Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ZWeI8nbMoPCbKw_fLtxCpz5FLIs.roa
File: ZWeI8nbMoPCbKw_fLtxCpz5FLIs.roa (raw, json)
Hash identifier: Cm3GZqUFFV0jihzt9Or5YyVQIyETKHJiUDuedEWhMXg=
Subject key identifier: 65:67:88:F2:76:CC:A0:F0:9B:2B:0F:DF:2E:DC:42:A7:3E:45:2C:8B
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019753D2910451DBF649EE94AD18839A5CD8
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ZWeI8nbMoPCbKw_fLtxCpz5FLIs.roa
Signing time: Mon 09 Jun 2025 08:33:18 +0000
ROA not before: Mon 09 Jun 2025 08:33:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 79.172.254.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 08:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:d2:91:04:51:db:f6:49:ee:94:ad:18:83:9a:5c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 9 08:33:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=656788f276cca0f09b2b0fdf2edc42a73e452c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:3c:6b:73:e5:fd:a1:e8:cb:2e:6b:92:0d:
47:22:57:a5:54:32:2a:d5:02:78:70:46:2b:35:bf:
bc:b4:ab:96:7f:51:36:14:41:7e:3b:9f:5a:be:e0:
55:f3:71:2d:27:32:38:34:64:fe:0f:33:7a:9e:0d:
64:66:ab:8e:32:87:64:ac:8b:6c:eb:0b:06:ba:7d:
7a:af:cc:38:10:63:9d:aa:3b:44:73:6f:ce:a2:6d:
db:4f:bb:dc:cd:f5:c3:9f:3a:a8:96:2c:89:87:23:
5c:39:06:bf:ff:a1:75:d0:0a:61:ae:82:85:e3:77:
31:e8:c1:13:bb:61:5a:44:42:31:ce:2d:21:a2:c3:
1c:e6:e1:3c:74:4f:e4:ca:7a:01:12:51:a4:87:b4:
3f:b8:ba:63:f3:ce:02:19:e7:fc:bf:6d:72:ce:59:
c2:b8:9a:d2:0e:94:ed:af:af:bf:e8:ae:6e:33:58:
69:35:52:2b:8e:ff:d2:cf:e9:61:54:10:b7:d9:3f:
d6:aa:4c:65:1a:dc:6a:93:2c:a0:d1:64:b6:65:0a:
a3:73:54:a0:08:f0:c5:43:29:46:01:03:28:5c:90:
d9:6c:cf:20:81:24:5c:cd:61:59:27:16:16:c2:79:
c1:94:1b:c1:53:d8:9f:6b:d2:da:f9:b4:e6:ea:86:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:67:88:F2:76:CC:A0:F0:9B:2B:0F:DF:2E:DC:42:A7:3E:45:2C:8B
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ZWeI8nbMoPCbKw_fLtxCpz5FLIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.254.0/24
87.229.80.0/23
Signature Algorithm: sha256WithRSAEncryption
51:47:95:db:f7:cd:5d:f6:f0:6d:84:09:47:8d:fc:4b:8b:b2:
91:9f:6d:ee:35:18:d1:1f:35:c9:14:da:c3:84:0b:9a:28:ca:
4f:70:a8:1d:e4:ba:62:66:2d:88:20:5f:80:d9:24:76:1c:50:
2d:17:36:b9:d7:be:61:fa:a4:b6:10:5d:0f:68:0e:90:15:3c:
19:1a:44:65:a2:2b:97:0d:f6:79:02:3d:66:7c:5f:8e:b0:7a:
8c:b3:2c:2d:a0:d4:2c:28:e5:8a:cf:41:7c:9b:43:fe:f4:31:
d2:61:f1:9c:9f:37:59:36:63:db:11:36:1c:a0:a9:0d:da:bf:
54:65:6d:38:46:76:dc:5c:38:05:f8:91:03:40:19:0d:4d:68:
dd:5d:38:fd:33:91:d1:6e:f4:41:b1:3c:a1:74:2e:84:a4:4d:
17:b8:30:73:ff:5f:d0:1a:e8:60:eb:09:b0:38:25:37:87:e0:
52:02:1a:eb:24:48:1d:97:30:ff:77:d0:2d:87:45:25:46:f1:
e9:f2:30:d1:7a:12:28:ad:11:88:53:65:ae:c6:33:d7:eb:62:
de:37:ac:46:8e:34:cf:a5:c1:05:25:a6:8b:e8:8c:e0:2d:ce:
1b:54:11:68:07:0e:cf:7e:da:7d:0f:c4:d6:4c:c0:e1:91:08:
e1:8e:fe:7f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdT0pEEUdv2Se6UrRiDmlzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNjA5MDgzMzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTY3ODhmMjc2Y2NhMGYwOWIyYjBmZGYyZWRjNDJhNzNlNDUyYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2go8a3Pl/aHoyy5rkg1HIlelVDIq
1QJ4cEYrNb+8tKuWf1E2FEF+O59avuBV83EtJzI4NGT+DzN6ng1kZquOModkrIts
6wsGun16r8w4EGOdqjtEc2/Oom3bT7vczfXDnzqoliyJhyNcOQa//6F10AphroKF
43cx6METu2FaREIxzi0hosMc5uE8dE/kynoBElGkh7Q/uLpj884CGef8v21yzlnC
uJrSDpTtr6+/6K5uM1hpNVIrjv/Sz+lhVBC32T/WqkxlGtxqkyyg0WS2ZQqjc1Sg
CPDFQylGAQMoXJDZbM8ggSRczWFZJxYWwnnBlBvBU9ifa9La+bTm6oZTMQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGVniPJ2zKDwmysP3y7cQqc+RSyLMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvWldlSThuYk1vUENiS3dfZkx0eENwejVGTElzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT6z+AwQB
V+VQMA0GCSqGSIb3DQEBCwUAA4IBAQBRR5Xb981d9vBthAlHjfxLi7KRn23uNRjR
HzXJFNrDhAuaKMpPcKgd5LpiZi2IIF+A2SR2HFAtFza5175h+qS2EF0PaA6QFTwZ
GkRloiuXDfZ5Aj1mfF+OsHqMsywtoNQsKOWKz0F8m0P+9DHSYfGcnzdZNmPbETYc
oKkN2r9UZW04RnbcXDgF+JEDQBkNTWjdXTj9M5HRbvRBsTyhdC6EpE0XuDBz/1/Q
Guhg6wmwOCU3h+BSAhrrJEgdlzD/d9Ath0UlRvHp8jDRehIorRGIU2WuxjPX62Le
N6xGjjTPpcEFJaaL6IzgLc4bVBFoBw7Pftp9D8TWTMDhkQjhjv5/
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:11:17 2025 by rpki-client