Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ndwyTXO7xBamcDj43ruVK3LqT8I.roa
File: ndwyTXO7xBamcDj43ruVK3LqT8I.roa (raw, json)
Hash identifier: zSp1dQlCgk5jW7VSPLN505AExlbH52ByTIhuz4b3ipQ=
Subject key identifier: 9D:DC:32:4D:73:BB:C4:16:A6:70:38:F8:DE:BB:95:2B:72:EA:4F:C2
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0194EEB36114AB918981380CA7763FEA7B6E
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ndwyTXO7xBamcDj43ruVK3LqT8I.roa
Signing time: Mon 10 Feb 2025 07:12:00 +0000
ROA not before: Mon 10 Feb 2025 07:12:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 07:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ee:b3:61:14:ab:91:89:81:38:0c:a7:76:3f:ea:7b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 10 07:12:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ddc324d73bbc416a67038f8debb952b72ea4fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:42:fe:b5:a9:ec:da:5f:f3:ee:a1:74:5a:
6e:99:7e:34:2b:35:2d:7a:d6:10:de:a2:d9:ea:2c:
df:61:78:da:03:99:eb:24:d7:e9:be:ce:29:81:d9:
ae:20:d6:e1:6c:2d:df:4a:9d:86:c2:5b:64:50:86:
5c:0e:e3:16:d1:78:cb:15:d3:cb:11:46:b0:bb:77:
56:c0:16:87:89:93:b4:2d:94:5a:84:d0:ad:8a:c1:
6b:84:59:1a:fe:e6:36:f3:40:d0:b4:ab:33:d6:b2:
34:7f:bc:19:0f:8c:c8:af:2a:38:08:81:7a:14:7d:
15:7a:ef:cd:3d:cb:3a:7c:82:36:9a:8a:fa:a0:b3:
ca:b7:77:d5:fa:b6:fd:38:96:a9:e9:ef:a1:c7:59:
83:51:3a:7c:0d:7e:9f:ca:d3:06:7f:91:b2:af:86:
0a:6d:e5:f4:60:e4:b7:57:60:33:77:03:9c:7f:4c:
93:a5:40:33:56:75:86:e3:ab:97:58:fb:d2:33:17:
57:55:e0:f9:64:35:f4:cb:01:d1:22:5a:9f:3a:b7:
42:a4:e6:73:a1:7e:68:b5:fa:04:c6:f7:99:f8:9a:
04:8d:96:db:39:42:91:de:37:50:05:b6:88:cb:ba:
e0:d5:8a:68:1f:53:c3:a6:c2:22:65:2b:9a:4c:e5:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DC:32:4D:73:BB:C4:16:A6:70:38:F8:DE:BB:95:2B:72:EA:4F:C2
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ndwyTXO7xBamcDj43ruVK3LqT8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.48.0/24
87.229.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b5:38:80:a5:fa:79:80:be:cd:43:fd:e1:41:02:2c:1c:93:
e5:28:61:35:a7:11:80:db:4b:34:3b:3c:25:9c:92:31:b2:fc:
d0:43:b1:c3:db:21:f7:ef:ab:4a:08:03:64:34:71:c1:9d:75:
cd:b8:34:d4:9a:ac:74:99:3d:d9:f1:e4:7d:76:db:b8:fe:ce:
d6:73:67:f4:fb:ae:3d:4a:14:ed:d5:bd:bb:b4:24:11:62:cb:
66:a7:dd:70:ef:c8:88:b5:fe:8f:c9:61:b4:70:95:49:da:4f:
bd:1b:f2:2f:7e:e5:a1:93:44:1a:0f:34:f6:88:0b:f4:41:50:
a9:ea:33:78:35:31:50:a9:2e:f9:ae:ee:8d:05:b2:cd:64:fa:
29:64:28:1b:fb:22:f0:60:3d:7c:1a:1d:9c:75:89:10:5f:c4:
28:4f:10:70:d9:84:7f:fc:23:df:8d:9a:03:31:80:1f:d1:8b:
33:2d:1a:be:27:81:5e:8d:1f:0a:f2:25:b3:e8:bc:08:59:a1:
3d:62:cf:ad:e6:93:f5:6e:a1:68:11:69:be:79:1b:15:0d:9b:
02:5c:73:6d:30:95:2b:b6:80:6d:ed:d7:21:86:0a:f1:00:ba:
50:45:3a:84:c0:be:d3:2a:b2:7d:2d:eb:6e:70:ce:60:e3:7a:
cd:36:7d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:56 2025 by rpki-client