Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/n_t-ZxGcNx9Q2tZ_OVZ98mr4NTI.roa
File: n_t-ZxGcNx9Q2tZ_OVZ98mr4NTI.roa (raw, json)
Hash identifier: /32B5D0l00aDjFsQZkXeCpUmlx1wXmk2he0IOX/ko5s=
Subject key identifier: 9F:FB:7E:67:11:9C:37:1F:50:DA:D6:7F:39:56:7D:F2:6A:F8:35:32
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0194FEEE13A68D2BC0422712F8720DDE607F
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/n_t-ZxGcNx9Q2tZ_OVZ98mr4NTI.roa
Signing time: Thu 13 Feb 2025 10:50:02 +0000
ROA not before: Thu 13 Feb 2025 10:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 87.229.12.0/24 maxlen: 24
87.229.35.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 07:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:ee:13:a6:8d:2b:c0:42:27:12:f8:72:0d:de:60:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 13 10:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ffb7e67119c371f50dad67f39567df26af83532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:1f:98:dc:ca:77:77:3b:2c:96:42:fe:e0:
15:e2:a4:bc:89:81:a0:ff:9b:e5:32:37:85:8e:16:
c0:68:33:a4:78:f6:93:51:a4:8f:c8:30:7c:e1:d3:
3a:fe:38:ad:64:0b:f6:da:2e:05:d5:71:80:fb:31:
f9:68:99:c5:5e:49:5b:c8:ff:b4:bd:4c:54:20:0a:
c9:a2:df:34:03:1a:e3:9d:16:c2:e0:ee:0c:ba:75:
c9:57:02:84:7c:01:17:39:eb:ed:20:80:6c:46:d6:
33:46:a9:86:bf:cf:bf:99:2f:59:da:4f:d0:ce:6a:
9a:49:c3:93:f5:81:2c:ba:08:54:b0:a5:fb:b1:2a:
e0:16:d6:4d:ee:10:6f:dd:4a:3e:bd:a4:ef:6d:a9:
79:fa:f7:ce:1a:d9:f0:ca:3f:a8:3c:cb:67:65:e1:
ab:0b:b3:79:cb:39:63:95:4f:93:5a:ad:21:3d:f6:
2e:3e:3a:aa:7f:61:cd:74:de:bd:b8:01:b5:8a:5f:
76:f6:4b:a1:8b:93:1e:fb:04:a1:32:8d:51:ee:cb:
c8:10:f1:32:ac:39:37:54:63:dc:a1:8b:23:ff:c4:
c3:9b:64:3c:b4:31:46:04:64:2b:2f:0d:fd:31:1a:
b1:5c:a3:57:5b:cb:d0:df:45:83:fe:5d:0f:d7:a6:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FB:7E:67:11:9C:37:1F:50:DA:D6:7F:39:56:7D:F2:6A:F8:35:32
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/n_t-ZxGcNx9Q2tZ_OVZ98mr4NTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.12.0/24
87.229.35.0/24
87.229.48.0/24
87.229.50.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3f:6f:a2:e9:ca:06:a8:82:62:35:37:94:11:d5:94:e0:84:
01:04:bf:26:e7:92:68:09:36:6a:dd:ef:d9:80:bf:08:25:5a:
02:73:b1:90:ef:12:35:e5:db:92:79:bf:3e:eb:a6:6e:9e:69:
48:f4:67:b3:78:14:c3:f9:46:25:ba:95:63:34:61:13:b1:38:
e9:bd:78:21:b1:d3:bc:1d:88:b6:23:8b:45:e0:f2:f0:78:83:
f8:dc:fe:ea:4b:f5:d2:ca:3d:ba:44:85:cc:d6:ad:cd:a3:a9:
82:7d:a9:4b:f9:59:34:5c:e2:e5:86:83:dc:37:e2:ce:ec:fa:
25:72:11:27:2a:9c:eb:bb:d0:fa:21:45:1c:4c:3a:61:8c:5e:
74:2f:eb:40:f7:83:8d:f8:a7:b5:33:6a:25:52:d1:ad:0b:05:
30:6f:76:b0:af:f5:f1:b0:fc:6c:8d:79:2b:a3:9b:f0:34:b7:
6d:89:51:99:48:69:c6:f6:d7:8a:93:7f:54:89:ca:40:92:33:
f2:fb:6f:73:fa:46:00:21:04:ee:85:ea:64:34:33:3e:79:41:
5e:cb:2e:fb:86:5e:1f:9b:0d:99:ce:6f:ef:ce:d5:71:a5:c0:
a8:c7:cf:5a:15:e2:92:b3:32:0c:21:62:c3:68:1b:47:3f:3f:
69:ca:65:e8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZT+7hOmjSvAQicS+HIN3mB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwMjEzMTA1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmZiN2U2NzExOWMzNzFmNTBkYWQ2N2YzOTU2N2RmMjZhZjgzNTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJofmNzKd3c7LJZC/uAV4qS8iYGg
/5vlMjeFjhbAaDOkePaTUaSPyDB84dM6/jitZAv22i4F1XGA+zH5aJnFXklbyP+0
vUxUIArJot80AxrjnRbC4O4MunXJVwKEfAEXOevtIIBsRtYzRqmGv8+/mS9Z2k/Q
zmqaScOT9YEsughUsKX7sSrgFtZN7hBv3Uo+vaTvbal5+vfOGtnwyj+oPMtnZeGr
C7N5yzljlU+TWq0hPfYuPjqqf2HNdN69uAG1il929kuhi5Me+wShMo1R7svIEPEy
rDk3VGPcoYsj/8TDm2Q8tDFGBGQrLw39MRqxXKNXW8vQ30WD/l0P16b7qQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJ/7fmcRnDcfUNrWfzlWffJq+DUyMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvbl90LVp4R2NOeDlRMnRaX09WWjk4bXI0TlRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV+UMAwQA
V+UjAwQAV+UwAwQAV+UyMA0GCSqGSIb3DQEBCwUAA4IBAQByP2+i6coGqIJiNTeU
EdWU4IQBBL8m55JoCTZq3e/ZgL8IJVoCc7GQ7xI15duSeb8+66ZunmlI9GezeBTD
+UYlupVjNGETsTjpvXghsdO8HYi2I4tF4PLweIP43P7qS/XSyj26RIXM1q3No6mC
falL+Vk0XOLlhoPcN+LO7PolchEnKpzru9D6IUUcTDphjF50L+tA94ON+Ke1M2ol
UtGtCwUwb3awr/XxsPxsjXkro5vwNLdtiVGZSGnG9teKk39UicpAkjPy+29z+kYA
IQTuhepkNDM+eUFeyy77hl4fmw2Zzm/vztVxpcCox89aFeKSszIMIWLDaBtHPz9p
ymXo
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:17 2025 by rpki-client