Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/F5QItfGXP5cyTJefNJaO9Hj6vwg.roa
File: F5QItfGXP5cyTJefNJaO9Hj6vwg.roa (raw, json)
Hash identifier: QeAwXi9cyUpRD+w4JsyfBUBrU7xFw89kFWZJZCNEwhc=
Subject key identifier: 17:94:08:B5:F1:97:3F:97:32:4C:97:9F:34:96:8E:F4:78:FA:BF:08
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01907DB69E96C97FC5AE83F13E9924875082
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/F5QItfGXP5cyTJefNJaO9Hj6vwg.roa
Signing time: Thu 04 Jul 2024 12:27:18 +0000
ROA not before: Thu 04 Jul 2024 12:27:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39679
IP address blocks: 79.172.218.0/24 maxlen: 24
79.172.220.0/24 maxlen: 24
87.229.14.0/24 maxlen: 24
87.229.22.0/24 maxlen: 24
87.229.31.0/24 maxlen: 24
87.229.34.0/24 maxlen: 24
87.229.35.0/24 maxlen: 24
87.229.70.0/24 maxlen: 24
87.229.71.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
87.229.100.0/24 maxlen: 24
95.138.194.0/24 maxlen: 24
213.181.201.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
217.144.60.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 13:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:b6:9e:96:c9:7f:c5:ae:83:f1:3e:99:24:87:50:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 4 12:27:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=179408b5f1973f97324c979f34968ef478fabf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:d9:c4:76:fe:60:a3:f9:6c:cc:e5:ac:5a:
39:2b:26:cc:3d:5c:b3:4a:d0:4b:53:7f:28:eb:da:
32:98:51:86:74:50:db:16:c1:48:3c:ac:21:7e:98:
c5:08:e8:21:97:72:af:d2:65:bd:47:1b:76:de:a6:
1d:05:40:25:64:0c:66:1c:49:52:56:70:fb:06:d6:
3a:e2:fa:4f:5e:53:e9:74:6c:77:67:4b:08:39:39:
5b:de:da:c6:50:41:f7:df:fe:af:39:e4:e1:35:32:
6b:20:65:37:b7:cc:b5:d3:b5:0e:51:bd:7d:ee:51:
4f:5f:4a:78:95:a9:ec:60:13:5e:f1:4e:8f:de:4d:
f6:79:6c:e8:09:f4:b1:9a:75:00:3c:10:97:ee:8b:
0f:22:2e:44:f9:72:93:39:aa:21:8d:1f:48:0f:0e:
4c:7c:4d:87:41:f3:17:aa:2c:d0:ae:4b:60:4d:d2:
33:67:88:30:5b:ae:b8:e9:52:a3:cf:e2:3f:f8:f5:
33:78:c9:c1:7a:f4:61:36:a5:97:b5:4a:f1:a0:b6:
c1:27:a4:54:1a:42:47:e3:83:70:b1:81:95:a0:da:
0a:40:ca:d5:6e:94:d0:0d:79:89:5b:8e:ab:ac:fe:
ef:e8:72:79:ca:9a:4e:b7:54:90:75:70:18:0e:39:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:08:B5:F1:97:3F:97:32:4C:97:9F:34:96:8E:F4:78:FA:BF:08
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/F5QItfGXP5cyTJefNJaO9Hj6vwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.218.0/24
79.172.220.0/24
87.229.14.0/24
87.229.22.0/24
87.229.31.0/24
87.229.34.0/23
87.229.70.0/23
87.229.79.0/24
87.229.81.0/24
87.229.97.0/24
87.229.100.0/24
95.138.194.0/24
213.181.201.0/24
217.144.59.0-217.144.60.255
217.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:9a:5f:89:50:0c:90:68:b0:ba:c8:88:3a:1c:1a:1c:7e:50:
e9:e6:ce:5f:53:aa:00:f0:db:ea:16:57:9e:cf:64:0a:85:e7:
fb:65:05:42:28:dc:7e:0c:34:1e:4c:6e:6f:88:f3:ea:d8:81:
b1:29:fb:a2:2e:bf:04:ca:0f:1e:2c:fc:5d:e9:3f:f0:f9:13:
31:8d:26:2d:df:53:d1:c0:65:14:ff:57:38:2a:0b:67:38:14:
88:e4:d2:41:9b:c4:c8:1d:95:e6:2f:86:79:90:99:6b:79:5a:
52:eb:e9:8f:db:12:23:7f:d0:d6:f3:a6:34:08:7f:dc:87:17:
fd:5d:27:c3:dc:49:ee:e6:bb:5a:e4:f9:10:ca:86:8a:60:b8:
f5:fe:f9:e4:97:19:54:e3:6e:e2:95:4c:d5:32:d1:2a:3d:06:
c0:9f:f5:4e:b5:07:37:5a:d6:84:26:d1:89:ef:c4:d6:6a:86:
fb:07:a9:72:f2:cd:a3:c8:dd:eb:04:01:ae:9c:8c:35:94:20:
25:a7:bd:42:83:b9:7e:00:d5:a9:29:1d:53:09:fd:65:c6:cc:
5c:26:01:20:09:f0:34:56:60:ce:d8:44:20:5b:71:5a:fe:67:
0e:02:82:4b:a9:ed:bd:79:56:da:78:a7:ff:8b:da:8e:2e:7a:
70:f2:51:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:54 2025 by rpki-client