20:4C:B6:A4:7F:4F:C0:C9:BA:55:14:FD:80:11:3A:D1:06:14
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/5_0gTLakf0_AybpVFP2AETrRBhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.70.0/24
87.229.95.0/24
Signature Algorithm: sha256WithRSAEncryption
26:96:39:f7:e3:d3:05:a6:7d:58:b0:01:bb:32:0a:77:96:54:
1d:88:71:79:4a:14:58:80:b4:7c:24:e8:9a:03:c2:8c:de:a7:
6c:a7:1c:a9:fb:93:ca:e7:b6:f0:c9:68:0b:8f:ac:31:4a:0e:
1e:f2:b8:a2:88:d2:a5:00:b1:62:8a:66:90:8f:08:ee:3a:7a:
1d:d3:97:b7:db:93:2d:f2:da:de:9e:b1:21:25:54:d6:6d:e0:
fa:db:e2:b2:af:3d:fb:da:2f:0f:f2:62:9d:ab:5d:3b:9f:76:
41:61:9e:21:18:f0:b0:db:18:9b:d3:4a:b6:3c:d8:f4:69:d1:
be:c1:6a:52:a6:dd:c5:8d:4b:4e:74:0a:8e:07:2b:84:61:e1:
9d:4f:fa:ba:3f:9d:b3:72:a9:00:70:4b:01:e8:42:e1:0d:28:
d0:eb:bd:05:af:57:68:50:f6:9e:bf:3a:c1:14:ef:b1:bc:88:
34:d8:4f:48:74:c0:e3:66:be:50:54:0e:dc:7c:91:8c:06:d3:
9a:2b:df:7f:46:12:8f:7f:a9:6b:29:bb:04:35:72:86:c5:88:
23:95:44:04:6a:a6:a2:ef:43:27:94:28:7b:62:97:2f:82:ec:
c7:24:94:df:7b:f8:c9:b6:a6:fd:14:6f:d5:53:71:5b:d7:50:
81:57:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:56 2025 by rpki-client