Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WFwcPQybmmwSDu3Iyc9fJMgYRz0.roa
File: WFwcPQybmmwSDu3Iyc9fJMgYRz0.roa (raw, json)
Hash identifier: M52bJqBYTdhJw/FFuBfIgLjmDnKITyeadbbvj2X+LFc=
Subject key identifier: 58:5C:1C:3D:0C:9B:9A:6C:12:0E:ED:C8:C9:CF:5F:24:C8:18:47:3D
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01967B0AD9839FA3E5C60100EC8366054844
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WFwcPQybmmwSDu3Iyc9fJMgYRz0.roa
Signing time: Mon 28 Apr 2025 06:17:10 +0000
ROA not before: Mon 28 Apr 2025 06:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 79.172.208.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
87.229.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 09:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:0a:d9:83:9f:a3:e5:c6:01:00:ec:83:66:05:48:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 28 06:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=585c1c3d0c9b9a6c120eedc8c9cf5f24c818473d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:86:10:0d:86:0c:2e:5b:34:74:25:c5:d4:
23:43:0c:d9:27:3a:9a:08:0a:1b:fc:42:fa:85:1c:
08:0f:79:21:45:a0:1b:8b:af:b5:46:bd:96:64:bc:
7a:36:4f:a7:af:8f:10:f4:2d:6d:5f:e3:67:a2:f7:
74:a7:f5:f9:af:8a:3e:6f:57:e6:cf:08:75:9d:69:
a5:b1:cb:9d:5c:06:d6:87:a0:75:f4:46:da:f2:51:
25:cd:64:9a:01:ef:50:ba:64:59:69:49:40:a0:fe:
e4:39:0d:7f:06:e9:05:f8:ed:83:8e:e5:b0:c0:54:
c6:00:37:db:8b:85:66:74:84:8d:8e:d1:84:ca:73:
74:63:c7:f3:52:ab:ff:bf:8d:91:84:1b:a3:97:a0:
8a:37:fc:d5:2a:99:21:95:ee:d2:50:7e:90:b4:b3:
2c:cc:a8:4e:f3:f6:8b:8a:54:1b:d0:88:dc:20:de:
80:02:32:5e:ae:6e:51:8f:3f:e6:bb:35:a6:e5:71:
9e:2a:7f:5a:41:96:90:10:96:31:eb:1b:3e:6d:a4:
14:6c:ed:d8:30:2e:e2:d2:c5:0a:92:a9:0b:c8:5b:
9e:6c:4d:88:fc:72:83:a0:7c:7e:ef:fc:98:88:ad:
5f:95:ab:5a:9f:d4:09:fd:79:b4:3d:15:5c:ec:7d:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5C:1C:3D:0C:9B:9A:6C:12:0E:ED:C8:C9:CF:5F:24:C8:18:47:3D
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WFwcPQybmmwSDu3Iyc9fJMgYRz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.208.0/24
79.172.228.0/24
87.229.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ba:64:01:76:d5:15:46:9c:c2:18:46:1c:c4:de:86:d6:c0:
3f:99:40:13:e4:6a:ef:6d:37:a4:58:c7:6c:d8:e8:bd:28:47:
29:a2:11:b0:bf:b0:13:f7:c1:8b:48:81:47:96:f7:76:1a:5f:
d5:f9:eb:ef:dd:9d:b9:73:91:8b:f6:31:a1:ec:62:fe:19:e1:
af:14:44:41:7c:ea:6a:7d:01:da:96:6b:ae:bb:f0:91:4a:ea:
05:e8:ff:fc:4d:c4:75:2d:d6:88:72:d5:78:fd:38:74:54:b4:
20:0c:39:80:7f:35:a9:95:69:34:0d:f3:43:c1:70:de:f4:0f:
8f:30:e2:3b:78:fb:04:71:77:f7:61:de:0a:91:7f:f9:1a:47:
e5:91:2f:81:35:be:34:51:da:67:14:7e:0b:fe:fb:c8:62:9a:
30:ee:37:4e:3e:ae:52:28:6c:c0:b2:7e:bf:91:d3:a8:7c:f3:
68:35:c9:28:f6:9a:e9:80:7c:2e:aa:bb:21:44:4e:b9:28:1c:
16:cb:7f:11:cf:5a:12:96:f9:4f:c6:82:9a:9b:cd:de:e2:a3:
08:c6:d4:22:51:16:52:4b:51:e1:29:41:7f:48:74:19:40:5f:
08:61:34:cc:13:a0:4d:e8:f3:18:2c:fa:11:a0:60:9e:3c:4a:
56:a9:b8:b6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZZ7CtmDn6PlxgEA7INmBUhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNDI4MDYxNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODVjMWMzZDBjOWI5YTZjMTIwZWVkYzhjOWNmNWYyNGM4MTg0NzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2yGEA2GDC5bNHQlxdQjQwzZJzqa
CAob/EL6hRwID3khRaAbi6+1Rr2WZLx6Nk+nr48Q9C1tX+Nnovd0p/X5r4o+b1fm
zwh1nWmlscudXAbWh6B19Eba8lElzWSaAe9QumRZaUlAoP7kOQ1/BukF+O2DjuWw
wFTGADfbi4VmdISNjtGEynN0Y8fzUqv/v42RhBujl6CKN/zVKpkhle7SUH6QtLMs
zKhO8/aLilQb0IjcIN6AAjJerm5Rjz/muzWm5XGeKn9aQZaQEJYx6xs+baQUbO3Y
MC7i0sUKkqkLyFuebE2I/HKDoHx+7/yYiK1flatan9QJ/Xm0PRVc7H24QwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFhcHD0Mm5psEg7tyMnPXyTIGEc9MB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvV0Z3Y1BReWJtbXdTRHUzSXljOWZKTWdZUnowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT6zQAwQA
T6zkAwQAV+V9MA0GCSqGSIb3DQEBCwUAA4IBAQArumQBdtUVRpzCGEYcxN6G1sA/
mUAT5GrvbTekWMds2Oi9KEcpohGwv7AT98GLSIFHlvd2Gl/V+evv3Z25c5GL9jGh
7GL+GeGvFERBfOpqfQHalmuuu/CRSuoF6P/8TcR1LdaIctV4/Th0VLQgDDmAfzWp
lWk0DfNDwXDe9A+PMOI7ePsEcXf3Yd4KkX/5GkflkS+BNb40UdpnFH4L/vvIYpow
7jdOPq5SKGzAsn6/kdOofPNoNcko9prpgHwuqrshRE65KBwWy38Rz1oSlvlPxoKa
m83e4qMIxtQiURZSS1HhKUF/SHQZQF8IYTTME6BN6PMYLPoRoGCePEpWqbi2
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:28:16 2025 by rpki-client