Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Z6NNbEI8TxRElcqL7xwQZdVOtEE.roa
File: Z6NNbEI8TxRElcqL7xwQZdVOtEE.roa (raw, json)
Hash identifier: jfc4EZd/Bu88XIlxBXLZCTaFae9gUNdiyTZBRKByGpw=
Subject key identifier: 67:A3:4D:6C:42:3C:4F:14:44:95:CA:8B:EF:1C:10:65:D5:4E:B4:41
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0194733CF05758B6FA4EEB29BE2B757582FF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Z6NNbEI8TxRElcqL7xwQZdVOtEE.roa
Signing time: Fri 17 Jan 2025 07:49:21 +0000
ROA not before: Fri 17 Jan 2025 07:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:3c:f0:57:58:b6:fa:4e:eb:29:be:2b:75:75:82:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 17 07:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67a34d6c423c4f144495ca8bef1c1065d54eb441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:11:65:2a:c4:e5:96:c9:67:e4:ae:b8:e6:
08:58:56:9c:31:40:43:2c:bb:64:b5:12:ed:9c:22:
bf:34:1e:31:f8:05:bd:f7:39:fa:42:70:ca:cf:cc:
ed:ba:80:a5:12:a2:5f:e6:8b:26:56:7e:43:f7:16:
87:bc:c8:87:00:41:8f:52:24:30:f6:2b:77:ff:e1:
28:9c:23:13:e2:ce:d4:47:f8:b9:0e:1c:58:61:a2:
a1:d0:d3:3a:54:73:42:32:7b:66:55:2e:dc:2d:b3:
94:72:c3:fe:ac:c9:e5:96:2e:61:db:78:83:37:f4:
19:06:88:19:74:cc:e7:a9:ee:19:19:c6:d7:53:75:
9b:e6:4b:af:ff:7d:5b:a4:be:9c:93:c3:6e:36:84:
98:97:d8:25:ee:2b:8b:8e:28:9f:5a:8e:80:22:12:
1c:dd:fd:bd:c8:8b:8d:a8:7e:e4:38:6a:cf:05:f2:
d6:87:59:ca:a3:0a:cf:f5:9b:b6:9d:44:5a:2a:48:
e7:6e:f5:58:67:77:94:3a:17:7f:b5:c8:bf:bc:3d:
4d:35:8c:c1:cd:a0:b6:c3:4f:43:8c:31:99:8e:68:
79:e3:87:e3:ab:9a:90:8c:22:ea:5e:c0:ba:a9:20:
e1:3b:4b:09:27:e9:10:6a:38:fb:57:9c:8c:37:5b:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A3:4D:6C:42:3C:4F:14:44:95:CA:8B:EF:1C:10:65:D5:4E:B4:41
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Z6NNbEI8TxRElcqL7xwQZdVOtEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.0.0/24
Signature Algorithm: sha256WithRSAEncryption
60:91:5b:ab:80:2b:e6:89:fd:2f:0a:82:56:f0:7e:78:76:78:
9a:c1:7d:32:cc:aa:37:32:60:e9:82:c1:23:0b:11:ea:0a:9c:
b6:39:48:d9:b0:23:54:96:4e:10:6d:ca:6d:23:1a:e7:22:89:
e1:8e:8a:34:ac:10:74:c9:6a:39:1d:46:0c:84:eb:15:40:cd:
44:67:87:ce:ae:5e:ee:df:03:3b:9a:40:e8:7f:9a:17:88:8c:
2a:df:93:f7:c7:e0:e8:5c:cd:7d:4c:8a:5e:3c:f3:27:75:e9:
15:47:cd:67:7a:c3:56:97:d1:61:d7:e1:01:fa:e6:46:9f:28:
3a:a7:f3:77:67:5c:8f:e3:af:51:53:e0:36:8b:8e:ec:c4:74:
dd:41:d7:3e:85:c2:4a:9e:4d:0c:ff:d1:be:16:f5:d1:11:85:
73:4e:d9:bd:4e:73:02:d2:f0:b9:32:d4:72:96:d2:44:70:d9:
c2:9d:75:e2:50:01:2c:ec:06:4e:3b:ad:5b:29:42:11:a7:0c:
2c:84:53:4f:d2:c9:4c:28:16:d9:25:a0:ff:4e:d9:65:4d:38:
6e:2e:ad:ac:f3:46:c0:c3:81:33:bc:54:47:9a:46:f7:96:12:
ae:ee:7c:82:57:0f:1a:9f:54:25:79:b1:4f:23:88:a9:6c:91:
6f:1b:95:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRzPPBXWLb6Tuspvit1dYL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwMTE3MDc0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2EzNGQ2YzQyM2M0ZjE0NDQ5NWNhOGJlZjFjMTA2NWQ1NGViNDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+URZSrE5ZbJZ+SuuOYIWFacMUBD
LLtktRLtnCK/NB4x+AW99zn6QnDKz8ztuoClEqJf5osmVn5D9xaHvMiHAEGPUiQw
9it3/+EonCMT4s7UR/i5DhxYYaKh0NM6VHNCMntmVS7cLbOUcsP+rMnlli5h23iD
N/QZBogZdMznqe4ZGcbXU3Wb5kuv/31bpL6ck8NuNoSYl9gl7iuLjiifWo6AIhIc
3f29yIuNqH7kOGrPBfLWh1nKowrP9Zu2nURaKkjnbvVYZ3eUOhd/tci/vD1NNYzB
zaC2w09DjDGZjmh544fjq5qQjCLqXsC6qSDhO0sJJ+kQajj7V5yMN1srmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGejTWxCPE8URJXKi+8cEGXVTrRBMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvWjZOTmJFSThUeFJFbGNxTDd4d1FaZFZPdEVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UAMA0G
CSqGSIb3DQEBCwUAA4IBAQBgkVurgCvmif0vCoJW8H54dniawX0yzKo3MmDpgsEj
CxHqCpy2OUjZsCNUlk4QbcptIxrnIonhjoo0rBB0yWo5HUYMhOsVQM1EZ4fOrl7u
3wM7mkDof5oXiIwq35P3x+DoXM19TIpePPMndekVR81nesNWl9Fh1+EB+uZGnyg6
p/N3Z1yP469RU+A2i47sxHTdQdc+hcJKnk0M/9G+FvXREYVzTtm9TnMC0vC5MtRy
ltJEcNnCnXXiUAEs7AZOO61bKUIRpwwshFNP0slMKBbZJaD/TtllTThuLq2s80bA
w4EzvFRHmkb3lhKu7nyCVw8an1QlebFPI4ipbJFvG5Xd
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:57 2025 by rpki-client