Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/we6EAuPVqW0IH_340RX85Y48nn8.roa
File: we6EAuPVqW0IH_340RX85Y48nn8.roa (raw, json)
Hash identifier: 0zV4PZu6EZNvMk+w7VdPdltxQQfG+ot5HXoqxOIWGTI=
Subject key identifier: C1:EE:84:02:E3:D5:A9:6D:08:1F:FD:F8:D1:15:FC:E5:8E:3C:9E:7F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827C4890F307E25C78D995CBBB596F8
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/we6EAuPVqW0IH_340RX85Y48nn8.roa
Signing time: Thu 02 Jan 2025 17:54:42 +0000
ROA not before: Thu 02 Jan 2025 17:54:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197889
IP address blocks: 87.229.36.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 15:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:c4:89:0f:30:7e:25:c7:8d:99:5c:bb:b5:96:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1ee8402e3d5a96d081ffdf8d115fce58e3c9e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:26:83:68:5a:2c:ad:26:5f:46:bb:51:63:
2a:90:8b:67:77:12:df:b8:a9:92:ea:af:df:25:95:
bb:de:f6:6c:42:62:8e:a7:e1:6c:94:59:d4:e8:9d:
2b:80:6f:8f:6e:c0:04:c5:c2:d6:f7:c9:cd:a4:e0:
c0:1a:9a:df:5e:2c:6d:a2:66:4b:01:d5:8a:c0:0b:
4b:7d:ae:36:86:a9:05:9d:df:f7:ca:5e:f2:23:7a:
33:bc:43:00:95:c9:59:af:b1:0a:b2:a7:bf:8a:e1:
6d:3e:14:36:1d:d1:ce:42:f9:0b:2b:ad:38:a2:7b:
dd:be:20:43:c4:80:4f:2f:42:8e:a1:1f:53:df:57:
a9:2b:4f:aa:d3:c7:78:57:69:db:e5:5e:c9:2e:59:
6d:d3:fd:b3:a0:5f:3c:b9:82:be:7e:91:44:21:bf:
9a:0d:83:9b:f6:57:81:14:f5:e8:f6:a9:81:1e:f7:
7e:36:dc:90:16:88:29:30:89:db:43:6c:5c:1f:1c:
89:51:98:3b:f2:c6:15:b1:a9:da:e8:c0:1c:87:c8:
9e:97:fa:48:5c:5f:34:d2:d3:ca:09:27:c6:ba:39:
5e:bc:3f:e5:5b:8f:f5:31:ba:dd:7b:fc:b8:30:bf:
82:d1:a6:e0:a3:d8:6e:6d:1a:07:4a:2a:cf:f3:44:
6c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:84:02:E3:D5:A9:6D:08:1F:FD:F8:D1:15:FC:E5:8E:3C:9E:7F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/we6EAuPVqW0IH_340RX85Y48nn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.36.0/23
Signature Algorithm: sha256WithRSAEncryption
38:69:37:a7:3c:88:fe:cd:23:f1:86:c4:7d:da:31:3e:36:d2:
4b:22:23:1a:bc:d9:aa:cd:dc:6a:d2:e9:18:c1:e2:a5:f7:66:
33:b5:be:8c:3b:9a:6d:fe:3e:79:f1:6b:9d:bc:c0:a0:c0:df:
f0:e3:2f:b8:44:28:e6:a8:b7:52:19:21:61:de:5d:1f:09:e0:
06:84:f0:52:b1:bc:bf:ac:d2:d5:01:b5:e4:cb:c7:3a:c3:10:
69:50:7c:80:7d:2c:25:7d:7c:7c:2a:0d:33:9f:b1:29:5c:47:
48:87:f7:b8:c8:72:1a:74:b6:63:a0:25:25:9e:fd:45:25:43:
82:71:5b:37:0f:20:b8:a9:3f:94:76:50:d5:a2:d3:72:61:4e:
04:7e:56:72:15:2f:1b:7b:3b:b6:ad:2d:c1:5c:79:89:44:6e:
9f:17:e3:f2:b0:df:f6:36:a1:2f:52:b2:b3:ec:29:d0:cd:de:
9d:87:ea:6a:bc:49:ab:ca:bb:e0:1b:ef:df:6e:1f:8e:b5:5e:
ef:62:f5:a3:f9:7d:f2:c1:c4:e7:2a:0e:a4:dc:d1:8c:54:1f:
3e:ee:6a:bc:9f:e3:eb:e7:ad:fb:e8:69:70:bd:de:38:54:86:
01:f3:cd:a1:fb:a0:8d:08:89:db:b9:b4:be:43:81:07:f6:46:
aa:74:2d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:49 2025 by rpki-client