Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JQPiP6MmejAaL9x9HOstntRoau8.roa
File: JQPiP6MmejAaL9x9HOstntRoau8.roa (raw, json)
Hash identifier: bGhQ8LuRyLiliueBZAJG6PI/43cqLNvSjVi6YqxNJKk=
Subject key identifier: 25:03:E2:3F:A3:26:7A:30:1A:2F:DC:7D:1C:EB:2D:9E:D4:68:6A:EF
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0193D0AA02451CB1D21BFC289C3CBD561E9A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JQPiP6MmejAaL9x9HOstntRoau8.roa
Signing time: Mon 16 Dec 2024 18:10:22 +0000
ROA not before: Mon 16 Dec 2024 18:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 87.229.23.0/24 maxlen: 24
87.229.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 09:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:aa:02:45:1c:b1:d2:1b:fc:28:9c:3c:bd:56:1e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Dec 16 18:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2503e23fa3267a301a2fdc7d1ceb2d9ed4686aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:e0:64:82:c8:bb:2f:33:35:23:9b:ee:8a:
ab:b8:28:a4:22:70:a4:58:8d:af:bf:55:86:75:d6:
d7:e6:6d:42:64:a0:62:b0:5f:0d:85:f7:1c:e1:7d:
93:07:87:78:83:fc:fb:4c:14:cf:95:6e:35:df:e5:
76:eb:ab:a7:e0:56:7f:1f:9e:dd:30:06:c9:2c:ce:
05:a2:ea:b6:53:b2:c3:76:65:42:31:6d:06:a6:3d:
26:85:bb:ed:a0:b7:be:a9:26:1f:ce:c6:fc:76:be:
8f:12:94:9d:ff:ae:4d:76:43:d8:72:8e:88:71:aa:
94:4e:65:5f:5e:fb:46:f0:99:3d:8a:51:a5:0f:90:
c8:81:37:47:07:33:76:34:c2:83:79:58:fa:61:3f:
1f:7b:8a:da:aa:f1:f0:04:2b:e7:de:9c:00:76:52:
6b:7e:be:f1:2a:6d:f0:21:40:f1:e3:fc:19:3b:e5:
82:48:14:10:f1:16:89:81:aa:b8:cf:ad:79:bd:99:
90:3e:69:52:dc:de:49:37:14:60:c9:1a:1d:d1:99:
8a:5f:88:99:ec:56:f0:15:66:21:95:fe:62:44:38:
8d:62:0c:6f:cb:38:5c:07:b4:ef:00:56:2c:b5:cc:
3f:f3:13:49:bb:c8:41:20:bd:38:98:f8:d5:cf:5f:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:03:E2:3F:A3:26:7A:30:1A:2F:DC:7D:1C:EB:2D:9E:D4:68:6A:EF
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JQPiP6MmejAaL9x9HOstntRoau8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.23.0/24
87.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a1:a6:03:c2:a9:9a:3b:e4:ff:0a:54:b6:a9:15:9e:b0:74:
6f:29:81:f8:0b:fb:2a:c3:e8:03:af:e0:b8:82:b6:5f:94:70:
f6:5b:55:88:57:0c:a2:d4:c8:d1:b2:cb:1b:de:2d:3f:c9:48:
22:07:11:ad:83:73:9e:69:96:69:3a:25:15:e5:8f:f7:0c:37:
42:e3:61:16:3f:9c:ac:e5:fd:19:f4:bc:28:5c:8f:a2:48:29:
d1:04:04:1e:34:3e:76:be:93:8e:06:63:e6:4e:ac:58:3f:a3:
00:f0:63:f9:e8:0b:9d:3c:ff:a8:41:81:7b:ee:c3:20:f2:46:
88:67:46:83:87:07:04:eb:a5:ac:f9:56:89:ef:81:87:6d:a2:
5a:3a:c1:d9:5e:41:e3:1e:bf:c2:53:fa:5a:3e:0d:bd:d6:f0:
ab:9f:59:1a:77:e0:eb:4c:1c:0d:6f:b8:38:22:cb:85:7d:cc:
6d:29:c3:2d:d1:6f:09:c3:ff:f0:52:52:e1:53:99:60:0b:4a:
e4:86:61:bb:d8:1b:7d:85:b8:0b:b8:fc:c8:19:9a:d3:b6:a6:
be:6b:e9:5d:54:68:51:aa:81:db:c0:f2:ee:3a:b7:a9:38:c7:
ec:88:ab:e6:6b:91:b1:82:08:82:15:a1:13:5a:3c:71:14:e3:
75:86:5f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:51 2025 by rpki-client