Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/I6nWhr0-H-Vy3v6ryjS73-u-c4A.roa
File: I6nWhr0-H-Vy3v6ryjS73-u-c4A.roa (raw, json)
Hash identifier: zgGNg2Y76aqmAt+2WdNt9M1Ic9+luqgydTTKtjo587w=
Subject key identifier: 23:A9:D6:86:BD:3E:1F:E5:72:DE:FE:AB:CA:34:BB:DF:EB:BE:73:80
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0192322F885A8F85A4BE09E0360BB206522C
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/I6nWhr0-H-Vy3v6ryjS73-u-c4A.roa
Signing time: Fri 27 Sep 2024 06:33:48 +0000
ROA not before: Fri 27 Sep 2024 06:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
79.172.211.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.16.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.205.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.211.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
2a02:730::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 07 Oct 2024 20:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:2f:88:5a:8f:85:a4:be:09:e0:36:0b:b2:06:52:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 27 06:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23a9d686bd3e1fe572defeabca34bbdfebbe7380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:42:6c:ce:08:d9:8e:c8:5b:fe:25:83:eb:
ee:62:bc:69:1d:fb:59:31:9a:6b:cf:f0:93:5f:71:
ae:8f:8e:13:0f:0d:8c:8b:e5:9b:37:d2:29:64:d2:
ee:54:98:f5:d3:f0:37:45:d3:7d:25:61:a9:65:88:
34:56:d1:b1:e4:ae:f5:25:f5:01:84:a3:05:8e:9d:
17:eb:17:cb:3e:56:b2:fd:7e:54:1e:51:b9:be:c9:
b4:d2:ce:63:37:0e:95:44:ad:dd:2a:10:ea:2e:fe:
5f:78:ce:3c:cc:db:52:3a:50:9e:0b:33:35:1f:24:
65:b2:ab:96:c0:b7:87:0b:5e:7a:ef:b1:24:99:51:
5d:86:90:d3:77:7c:dd:4b:17:a9:e0:b1:ba:c2:87:
26:c7:20:8e:89:f6:d3:8b:6a:c5:e4:bd:a5:b7:7a:
73:5d:a4:88:15:9a:76:d6:1b:e5:db:c2:28:1a:ad:
d7:e8:1f:d4:35:a5:6e:ab:fd:ba:4d:3c:f8:ab:af:
35:d4:c5:b4:f6:72:20:32:c1:83:56:c7:89:b0:2b:
09:de:b7:00:4c:eb:d6:c7:6c:60:ff:80:eb:c3:7a:
75:d4:d1:ef:80:7b:37:df:e7:28:de:fa:5d:49:f2:
62:de:07:f1:c9:b8:c3:b0:6a:17:38:93:52:85:4d:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A9:D6:86:BD:3E:1F:E5:72:DE:FE:AB:CA:34:BB:DF:EB:BE:73:80
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/I6nWhr0-H-Vy3v6ryjS73-u-c4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.0.0/19
87.229.15.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.65.0-87.229.66.255
87.229.73.0-87.229.75.255
87.229.78.0/24
87.229.83.0/24
87.229.93.0-87.229.94.255
87.229.96.0/24
87.229.105.0/24
87.229.113.0-87.229.114.255
87.229.116.0/24
87.229.118.0/24
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/23
213.181.207.0/24
213.181.210.0/23
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.53.255
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
63:26:c1:e3:59:d5:fd:69:9b:4a:3f:f6:1e:86:0f:8d:61:0c:
a0:32:1b:22:d7:ff:fd:63:c3:f7:88:cc:14:88:d3:8f:52:7a:
43:12:5b:d0:f4:95:71:fa:43:90:60:2c:26:cb:a4:ec:3d:d0:
44:20:58:27:3d:8e:9d:0f:09:80:ce:cf:a4:d1:d7:da:2b:06:
ad:0d:9e:15:84:6c:e8:5b:6f:2a:3a:26:7e:bb:ed:ce:f3:2b:
50:67:f5:c5:8d:3b:31:25:cf:46:8a:da:b6:8f:34:ef:0c:04:
aa:74:c5:f4:8a:5c:28:0e:1f:33:37:35:1d:88:f0:74:11:68:
46:19:b4:ba:36:fa:5e:c7:0b:66:67:9f:72:fa:a9:cb:bc:c1:
37:94:17:d3:69:31:e8:9a:ca:9f:8c:41:28:14:a4:07:6c:71:
31:b0:5d:6e:ad:7a:65:2e:34:7c:98:1c:38:d7:85:17:2a:35:
ac:48:c2:88:03:79:df:e4:f8:de:d0:9c:f7:11:fe:f8:04:06:
40:61:79:03:95:47:ab:a0:75:72:e1:43:80:25:3b:84:8e:fa:
b3:fa:7e:90:71:65:f2:88:f3:16:a0:46:d3:cd:18:67:12:45:
72:d3:6e:5e:d4:8e:c6:76:62:07:26:29:a5:d8:64:60:b2:b7:
0a:47:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:51 2025 by rpki-client