Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nZWr7vkfxsnwZg6bWksijqAw5O4.roa
File: nZWr7vkfxsnwZg6bWksijqAw5O4.roa (raw, json)
Hash identifier: jOHWBNGyFJFTkC668huEjUSVgAPDTLa5zIfyqyB0okQ=
Subject key identifier: 9D:95:AB:EE:F9:1F:C6:C9:F0:66:0E:9B:5A:4B:22:8E:A0:30:E4:EE
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0196F17C32476DA718D6C1B08309A451D9F4
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nZWr7vkfxsnwZg6bWksijqAw5O4.roa
Signing time: Wed 21 May 2025 06:16:10 +0000
ROA not before: Wed 21 May 2025 06:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 87.229.22.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
87.229.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 18:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:7c:32:47:6d:a7:18:d6:c1:b0:83:09:a4:51:d9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 21 06:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d95abeef91fc6c9f0660e9b5a4b228ea030e4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7a:99:af:22:8c:c3:68:43:38:6b:ac:23:45:
ad:37:c6:6c:3b:da:16:bd:c9:08:f5:1b:09:e2:90:
ae:37:1e:d1:c3:f0:27:ca:0d:88:51:0e:f0:20:48:
b8:1d:29:14:f2:2e:28:0a:5e:a5:d1:2d:da:e8:83:
be:e8:83:d2:3f:3c:a5:5b:de:ad:51:cf:b3:bb:35:
2e:64:03:1f:da:b1:79:e5:5e:5c:a0:90:4d:a2:47:
f0:ef:2c:a9:b7:20:9c:fe:c9:30:02:59:dc:44:97:
06:fe:41:e3:3b:ed:e9:a9:da:dc:fe:de:97:62:fe:
c7:3c:01:80:55:78:d1:ac:d2:8f:f8:4a:77:5f:a3:
37:87:4a:56:5f:1b:6a:9d:2b:3b:d9:3b:2f:ef:53:
73:e4:77:d2:18:62:3c:ce:73:41:da:3c:1d:89:f3:
d6:45:c9:af:64:0f:77:ee:d8:fc:f5:c4:48:17:38:
38:87:48:aa:b4:19:60:ef:0c:b3:02:68:47:a2:13:
65:2e:fa:86:72:3c:e1:5c:5a:45:2f:d2:ec:8c:c4:
1f:8a:76:5d:84:f0:1b:7e:ba:31:9e:4b:6a:38:0a:
11:ac:98:4e:0f:17:0c:c6:53:45:d3:44:08:58:f7:
99:35:da:36:94:91:b3:8e:83:78:86:b8:3f:a8:b3:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:95:AB:EE:F9:1F:C6:C9:F0:66:0E:9B:5A:4B:22:8E:A0:30:E4:EE
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nZWr7vkfxsnwZg6bWksijqAw5O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.22.0/24
87.229.79.0/24
87.229.108.0/24
87.229.112.0/24
87.229.124.0/24
Signature Algorithm: sha256WithRSAEncryption
09:94:05:f0:67:9b:42:73:0e:1e:39:73:4e:1f:ed:bc:c1:5d:
17:67:79:92:a2:e6:90:a2:09:59:0d:28:34:12:7f:70:44:0b:
51:1b:4a:42:b2:5e:0c:74:1a:ed:d4:91:52:d4:bf:7d:e5:0b:
78:ec:8f:a7:8f:49:60:e8:a3:70:1b:d0:32:8d:e8:c4:b5:7d:
8d:e1:09:4e:c4:56:0b:56:7a:70:89:d1:c8:54:14:dd:79:a2:
ec:05:ad:c3:6d:3d:fd:93:ef:77:82:51:21:f3:01:16:fa:ef:
85:51:c8:96:7a:04:2e:13:fa:3e:d3:06:dc:17:2b:06:e7:90:
7f:f5:bf:2b:13:84:82:48:f0:6d:e3:9b:e9:63:fa:09:ba:66:
00:a9:8b:c0:eb:17:be:31:94:ca:f4:fc:d9:6a:dc:26:0c:1b:
7f:bb:fd:4a:f0:31:7c:ae:85:fd:30:33:78:78:8d:87:79:db:
d7:73:57:ec:18:4e:53:ec:34:24:5d:60:68:82:c9:5d:d8:4d:
fd:0a:e3:14:72:40:5f:7f:5f:de:32:98:49:18:ae:81:54:e1:
61:7e:87:dd:d7:2f:fd:d3:7b:0a:18:c7:d3:1c:e7:d7:b5:fb:
3a:91:67:e8:27:7e:7a:e8:e4:53:de:91:3c:24:61:06:b1:ea:
5d:b2:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:49 2025 by rpki-client