Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/7PXRsNQpE3NIHWRT5ueddwBwziU.roa
File: 7PXRsNQpE3NIHWRT5ueddwBwziU.roa (raw, json)
Hash identifier: egCdfeRDQ5S3pM7EK7RLRvVXKIKMLDeCJb/2qGxd57I=
Subject key identifier: EC:F5:D1:B0:D4:29:13:73:48:1D:64:53:E6:E7:9D:77:00:70:CE:25
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 0194C093EA13CAAAD1D081CF0514C106E801
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/7PXRsNQpE3NIHWRT5ueddwBwziU.roa
Signing time: Sat 01 Feb 2025 08:15:06 +0000
ROA not before: Sat 01 Feb 2025 08:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198594
IP address blocks: 37.60.24.0/21 maxlen: 24
37.60.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 09:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c0:93:ea:13:ca:aa:d1:d0:81:cf:05:14:c1:06:e8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Feb 1 08:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecf5d1b0d4291373481d6453e6e79d770070ce25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1a:b9:16:26:d7:86:de:24:1c:a2:42:46:cd:
16:2d:d5:ef:be:0a:0e:71:e8:3e:74:67:a2:c7:ce:
c0:a7:4d:e7:ca:d6:36:35:1c:bb:e6:62:2d:de:28:
b2:a8:66:c8:9c:68:ab:16:b7:29:0f:00:27:cf:df:
22:47:73:d2:08:0b:9d:77:4d:ab:e2:94:f1:78:cb:
87:03:ad:b2:d2:e3:2b:d6:83:f6:16:bb:1b:66:2d:
06:77:32:69:c8:0a:e2:06:5b:47:04:95:0d:aa:87:
22:ae:4f:79:15:4b:20:dc:25:79:d2:20:4e:33:5b:
32:43:b4:d8:48:df:df:9c:8e:70:7d:9a:ef:f7:95:
59:c2:32:04:56:63:fe:a2:1c:cd:68:fe:b5:71:37:
f7:9f:3d:10:df:64:86:4f:c3:ce:5b:18:53:80:d0:
97:bc:c2:2e:e4:99:21:50:6d:d6:0a:1f:bf:f4:75:
80:f3:77:87:ba:0b:d0:dd:36:6a:9a:50:56:3f:95:
1b:d9:d8:1b:7f:e5:74:e8:15:4a:f6:52:5d:3a:99:
78:1e:74:a4:26:c4:cf:d8:74:08:d0:83:45:e0:6c:
ad:ed:82:4f:1d:a4:69:a6:1d:83:9f:0b:e2:eb:c4:
d2:ab:eb:35:14:88:de:f9:12:43:8f:e2:09:bc:46:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F5:D1:B0:D4:29:13:73:48:1D:64:53:E6:E7:9D:77:00:70:CE:25
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/7PXRsNQpE3NIHWRT5ueddwBwziU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.24.0/21
Signature Algorithm: sha256WithRSAEncryption
13:72:61:46:b0:e7:ac:e0:09:13:21:cf:46:c3:53:aa:79:bf:
8b:a3:e0:50:9a:67:96:98:41:cb:86:da:7e:ba:19:a9:42:a0:
80:be:5a:8a:72:8e:ba:5b:6b:12:8b:22:5b:ca:5a:d3:4c:65:
bc:a3:ef:94:63:c7:7a:93:48:a0:9b:e6:94:3c:ad:21:ca:92:
c8:9b:dc:84:a2:23:52:f2:e1:60:f4:6c:54:4b:ed:f8:6a:7a:
c9:ff:b2:c7:6a:83:2f:a3:57:ef:30:cc:af:98:d1:06:15:20:
61:7d:60:50:b8:f9:91:43:28:04:58:b4:d3:1f:82:83:cc:e5:
63:48:05:1d:b0:aa:12:d3:e6:b2:b7:31:b1:aa:af:b3:80:aa:
83:c0:cc:b8:f3:1c:2d:fa:86:0b:9e:f2:0f:5f:21:95:f7:90:
ec:06:33:4e:8c:45:f0:95:3b:fd:0c:04:44:ef:7b:72:87:56:
1b:ab:e5:a6:d4:8e:58:71:27:94:d1:10:21:9e:08:81:23:ff:
c3:36:de:c3:e5:52:f9:f8:9e:6c:94:bc:ca:9f:e6:54:51:6f:
c9:d1:5d:d4:8e:9b:36:93:5f:ea:84:76:5f:da:d1:85:e4:5c:
b1:0a:f4:bf:33:30:a0:79:bb:1f:c2:aa:b8:4c:95:79:dc:ee:
a9:70:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:06:18 2025 by rpki-client