Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/A74rz-ume3SwQt3kXn2xjFk1MeU.roa
File: A74rz-ume3SwQt3kXn2xjFk1MeU.roa (raw, json)
Hash identifier: L5hA8LGzB5xh7zVahwlhIXB1qBvypdkDuoiK87IVO14=
Subject key identifier: 03:BE:2B:CF:EB:A6:7B:74:B0:42:DD:E4:5E:7D:B1:8C:59:35:31:E5
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0196784291334A7DF56BB718FBA5615D12B0
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/A74rz-ume3SwQt3kXn2xjFk1MeU.roa
Signing time: Sun 27 Apr 2025 17:19:10 +0000
ROA not before: Sun 27 Apr 2025 17:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 79.172.208.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
87.229.11.0/24 maxlen: 24
87.229.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Apr 2025 06:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:42:91:33:4a:7d:f5:6b:b7:18:fb:a5:61:5d:12:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 27 17:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03be2bcfeba67b74b042dde45e7db18c593531e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:46:5a:82:40:d0:f7:c0:80:60:09:79:72:
17:57:47:80:85:7c:a0:cd:d4:a6:1d:6e:04:ac:47:
3d:43:f2:f3:e8:13:2d:b3:ba:10:83:a9:e1:ae:f0:
28:d4:b8:04:25:65:a5:f2:82:f7:ba:f2:c2:b7:21:
88:96:50:03:74:91:da:2f:b6:cc:67:12:c7:a5:6a:
33:88:bf:65:4c:fe:5e:f0:b0:3c:06:1a:b6:4f:30:
38:a3:f7:8b:ec:23:0c:d5:7a:1c:e6:89:18:07:ec:
8d:7f:03:3a:1a:d1:97:e0:dd:96:6a:08:d2:83:79:
2d:c2:1f:ea:d8:a4:0f:30:8c:10:25:34:77:26:8f:
61:79:7f:61:01:94:32:55:6d:37:12:02:d5:e9:9b:
77:c9:84:1a:79:d2:0a:a1:25:49:ce:d5:7c:3a:65:
88:99:26:57:06:20:4f:77:45:17:bf:fc:f8:f1:d4:
d7:90:32:ee:f6:4b:c0:da:87:cd:87:45:20:01:b8:
ca:d1:cb:26:c7:8c:a5:e9:37:d2:26:dc:05:b7:19:
b7:58:2e:98:85:67:9f:51:aa:ba:1c:89:e0:5d:c2:
2c:ab:3a:b1:19:0e:eb:d0:81:56:9d:84:f0:32:73:
f9:4f:83:26:0c:ee:3f:07:41:ae:38:6a:95:0e:cb:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BE:2B:CF:EB:A6:7B:74:B0:42:DD:E4:5E:7D:B1:8C:59:35:31:E5
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/A74rz-ume3SwQt3kXn2xjFk1MeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.208.0/24
79.172.228.0/24
87.229.11.0/24
87.229.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:4a:9a:29:35:76:dd:b5:71:43:ab:3f:b3:68:9a:28:54:7e:
ab:39:7f:3c:0c:26:8a:84:3f:71:3d:2a:ba:3c:8d:d3:df:08:
2a:aa:04:68:96:c8:55:67:35:cc:f9:a5:25:81:e1:a0:e4:04:
20:e9:7d:50:ed:75:82:f4:56:c1:42:06:e7:80:02:07:ec:54:
f1:19:f9:4b:6e:44:c6:36:4b:83:c2:85:4b:e6:8d:db:ea:b7:
4a:41:7f:44:d9:b1:4c:8c:fd:dd:ab:ad:1b:2d:6a:da:58:c2:
d9:9a:12:19:06:49:d7:5e:fa:3a:3c:eb:fc:4e:45:54:a0:87:
35:39:08:e1:f9:b0:56:81:7c:8b:c0:fa:2f:19:9c:48:29:6c:
6c:e8:20:dd:6f:98:1d:86:05:f3:4c:02:52:f2:75:09:49:d6:
92:40:d5:6d:cf:c9:34:62:35:35:f5:c5:2f:18:92:36:95:4b:
5d:03:36:71:84:6d:8e:51:ab:5e:f9:fe:23:73:cf:93:61:bc:
72:3f:ca:99:57:e9:d4:0e:aa:c6:76:41:d1:aa:51:f0:d9:f4:
d0:fc:8b:16:62:ea:a5:de:17:7b:9b:d6:33:4c:f2:bd:f6:64:
aa:26:fb:e4:6c:82:a7:16:dd:65:2a:fd:58:15:d2:e2:bb:f1:
b5:31:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:41:41 2025 by rpki-client