Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/m67z-HqQxArIspkDIsKg0zDmY78.roa
File: m67z-HqQxArIspkDIsKg0zDmY78.roa (raw, json)
Hash identifier: 3ZrASpcUhPQ5Pis3oG+gS3vh7oLi3r2gLVUY0VGSdOU=
Subject key identifier: 9B:AE:F3:F8:7A:90:C4:0A:C8:B2:99:03:22:C2:A0:D3:30:E6:63:BF
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0194D520204EFCE29FBC7F0050BE5A9DE6D2
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/m67z-HqQxArIspkDIsKg0zDmY78.roa
Signing time: Wed 05 Feb 2025 08:00:39 +0000
ROA not before: Wed 05 Feb 2025 08:00:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
79.172.211.0/24 maxlen: 24
79.172.213.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.14.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.22.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
87.229.121.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
2a02:730::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Feb 2025 08:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:20:20:4e:fc:e2:9f:bc:7f:00:50:be:5a:9d:e6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 5 08:00:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9baef3f87a90c40ac8b2990322c2a0d330e663bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:dc:6c:be:0d:e4:db:ed:77:a2:12:33:e0:
f5:10:15:45:a3:90:ae:97:34:c0:b5:33:75:e0:1a:
e5:0b:bf:de:60:d8:e2:17:e3:69:91:fc:ef:e5:14:
f7:37:89:d5:36:41:5a:42:5b:6e:7e:ec:df:0e:0f:
f9:74:e8:2e:f9:d7:16:87:c9:8f:ab:fa:0b:f2:8a:
c0:2a:cb:ed:cb:a3:be:4e:01:83:4e:a8:cf:cd:fa:
0e:a0:ca:53:b9:90:11:e6:f5:0d:cd:83:e2:ec:7d:
cb:8e:6c:b0:4f:00:00:e5:43:51:8d:f9:82:01:21:
44:43:c9:56:71:93:32:60:4c:58:ab:f2:fc:fd:96:
2f:c8:9f:ee:72:09:99:a0:80:39:da:60:fd:da:11:
92:bb:fe:0f:50:5a:cf:08:e8:0a:a1:0c:5a:34:78:
07:32:45:af:7f:a0:93:75:fd:2d:0e:a5:fe:66:b7:
66:cb:6f:f9:0f:55:67:64:68:9f:ba:18:c0:3c:58:
81:7a:ed:8b:2f:0e:09:62:70:73:38:3d:4b:ed:5f:
44:e2:05:bb:3c:e3:30:01:cf:7a:ef:2a:da:d4:58:
9e:b9:c8:38:62:c1:51:3f:c7:aa:3c:d7:cf:a4:d0:
31:d4:bc:fb:cf:1a:86:49:fd:68:2e:66:39:00:13:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AE:F3:F8:7A:90:C4:0A:C8:B2:99:03:22:C2:A0:D3:30:E6:63:BF
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/m67z-HqQxArIspkDIsKg0zDmY78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.0.0/19
87.229.14.0/23
87.229.22.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.65.0-87.229.66.255
87.229.73.0-87.229.75.255
87.229.78.0/23
87.229.83.0/24
87.229.93.0-87.229.94.255
87.229.96.0/24
87.229.105.0/24
87.229.113.0-87.229.114.255
87.229.116.0/24
87.229.118.0/24
87.229.121.0/24
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/24
213.181.207.0/24
213.181.210.0/24
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.53.255
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
72:10:06:fc:7c:48:e7:98:ee:1f:27:a0:7b:53:cd:2e:b9:2f:
23:f7:59:55:54:07:b7:6b:33:dd:0d:50:5e:ab:48:db:cf:18:
55:4c:f7:f4:78:77:23:1b:33:4a:10:2e:47:c9:ff:65:f6:24:
28:56:f3:f8:28:2f:a3:19:14:ae:81:bd:91:b2:96:bb:62:d3:
80:7c:4a:3a:88:1a:e4:ee:fe:a3:9a:01:e8:d5:fa:4a:d6:b7:
90:ab:ac:a6:c5:71:8c:83:ac:e1:45:44:34:80:bd:f2:57:c3:
f5:d2:11:36:8f:fd:05:fc:84:d4:18:d5:b3:09:b9:b4:30:bf:
59:e8:5e:a8:bd:0e:f0:ff:8a:d8:fe:59:41:83:c8:03:74:73:
dc:64:02:38:e9:07:82:44:c4:80:34:b1:7a:d5:75:7a:73:4e:
51:07:96:e8:c5:89:bb:cc:30:20:15:57:4c:c8:57:17:61:ce:
f0:b9:a4:cd:cf:62:f2:ad:67:70:35:ac:16:2c:b0:ab:88:1f:
fd:bb:b6:d1:11:d7:70:05:77:bf:da:cd:39:d8:48:62:8a:dd:
84:ef:f1:3c:a6:4c:53:db:15:46:97:bb:e5:02:00:5f:a0:aa:
8d:26:a6:d6:21:9b:67:43:bf:52:3e:46:98:33:a7:82:4a:1e:
8b:1f:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:44:24 2025 by rpki-client