Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/H9NVfz2TpP6I96wOL_57Iec_Svw.roa
File: H9NVfz2TpP6I96wOL_57Iec_Svw.roa (raw, json)
Hash identifier: vCXOCRrgS3CYY60KwUADKUFP+YyycvQHWNiXBdO1QOA=
Subject key identifier: 1F:D3:55:7F:3D:93:A4:FE:88:F7:AC:0E:2F:FE:7B:21:E7:3F:4A:FC
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01959926290D125AF23CC243562B500B7124
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/H9NVfz2TpP6I96wOL_57Iec_Svw.roa
Signing time: Sat 15 Mar 2025 09:32:49 +0000
ROA not before: Sat 15 Mar 2025 09:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
79.172.196.0/24 maxlen: 24
79.172.199.0/24 maxlen: 24
79.172.203.0/24 maxlen: 24
79.172.209.0/24 maxlen: 24
79.172.211.0/24 maxlen: 24
79.172.213.0/24 maxlen: 24
79.172.216.0/24 maxlen: 24
79.172.225.0/24 maxlen: 24
79.172.236.0/24 maxlen: 24
79.172.238.0/24 maxlen: 24
79.172.240.0/24 maxlen: 24
79.172.241.0/24 maxlen: 24
79.172.243.0/24 maxlen: 24
79.172.248.0/24 maxlen: 24
79.172.253.0/24 maxlen: 24
79.172.255.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
87.229.121.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.59.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
217.144.62.0/24 maxlen: 24
2a02:730::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Mar 2025 15:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:99:26:29:0d:12:5a:f2:3c:c2:43:56:2b:50:0b:71:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 15 09:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fd3557f3d93a4fe88f7ac0e2ffe7b21e73f4afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:a0:cd:a5:a7:19:1e:63:63:32:e2:d0:76:
6b:25:15:84:b0:dd:d8:fd:be:47:0a:2b:a3:50:0c:
d3:53:1f:35:55:52:4e:39:c5:a0:d2:00:77:1a:ef:
94:f5:6d:ab:e8:38:d0:16:03:0f:a4:f1:8a:ba:e5:
24:02:aa:5d:30:14:51:6d:16:4e:87:50:b4:57:1a:
57:25:f0:15:f1:aa:f3:d0:b3:b2:17:17:c4:a2:0b:
2b:34:e3:d3:50:44:fe:af:c9:b7:08:39:3d:9a:84:
de:af:b7:9b:80:85:c6:92:4c:43:a7:ec:33:86:40:
6e:95:bd:74:cf:8d:aa:e1:23:70:78:d0:c0:c2:07:
e1:e2:32:14:4a:ed:00:8c:c8:79:b7:29:8b:49:dc:
5f:94:11:28:da:99:54:c2:c0:7f:1a:d6:3a:b6:58:
73:9e:6b:a7:a6:ae:69:f3:80:81:79:ff:3b:3b:a3:
29:f8:0e:08:6c:44:65:4d:52:bf:a7:e7:ce:96:bd:
0e:f5:97:32:a6:c0:fd:66:8c:ca:4a:6c:4c:3c:2b:
ad:db:9d:e6:91:bc:0d:ce:5c:e0:4c:55:c3:9c:88:
2a:0d:0f:ef:21:60:8c:a6:dc:f7:40:f4:59:1e:66:
3e:92:41:25:db:e1:2f:17:9c:d5:80:27:62:d5:6b:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D3:55:7F:3D:93:A4:FE:88:F7:AC:0E:2F:FE:7B:21:E7:3F:4A:FC
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/H9NVfz2TpP6I96wOL_57Iec_Svw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.0.0/19
87.229.15.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.65.0-87.229.66.255
87.229.73.0-87.229.75.255
87.229.78.0/24
87.229.83.0/24
87.229.93.0-87.229.94.255
87.229.96.0/24
87.229.105.0/24
87.229.113.0-87.229.114.255
87.229.116.0/24
87.229.118.0/24
87.229.121.0/24
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/24
213.181.207.0/24
213.181.210.0/24
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.53.255
217.113.59.0/24
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
9b:f9:b2:6f:5a:a4:69:3f:4c:6b:eb:70:ab:f8:34:5e:a1:e1:
56:ab:c1:07:63:7e:73:5c:3e:a5:04:99:15:ec:a5:fc:11:4b:
ce:30:cf:2f:5a:cf:37:f6:35:c5:e8:f1:e8:b8:2b:6e:25:dd:
80:30:7b:bf:1c:71:af:8a:09:36:2b:86:b8:ea:17:56:57:6d:
2c:ef:7e:89:ec:ae:17:7e:18:e9:01:2e:73:b2:3c:78:a3:33:
09:1d:16:45:75:15:8a:02:c3:13:2e:e6:8e:76:66:69:6d:15:
3e:05:6e:c4:40:65:25:b1:2d:c0:81:9a:e2:bb:26:c7:fb:71:
d9:cc:d9:33:5d:a2:34:df:5a:4f:29:12:13:d2:18:fc:b4:d7:
2e:90:62:93:c4:76:2f:26:d3:84:03:9e:1a:3b:78:9f:3c:9e:
f1:58:2b:0c:22:21:25:82:3c:7d:67:d2:59:40:63:4e:33:15:
51:18:50:a1:e6:38:50:4f:0c:6d:49:d2:e9:bd:f3:1d:c4:11:
98:04:b7:45:db:a8:ff:7f:8d:3c:fa:09:d3:74:e0:92:73:5f:
d5:15:d2:a5:3a:84:88:d2:7c:b9:c3:c6:16:d9:ff:08:a1:a6:
88:cf:3c:cb:82:57:5b:c6:fa:f0:3f:37:05:6b:ae:60:93:28:
8b:7d:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:46 2025 by rpki-client