Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7lGFcDmekoP84-MT2SCk5Ni2N9I.roa
File: 7lGFcDmekoP84-MT2SCk5Ni2N9I.roa (raw, json)
Hash identifier: lFc4iPDqvXvvRYSXrOZn/2tIWW+tGHofDOcaIy6CqXM=
Subject key identifier: EE:51:85:70:39:9E:92:83:FC:E3:E3:13:D9:20:A4:E4:D8:B6:37:D2
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0194F98974B9A2445A18B44D8A61B8F5ADDF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7lGFcDmekoP84-MT2SCk5Ni2N9I.roa
Signing time: Wed 12 Feb 2025 09:42:02 +0000
ROA not before: Wed 12 Feb 2025 09:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 10:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:89:74:b9:a2:44:5a:18:b4:4d:8a:61:b8:f5:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 12 09:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee518570399e9283fce3e313d920a4e4d8b637d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:aa:22:af:1b:e0:0f:c1:ed:9e:6a:0b:ed:
0f:ff:38:40:07:a9:c2:ba:03:17:3d:d5:f9:78:12:
83:45:2a:17:7c:fc:2b:58:31:1b:62:a5:c6:f4:09:
be:5e:ae:27:97:43:b6:25:45:07:26:fb:ae:2e:74:
11:bf:bf:d7:4b:f6:1e:d1:18:f7:45:88:f9:7a:de:
ab:79:dd:de:95:f6:19:e2:c0:ab:9b:23:4b:e3:b2:
d7:65:04:f6:38:b3:10:5c:1e:f3:f2:21:0c:36:dd:
8e:04:2d:54:5e:fd:d3:58:54:63:a3:a0:7c:1a:a3:
de:12:ef:3e:57:6e:73:76:01:a2:46:6f:3f:fd:60:
b6:94:9b:24:b9:ee:b1:02:65:0c:ce:66:04:65:4e:
5e:b6:03:e9:ce:f3:31:1a:de:e6:d3:24:73:f5:a4:
18:25:dc:95:2b:b3:0f:70:ba:63:92:bf:08:e6:5b:
73:b4:5c:76:5f:99:a5:a9:56:58:9d:32:d7:10:55:
ae:66:18:af:d2:60:0a:c9:14:9d:75:10:12:34:7f:
29:b8:e7:f9:f7:92:58:20:c9:6c:39:74:6d:32:51:
a7:71:e0:08:04:e7:29:5c:ca:ed:15:ea:f1:dc:ff:
9a:9d:05:9d:1b:aa:8e:da:7b:2b:81:5c:91:46:2e:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:51:85:70:39:9E:92:83:FC:E3:E3:13:D9:20:A4:E4:D8:B6:37:D2
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7lGFcDmekoP84-MT2SCk5Ni2N9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.48.0/24
87.229.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:34:89:9e:b1:ee:91:bf:17:83:7b:43:bd:92:29:3a:0c:e7:
67:f1:b4:0c:da:dc:f0:00:7e:3d:fd:a5:ee:c0:96:5d:4e:fd:
f5:3b:0a:38:ca:4e:36:01:64:70:0c:28:83:75:63:bc:27:e8:
bc:58:54:76:fc:1a:7b:48:d4:89:31:1e:53:d9:e6:a6:12:d1:
89:f4:06:ab:68:6f:e5:a7:f0:15:34:84:a9:eb:50:8d:4a:e9:
50:49:ee:43:dd:71:7c:80:91:df:9d:be:59:4e:bb:11:40:9f:
68:62:2c:e6:56:2a:10:81:93:97:e9:68:a3:64:ac:e8:ad:63:
e3:06:0a:65:ce:0e:06:d4:03:38:1d:13:de:01:4e:ae:fd:cd:
c6:5f:04:f0:16:a8:c5:c7:62:e6:b2:cf:64:ac:6a:fc:47:a8:
1b:7e:58:37:03:76:97:ed:42:3d:9c:9a:6b:ec:4e:1e:8c:00:
b8:28:ad:f8:13:55:13:a4:be:42:85:e6:66:92:3e:ac:4e:a5:
4d:db:05:4d:54:e7:b4:28:b3:44:a8:ad:f8:cb:cd:d9:07:76:
c9:81:4d:35:6b:74:9d:e7:e7:b8:53:eb:eb:c7:23:de:c1:6e:
da:0b:d7:88:89:14:2b:5b:64:ee:66:7a:3a:c8:c0:bc:c9:a3:
10:99:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:53 2025 by rpki-client