Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KnPkdKgJ3ZoeKGQIUtMfI5MSo4k.roa
File: KnPkdKgJ3ZoeKGQIUtMfI5MSo4k.roa (raw, json)
Hash identifier: YJ3D1JUyX089hMJ1DvWikNSRcajWyarloWGzzTHY9a0=
Subject key identifier: 2A:73:E4:74:A8:09:DD:9A:1E:28:64:08:52:D3:1F:23:93:12:A3:89
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018EC2DA558376FABC33CC8CC2CCEC501C6F
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KnPkdKgJ3ZoeKGQIUtMfI5MSo4k.roa
Signing time: Tue 09 Apr 2024 12:34:32 +0000
ROA not before: Tue 09 Apr 2024 12:34:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12301
IP address blocks: 79.172.226.0/24 maxlen: 24
79.172.230.0/23 maxlen: 23
87.229.51.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 09:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:da:55:83:76:fa:bc:33:cc:8c:c2:cc:ec:50:1c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 9 12:34:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a73e474a809dd9a1e28640852d31f239312a389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:ee:38:bd:15:bb:5b:e3:9d:80:57:5a:17:
68:50:d1:ae:bd:59:45:70:70:46:3b:ad:e0:b0:90:
9e:51:e4:37:32:70:6f:5c:a7:b6:d7:66:ab:b3:50:
ca:30:07:33:68:c2:95:71:83:15:9d:c5:54:25:58:
09:3f:58:5f:0b:2a:2a:d0:55:c6:8b:98:50:c2:0a:
ea:75:75:c1:84:5e:3f:47:f4:d9:12:48:bb:ab:b5:
3d:bf:e5:56:35:68:b9:f9:e7:d1:07:36:1d:85:be:
2d:72:a5:1b:fa:69:a5:12:0e:68:f0:25:12:01:65:
04:45:bf:43:4c:09:12:0c:c5:81:38:b3:a0:c3:c2:
bd:1e:04:6a:b2:aa:28:3a:fd:94:a8:d5:a7:ed:8e:
fb:db:97:73:0b:f9:e5:ee:07:34:57:e2:99:ea:ba:
72:b0:15:ee:66:f8:71:bb:c9:ef:e9:67:c2:ef:2c:
84:dd:f8:f3:91:ce:ee:39:37:d1:68:43:9d:cc:cf:
4a:66:b7:45:a4:b1:8b:1a:e2:15:5a:64:1e:0b:bc:
2c:60:f5:3c:4e:82:e5:bd:87:cf:7e:87:02:5d:7f:
aa:9e:b3:2e:7d:a6:13:fc:ea:a7:b5:33:97:9a:5c:
c1:2b:c9:0f:38:60:d8:a2:c8:e7:d4:3a:b4:ce:d1:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:E4:74:A8:09:DD:9A:1E:28:64:08:52:D3:1F:23:93:12:A3:89
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KnPkdKgJ3ZoeKGQIUtMfI5MSo4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.226.0/24
79.172.230.0/23
87.229.51.0/24
87.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
23:2c:a8:c9:db:4c:df:bc:3a:61:36:28:6f:2b:e1:eb:83:e0:
c3:cf:35:6c:15:40:f3:13:59:2a:98:7f:1f:78:77:cb:a3:75:
64:85:fc:79:e7:ad:67:4e:35:8b:bc:45:ae:04:67:0f:29:79:
7a:52:84:a8:4e:75:27:09:8b:2f:7a:75:6f:ef:18:25:fb:26:
e5:c2:1d:d9:25:61:e5:0c:3f:bd:12:13:62:22:3f:98:ce:f9:
ff:1b:28:3b:e9:41:a6:cc:f5:c8:7b:af:2c:72:12:c6:d6:88:
6e:ac:3b:a5:bc:24:d6:d4:e8:bd:95:39:dc:71:32:d7:8d:7d:
f7:a4:56:45:a0:34:2c:02:94:fb:c1:d4:f0:64:dd:39:be:77:
f4:7e:65:42:3e:72:7c:97:ec:e9:1e:0a:02:bd:b1:d2:3e:4a:
11:62:d2:6a:ad:96:12:38:ec:c5:99:29:e7:dd:6d:55:99:e0:
5f:7a:cd:d0:73:26:9e:3e:8c:ef:6c:af:36:62:e7:8f:19:f6:
8f:01:87:6a:b0:eb:24:25:95:23:66:d5:15:0d:f9:a8:b5:7f:
91:60:48:e0:74:1c:01:34:36:a2:8c:fa:f6:ce:db:4f:db:04:
41:ac:5c:3e:c1:37:f5:7c:98:b2:b3:ed:40:a4:57:5c:89:83:
76:3f:d8:0a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY7C2lWDdvq8M8yMwszsUBxvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQwNDA5MTIzNDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTczZTQ3NGE4MDlkZDlhMWUyODY0MDg1MmQzMWYyMzkzMTJhMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI7uOL0Vu1vjnYBXWhdoUNGuvVlF
cHBGO63gsJCeUeQ3MnBvXKe212ars1DKMAczaMKVcYMVncVUJVgJP1hfCyoq0FXG
i5hQwgrqdXXBhF4/R/TZEki7q7U9v+VWNWi5+efRBzYdhb4tcqUb+mmlEg5o8CUS
AWUERb9DTAkSDMWBOLOgw8K9HgRqsqooOv2UqNWn7Y7725dzC/nl7gc0V+KZ6rpy
sBXuZvhxu8nv6WfC7yyE3fjzkc7uOTfRaEOdzM9KZrdFpLGLGuIVWmQeC7wsYPU8
ToLlvYfPfocCXX+qnrMufaYT/OqntTOXmlzBK8kPOGDYosjn1Dq0ztFDqQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCpz5HSoCd2aHihkCFLTHyOTEqOJMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvS25Qa2RLZ0ozWm9lS0dRSVV0TWZJNU1TbzRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAT6ziAwQB
T6zmAwQAV+UzAwQAV+U4MA0GCSqGSIb3DQEBCwUAA4IBAQAjLKjJ20zfvDphNihv
K+Hrg+DDzzVsFUDzE1kqmH8feHfLo3Vkhfx5561nTjWLvEWuBGcPKXl6UoSoTnUn
CYsvenVv7xgl+yblwh3ZJWHlDD+9EhNiIj+Yzvn/Gyg76UGmzPXIe68schLG1ohu
rDulvCTW1Oi9lTnccTLXjX33pFZFoDQsApT7wdTwZN05vnf0fmVCPnJ8l+zpHgoC
vbHSPkoRYtJqrZYSOOzFmSnn3W1VmeBfes3QcyaePozvbK82YuePGfaPAYdqsOsk
JZUjZtUVDfmotX+RYEjgdBwBNDaijPr2zttP2wRBrFw+wTf1fJiys+1ApFdciYN2
P9gK
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:35 2025 by rpki-client