Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/myMXI46gn2EABQKCElt8t_qygxc.roa
File: myMXI46gn2EABQKCElt8t_qygxc.roa (raw, json)
Hash identifier: SY6WYOC2RVVzvRbziZc4CXTZCRajLp9h/SYiajMPSE8=
Subject key identifier: 9B:23:17:23:8E:A0:9F:61:00:05:02:82:12:5B:7C:B7:FA:B2:83:17
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0194D527DB0CC5D195270B1EC37369B82F3F
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/myMXI46gn2EABQKCElt8t_qygxc.roa
Signing time: Wed 05 Feb 2025 08:09:06 +0000
ROA not before: Wed 05 Feb 2025 08:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
79.172.211.0/24 maxlen: 24
79.172.213.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.14.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.22.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
87.229.121.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
217.144.62.0/24 maxlen: 24
2a02:730::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 21 Feb 2025 13:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:27:db:0c:c5:d1:95:27:0b:1e:c3:73:69:b8:2f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 5 08:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b2317238ea09f6100050282125b7cb7fab28317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:48:d6:83:9e:b7:e5:99:e0:8e:a7:f3:a9:
84:3e:5d:dc:86:86:ec:39:c0:d5:71:1f:fa:c8:4b:
15:12:00:c6:b4:94:74:6b:4a:ce:fb:a9:c5:29:9e:
ca:47:9e:b5:7a:91:97:b8:dc:a2:36:ab:68:5c:16:
25:1e:cf:fb:69:02:ae:b2:4a:8f:cd:ed:33:8d:39:
31:71:76:fb:ae:59:7d:4b:59:7b:a3:5b:a2:2f:c0:
b8:e4:5e:96:70:8f:f8:a9:c4:56:ab:7f:5e:d1:fa:
8f:c8:06:0e:30:b2:b6:0e:b8:b1:55:d6:5f:43:e2:
e6:6a:26:f9:16:0c:de:44:20:d1:09:93:8e:c4:93:
2d:5c:29:12:b8:dd:04:47:c9:56:35:3e:d5:71:0d:
5e:65:bd:ec:64:4a:f1:45:5c:c2:f9:c7:1b:3c:37:
d6:91:b6:4b:6c:7c:a9:fc:cc:d1:47:7f:a1:1f:ba:
d4:0b:8c:fb:c1:9a:bf:34:3a:35:e9:e3:a6:e1:ce:
bb:a5:0b:09:27:f8:b7:23:98:18:99:8a:6d:77:1e:
9a:41:36:f3:3e:3d:2d:78:4e:2f:60:43:40:29:99:
f0:8c:f5:15:b2:31:25:8b:25:bf:22:aa:b7:f8:ce:
f6:75:6d:b0:4a:93:cf:08:e0:0c:6b:c1:49:3c:9e:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:23:17:23:8E:A0:9F:61:00:05:02:82:12:5B:7C:B7:FA:B2:83:17
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/myMXI46gn2EABQKCElt8t_qygxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.0.0/19
87.229.14.0/23
87.229.22.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.65.0-87.229.66.255
87.229.73.0-87.229.75.255
87.229.78.0/23
87.229.83.0/24
87.229.93.0-87.229.94.255
87.229.96.0/24
87.229.105.0/24
87.229.113.0-87.229.114.255
87.229.116.0/24
87.229.118.0/24
87.229.121.0/24
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/24
213.181.207.0/24
213.181.210.0/24
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.53.255
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
24:8e:48:a5:63:dc:70:85:5b:93:de:bd:91:93:47:f4:a5:01:
5e:53:c3:60:ff:dc:6e:5b:35:de:64:13:ff:18:80:8d:2e:2e:
06:2a:08:78:db:96:10:e4:df:be:18:01:10:14:52:60:74:79:
46:1c:92:d7:a5:b3:37:c1:54:d3:2d:ae:02:31:d5:f7:8e:70:
42:87:84:18:75:b7:29:b6:6d:bc:ee:28:84:e5:fe:b9:f2:f1:
c8:70:16:64:ef:0f:0e:c6:36:06:4c:82:f9:3f:1a:a9:1e:10:
41:15:4b:a6:86:9b:77:80:46:56:aa:e0:7b:5c:b9:ad:6f:70:
14:5b:28:80:37:57:ef:8d:5e:87:b5:6a:64:85:db:b0:dc:60:
66:4d:39:e5:f6:33:b0:28:4d:d2:d3:2d:72:32:fd:25:fa:75:
6a:4c:ed:8e:74:b3:5b:be:a7:04:ba:17:60:3b:69:a2:06:f7:
90:e2:0a:79:da:61:3d:12:7a:c4:95:4a:3b:43:fd:28:7f:dd:
9d:c2:8a:69:26:43:52:fb:56:95:a6:f9:18:55:df:63:aa:80:
67:b9:20:97:cf:0c:10:6a:0b:2a:61:65:1a:d2:1d:92:ec:99:
60:f9:1d:86:6a:39:99:1a:80:b4:7c:21:3d:e0:19:55:12:34:
cc:2b:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:00 2025 by rpki-client