Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e7S6HpoJfP4zXHUXLBZG49fRm7w.roa
File: e7S6HpoJfP4zXHUXLBZG49fRm7w.roa (raw, json)
Hash identifier: mEHxirwVg4HiRw2O+bToMF1ovZIarePHA3d5gGaED7s=
Subject key identifier: 7B:B4:BA:1E:9A:09:7C:FE:33:5C:75:17:2C:16:46:E3:D7:D1:9B:BC
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0196C45E0BDDAA11B3151718498B211D0F5B
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e7S6HpoJfP4zXHUXLBZG49fRm7w.roa
Signing time: Mon 12 May 2025 12:00:19 +0000
ROA not before: Mon 12 May 2025 12:00:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.208.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.11.0/24 maxlen: 24
87.229.34.0/24 maxlen: 24
87.229.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 May 2025 07:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:0b:dd:aa:11:b3:15:17:18:49:8b:21:1d:0f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 12 12:00:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bb4ba1e9a097cfe335c75172c1646e3d7d19bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:85:9a:01:ba:c1:a0:8d:ae:27:52:ad:78:
f2:79:2d:4f:67:03:69:78:ff:39:93:03:ad:59:8a:
74:57:d7:39:95:ce:e4:18:c8:10:a7:df:37:e7:36:
a1:65:3e:7c:b5:db:c7:76:9a:72:65:b2:c2:b2:ce:
08:37:04:69:44:b3:b2:d2:7b:89:aa:6c:88:e8:99:
9f:b1:f3:a7:12:ab:e6:34:89:ff:9e:22:19:d1:f4:
68:f9:32:d2:ca:90:c6:e9:01:c9:5a:be:49:97:0e:
80:d1:f9:2b:1e:33:76:26:c1:fb:29:85:d6:6d:3b:
37:b7:70:a0:38:f8:e1:30:03:38:6a:b2:fa:66:cb:
15:6f:ac:fd:d5:6c:fc:0e:04:1b:56:bd:d7:f3:b5:
2d:9f:e3:e4:b0:13:0b:e3:65:96:bf:ac:e9:84:b5:
71:a3:6b:9c:52:83:07:a5:3e:7b:bc:98:66:31:1f:
d3:f8:8f:5c:92:ec:c1:1a:cb:fb:90:8f:12:59:62:
71:ec:f1:4c:43:41:bf:98:9c:7c:21:0b:22:c8:12:
9e:86:2f:77:fc:28:f1:df:cc:15:60:15:40:94:9f:
ab:f3:ed:bd:ef:2e:d1:7f:2b:97:94:33:2b:47:83:
c8:3f:c4:96:e6:54:37:da:23:4e:47:62:80:e6:09:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B4:BA:1E:9A:09:7C:FE:33:5C:75:17:2C:16:46:E3:D7:D1:9B:BC
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e7S6HpoJfP4zXHUXLBZG49fRm7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.208.0/24
79.172.228.0/24
87.229.8.0/22
87.229.34.0/24
87.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ba:f0:3e:19:69:09:2b:a3:ec:2f:52:ef:cf:38:59:4d:51:
e1:bb:3d:1e:02:30:ef:14:b9:12:22:97:29:33:a5:7f:a3:e1:
df:a4:da:2e:68:2d:80:52:c7:c1:4f:21:fc:56:87:21:51:b6:
d9:e1:c3:7c:3c:44:15:16:eb:d0:03:93:b1:2f:57:ac:1f:c6:
dc:49:85:49:60:9d:e6:86:5a:bc:cf:97:c0:f7:8f:c6:65:7b:
8b:66:b0:6d:07:df:c1:4b:5a:c6:94:75:7e:10:7c:24:8d:91:
2e:43:12:02:bc:19:c1:80:4d:30:4a:2f:57:e3:b0:94:db:97:
3f:93:02:9e:5f:c9:8e:67:d8:54:d8:59:51:2d:b7:4d:76:83:
e0:1b:91:2a:dc:db:c2:be:f2:d1:82:5e:c1:59:47:d0:22:e0:
9c:cb:91:81:f6:e8:cc:0e:84:0e:2b:bc:c6:7c:e5:0a:57:83:
70:b9:8e:8e:03:39:26:90:5f:20:37:19:3a:83:a5:89:87:88:
93:eb:68:fd:fe:37:26:b3:41:c7:84:94:c2:76:d4:0c:87:68:
5b:33:f6:7f:5c:70:60:2f:88:f6:4c:2b:e5:aa:1d:d2:6c:46:
b9:a5:44:a8:ab:a1:d5:2e:49:da:e3:c9:ff:2a:8d:32:4e:ec:
22:d4:07:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:03 2025 by rpki-client