Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/yx_jgZKEaZtW8KqmCIWagedzc7E.roa
File: yx_jgZKEaZtW8KqmCIWagedzc7E.roa (raw, json)
Hash identifier: qso4uRx9F3nz0isDd2g8uF/K8e6qmrTLVMqQGVezWRc=
Subject key identifier: CB:1F:E3:81:92:84:69:9B:56:F0:AA:A6:08:85:9A:81:E7:73:73:B1
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01917A5B32EA5C4D12480C5C6E0839D115FE
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/yx_jgZKEaZtW8KqmCIWagedzc7E.roa
Signing time: Thu 22 Aug 2024 13:51:22 +0000
ROA not before: Thu 22 Aug 2024 13:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39679
IP address blocks: 79.172.218.0/24 maxlen: 24
79.172.220.0/24 maxlen: 24
87.229.14.0/24 maxlen: 24
87.229.22.0/24 maxlen: 24
87.229.70.0/24 maxlen: 24
87.229.71.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
213.181.201.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
217.144.60.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 13:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:5b:32:ea:5c:4d:12:48:0c:5c:6e:08:39:d1:15:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 22 13:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb1fe3819284699b56f0aaa608859a81e77373b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:34:da:c0:d3:29:99:ef:e8:62:0c:83:2e:
16:0c:f0:ec:39:9c:46:43:46:45:3e:2b:c7:47:64:
9c:d8:1e:7d:38:92:e8:f4:d6:06:48:df:81:2f:3e:
37:6e:6f:73:40:ff:3e:04:26:20:b4:32:c4:4a:ee:
40:77:41:96:3c:eb:9f:77:60:bd:6f:05:5b:cd:d9:
69:9b:df:eb:5c:8f:3f:62:07:c6:92:b9:23:53:e8:
08:ee:e4:d4:a3:14:58:69:b0:6a:6a:5e:52:8c:99:
3c:b3:05:d3:33:aa:f2:0b:04:1b:0f:d4:80:d8:a1:
7a:1d:79:b7:c6:3c:0a:c3:b9:d5:82:94:be:9e:bc:
d2:43:b0:15:04:e1:0d:80:1e:71:e7:c1:2b:44:0f:
b0:9c:42:89:5a:ae:eb:8c:5e:29:bc:e6:e2:95:95:
1e:87:51:d7:17:2e:59:04:8d:36:d8:ba:8c:77:f0:
62:1f:4b:e4:a0:38:4a:84:88:4d:69:ae:73:99:ed:
8a:1b:a7:7a:9e:cc:a8:94:b4:d8:3f:f2:7b:bf:94:
1f:e1:1b:37:b3:fe:14:97:bd:63:67:1d:2f:b9:17:
b2:6f:d7:d2:42:b8:fa:be:70:b3:a1:5a:ee:a3:30:
20:4e:59:5c:86:bb:8f:6c:13:f3:16:2c:95:7a:76:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1F:E3:81:92:84:69:9B:56:F0:AA:A6:08:85:9A:81:E7:73:73:B1
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/yx_jgZKEaZtW8KqmCIWagedzc7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.218.0/24
79.172.220.0/24
87.229.14.0/24
87.229.22.0/24
87.229.70.0/23
87.229.79.0/24
87.229.81.0/24
87.229.97.0/24
213.181.201.0/24
217.144.59.0-217.144.60.255
217.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
90:98:ed:fe:b2:cb:ab:60:fb:1c:3f:e3:22:e9:b1:d9:85:56:
d9:a3:59:87:d0:59:f9:0f:1c:78:df:29:e9:4f:dd:c3:41:10:
3c:1a:28:c8:09:c2:f8:7c:3b:cf:86:a6:10:b3:49:02:36:4c:
2d:20:86:1f:40:6c:6a:a2:ec:c3:51:1b:79:17:86:c9:93:c7:
9a:14:4f:19:c7:f6:32:00:92:5d:83:e0:aa:30:02:c7:bf:7e:
0c:db:a2:ec:bf:fa:d5:41:3c:f3:78:06:00:ae:34:ee:40:7e:
26:fa:8b:e1:90:fd:a9:3b:c3:56:da:34:cc:bc:a4:6e:05:3c:
16:42:7d:e4:b1:f9:3e:54:e8:15:2d:3a:1b:d7:f9:87:84:a4:
a8:0a:08:6e:a9:75:c1:8a:22:52:8e:f7:ca:d1:38:a9:e9:ed:
22:b0:b7:a9:40:b0:fb:4d:52:bc:75:c0:f6:9c:3d:ad:3b:e1:
b0:f2:1a:a1:3e:81:0e:75:30:72:5c:b0:b0:84:6d:ff:01:b3:
e4:3d:d3:10:6f:c4:f7:38:79:1c:23:b2:c1:88:33:01:3e:80:
b2:a8:e5:10:c0:4e:01:3f:68:6b:58:42:e2:00:2f:ef:aa:4d:
89:d9:9a:60:eb:37:b6:77:38:9d:31:04:07:dc:f8:50:46:c6:
7e:81:13:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:24:34 2025 by rpki-client