Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_O5zT86eZ-jPshyS5K_KgcRu0dw.roa
File: _O5zT86eZ-jPshyS5K_KgcRu0dw.roa (raw, json)
Hash identifier: lVZDfFFljiaN7kxBaTiSge/mEpFf5OgaiBg3fJZgu1Y=
Subject key identifier: FC:EE:73:4F:CE:9E:67:E8:CF:B2:1C:92:E4:AF:CA:81:C4:6E:D1:DC
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0193719C02FB162B3B47E33CFFCDDE60765D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_O5zT86eZ-jPshyS5K_KgcRu0dw.roa
Signing time: Thu 28 Nov 2024 07:11:10 +0000
ROA not before: Thu 28 Nov 2024 07:11:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135402
IP address blocks: 87.229.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:9c:02:fb:16:2b:3b:47:e3:3c:ff:cd:de:60:76:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Nov 28 07:11:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcee734fce9e67e8cfb21c92e4afca81c46ed1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:34:3d:c0:63:31:f4:8f:49:d5:c0:d7:6d:
1d:4c:99:e4:40:02:cd:4b:a9:52:0c:cc:23:5b:3d:
9e:5c:fc:f7:3f:b6:74:c4:46:c4:ca:5c:9f:a2:fb:
95:e7:72:f7:4c:96:5b:5e:e3:71:88:29:cb:7a:fc:
32:7b:51:15:48:f5:be:aa:98:09:a6:b8:d5:3c:33:
91:df:b9:59:5b:18:74:64:6f:55:0a:89:03:ef:0e:
20:10:68:e1:1b:0f:27:df:d2:74:a7:5c:cd:83:8d:
55:c4:d8:d5:03:ed:6d:28:63:a2:61:a7:d6:2b:20:
7e:21:5c:1e:ca:03:74:05:75:d2:87:bb:7f:57:41:
dc:b4:bc:70:3d:d6:22:7a:1f:9b:7e:f7:9a:be:dc:
c6:a9:0b:7f:0a:10:2c:df:6e:a1:66:5b:41:39:03:
3e:48:af:82:7c:44:9b:3a:9a:bf:f6:1a:15:5b:52:
87:de:9f:9e:d6:a9:4d:15:fa:d6:10:b5:b4:bd:2c:
6a:bf:65:4f:57:20:76:2d:64:ce:58:ec:74:94:07:
bc:8e:15:3e:54:98:3f:76:be:f4:88:65:98:c3:98:
d5:a3:6e:04:69:6c:14:a2:75:e5:64:4d:da:0f:d2:
e8:53:f2:51:b6:fe:b8:8e:de:2c:51:a1:9e:20:81:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EE:73:4F:CE:9E:67:E8:CF:B2:1C:92:E4:AF:CA:81:C4:6E:D1:DC
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_O5zT86eZ-jPshyS5K_KgcRu0dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.44.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f4:87:23:f3:08:cf:cd:ba:74:8d:53:d4:fc:8f:b2:b0:64:
b4:76:a9:c7:49:fe:29:8b:6b:ea:44:f6:10:cc:4b:72:29:7a:
ba:60:6b:9e:5f:43:38:d7:2c:48:0e:9c:54:95:47:1f:46:78:
14:d0:6e:be:2f:8f:c4:0a:94:f6:ed:32:30:3a:0f:7c:05:79:
da:48:7d:0d:73:b6:80:d9:c1:2d:ef:ae:a4:02:18:76:c9:61:
c0:8c:60:ff:be:5a:3d:fe:c9:78:c6:5c:11:2a:08:a3:0b:fd:
cc:08:e9:99:e1:e7:06:75:9c:b6:89:b6:a3:1d:7a:4d:86:51:
16:ef:86:f7:87:4b:bd:8d:6b:43:0d:f1:1e:1f:de:ad:14:20:
ef:0f:89:cc:f5:19:5e:8c:cc:59:a8:b0:3e:27:09:06:62:bc:
b1:f8:e1:a5:e8:f2:18:c6:4e:87:2e:cb:f5:26:c7:c5:7d:aa:
56:63:98:57:1f:2a:de:ac:c8:25:1a:de:98:1b:d5:75:e2:ea:
0c:77:88:28:39:93:01:78:4b:1b:d4:0f:7d:05:bd:69:dd:a5:
99:86:6c:9e:bd:25:fb:c7:0a:87:db:dc:5d:1d:b6:f7:ab:08:
7c:e0:3b:05:19:28:a0:11:d3:c0:87:c4:e6:f4:9e:3a:a5:ab:
98:96:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:57 2025 by rpki-client