Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/DRJjfMcFrH0R1qMcB4ouB5yjRQI.roa
File: DRJjfMcFrH0R1qMcB4ouB5yjRQI.roa (raw, json)
Hash identifier: MwJy5asFp+NoS5HsvY2dWTyamD7bx9ngcWemhAQFads=
Subject key identifier: 0D:12:63:7C:C7:05:AC:7D:11:D6:A3:1C:07:8A:2E:07:9C:A3:45:02
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827BB26942A94A612D6D4D0152D6663
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/DRJjfMcFrH0R1qMcB4ouB5yjRQI.roa
Signing time: Thu 02 Jan 2025 17:54:39 +0000
ROA not before: Thu 02 Jan 2025 17:54:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39679
IP address blocks: 79.172.220.0/24 maxlen: 24
87.229.14.0/24 maxlen: 24
87.229.22.0/24 maxlen: 24
87.229.71.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
213.181.201.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 07:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:bb:26:94:2a:94:a6:12:d6:d4:d0:15:2d:66:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d12637cc705ac7d11d6a31c078a2e079ca34502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:50:7e:76:19:45:0c:8a:de:4d:ef:03:83:
ad:39:e6:df:e9:f2:30:16:26:f5:4d:ca:ba:f4:f5:
ae:72:03:e2:81:26:36:cd:81:c1:3d:1d:00:1b:f0:
ef:89:25:39:06:46:84:eb:fd:fa:15:4d:d8:8d:d2:
ec:3d:e0:38:9c:4d:74:6a:ff:89:4e:60:38:70:fc:
7d:b6:97:01:04:88:d8:66:be:b0:f8:11:3a:ae:e2:
ed:12:2a:45:c0:f0:5e:10:91:e9:ba:ee:60:f4:09:
3b:02:58:84:bf:a1:31:68:2e:52:68:0d:cd:4e:d7:
3c:2b:6a:51:8b:53:0d:f8:fa:08:6c:8e:3d:ed:bb:
a3:79:96:76:e0:92:7a:99:27:06:39:3b:54:d8:af:
3d:b2:06:bd:d9:71:21:5f:e1:07:46:76:c5:1e:a8:
0a:79:ef:c1:6f:cf:51:7d:cd:d3:18:b3:02:2f:b6:
64:4b:7d:35:01:79:58:a2:e3:32:24:4a:22:c2:04:
14:c8:5b:dc:7a:90:a4:99:f2:f0:85:6f:a0:bc:99:
e3:61:68:44:4a:b4:5a:d6:4a:d7:f1:47:97:38:e6:
76:38:e1:96:f3:e2:21:f7:56:83:79:e6:86:89:71:
44:90:d2:f7:84:7c:8e:ad:eb:c3:12:5d:54:62:5d:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:12:63:7C:C7:05:AC:7D:11:D6:A3:1C:07:8A:2E:07:9C:A3:45:02
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/DRJjfMcFrH0R1qMcB4ouB5yjRQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.220.0/24
87.229.14.0/24
87.229.22.0/24
87.229.71.0/24
87.229.79.0/24
213.181.201.0/24
217.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a0:b8:4f:ce:49:8c:18:0b:a9:25:ea:ae:4a:1e:bd:88:3a:
5a:b0:21:9d:3b:37:bd:f3:a1:98:23:e4:54:3d:e0:7f:7f:f8:
f3:60:39:fa:ef:3a:fa:9d:80:4b:a2:33:3b:0c:42:6d:33:ed:
b9:04:fb:2e:09:79:c3:24:9d:22:d4:f9:08:4b:92:53:c9:d4:
26:8f:3a:31:a3:a4:18:51:d0:fc:96:b5:ff:1c:5d:75:5e:c3:
68:01:bf:69:52:f2:51:5d:bc:5e:0d:0f:ba:fb:6a:0a:37:8c:
f4:51:59:be:04:bc:1e:e8:69:3a:d5:75:6f:b6:ca:2a:8f:55:
97:de:33:b9:52:91:82:14:d1:e0:c6:43:26:3f:30:f1:79:d9:
cd:28:3d:a6:0d:aa:1f:63:33:4e:bf:66:89:a7:1f:32:cd:d1:
cc:da:d7:87:ec:77:36:1c:3c:72:a2:26:b6:84:37:11:c0:5f:
03:75:fd:b0:87:b8:f3:4d:5e:68:9c:ff:6f:73:46:57:6d:14:
23:43:fd:9d:67:7a:42:04:91:7e:e3:b8:fd:1f:2a:4e:b2:09:
a6:c2:2b:bb:bb:e9:cf:e8:8c:66:a5:b4:85:fb:a8:c3:2d:1d:
68:a5:8e:a9:e4:a8:d0:0e:50:78:1a:be:aa:9b:fa:fe:1d:2e:
de:48:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:28 2025 by rpki-client