Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/1-5pQvRUfpHyrPrbdZ6GsVE594ag.roa
File: 1-5pQvRUfpHyrPrbdZ6GsVE594ag.roa (raw, json)
Hash identifier: 7Kutcany57MSExUAr+jtlWvg+A79uCCKubDB0SOm6y8=
Subject key identifier: FB:9A:50:BD:15:1F:A4:7C:AB:3E:B6:DD:67:A1:AC:54:4E:7D:E1:A8
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 0194266BDD82562DFB005C543ADD908B4ADC
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/1-5pQvRUfpHyrPrbdZ6GsVE594ag.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30784
IP address blocks: 79.172.64.0/18 maxlen: 24
82.199.96.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 10:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:dd:82:56:2d:fb:00:5c:54:3a:dd:90:8b:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb9a50bd151fa47cab3eb6dd67a1ac544e7de1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:ea:34:f5:e7:59:49:4c:b3:0f:59:d9:f8:
ae:3f:65:02:da:a8:fd:df:b4:a3:e5:fd:c7:0c:d6:
75:70:5e:31:8f:3d:83:3e:5d:a3:6c:b1:96:b0:bd:
21:f3:7a:34:f7:f5:60:bf:f9:38:e8:de:22:f4:26:
99:32:1a:c2:4a:76:12:06:04:40:ba:4a:4a:32:2b:
53:d5:c0:f5:64:0c:3a:31:70:73:f9:37:c2:5e:58:
41:ed:29:96:8a:18:66:be:e4:2e:f5:c4:fd:38:4a:
7e:5f:6a:04:a7:37:a4:d9:53:35:b1:2e:74:ea:d0:
20:29:dd:e0:1c:bb:eb:90:69:31:b1:78:ee:fc:fc:
52:f0:74:d0:ef:a6:28:91:4f:cc:57:ca:95:dd:55:
fa:a4:6a:ab:3a:5e:1e:b7:8e:ab:79:10:ab:57:6e:
62:a1:93:9e:34:bf:5d:08:85:6a:b4:bb:36:bf:eb:
94:68:eb:b9:0b:3a:dd:c5:7a:08:77:43:ff:4a:eb:
38:32:b1:a1:2f:91:39:21:75:7d:e4:96:f9:03:da:
98:73:0e:14:02:5a:99:51:d2:6f:ab:a9:c1:66:4d:
2d:f0:d8:54:c3:bf:75:05:40:81:2c:1e:98:ba:ae:
8c:bf:ce:a4:61:4a:99:90:d7:f8:df:9e:5f:ee:de:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9A:50:BD:15:1F:A4:7C:AB:3E:B6:DD:67:A1:AC:54:4E:7D:E1:A8
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/1-5pQvRUfpHyrPrbdZ6GsVE594ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.64.0/18
82.199.96.0/19
Signature Algorithm: sha256WithRSAEncryption
03:7c:ac:06:2f:ae:8f:73:6a:28:92:0e:9d:07:24:ab:1d:71:
27:a9:2e:e9:61:bf:37:8e:b6:f8:e5:2a:58:d8:a9:11:1f:9f:
3c:f4:54:65:48:db:e8:1d:98:29:9e:8f:09:1f:1b:c4:f6:f1:
79:f7:1a:30:a6:d6:8a:dc:89:09:de:ee:a2:a0:82:36:1d:04:
f4:1f:9c:2d:ec:35:3e:e1:03:fd:a5:fa:ef:b9:7c:6a:e8:fd:
0b:cd:25:cf:fb:03:a2:4e:d8:ad:c3:51:16:93:93:7a:ca:c9:
56:43:71:36:a0:2c:99:b8:16:85:97:a2:9b:8b:c3:0c:1c:70:
b6:18:96:a0:9f:8b:6d:03:93:e6:8a:f7:b9:8c:6d:41:8f:ae:
2f:22:93:0b:ef:f1:2b:b2:7e:1e:3b:fc:9d:75:e3:c5:61:69:
70:4e:0c:8d:52:07:fb:10:7b:13:55:89:34:62:b1:79:4e:57:
a4:ea:99:a1:08:37:7c:3b:ea:9b:d7:01:42:b1:ff:0c:4d:72:
6c:43:40:a8:17:de:76:0f:ee:b1:a8:b8:8a:3d:ab:8e:a3:76:
50:09:aa:24:3f:d1:4b:7e:59:6a:da:da:c4:54:1b:8f:9c:57:
14:83:f4:57:e0:c3:bf:45:20:e7:6c:c3:cd:9b:39:51:90:d9:
7d:cd:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:22:41 2025 by rpki-client