Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pfSuVRTXi0EN2ZNNe_gs6M_C1NI.roa
File: pfSuVRTXi0EN2ZNNe_gs6M_C1NI.roa (raw, json)
Hash identifier: 9UfV2fcULs2vgiW4RNSzPXxbCo0x2N03JgYLLZtmjlo=
Subject key identifier: A5:F4:AE:55:14:D7:8B:41:0D:D9:93:4D:7B:F8:2C:E8:CF:C2:D4:D2
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01965EFD7295F0321A079567E8DBC2A9C1B6
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pfSuVRTXi0EN2ZNNe_gs6M_C1NI.roa
Signing time: Tue 22 Apr 2025 19:33:10 +0000
ROA not before: Tue 22 Apr 2025 19:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.8.0/22 maxlen: 22
87.229.31.0/24 maxlen: 24
87.229.64.0/24 maxlen: 24
87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
87.229.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 15:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:fd:72:95:f0:32:1a:07:95:67:e8:db:c2:a9:c1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 22 19:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5f4ae5514d78b410dd9934d7bf82ce8cfc2d4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:15:a6:7d:e6:77:75:27:d1:a7:a9:77:09:
55:74:41:68:72:af:aa:20:2a:b8:ce:40:45:6e:50:
04:d3:1e:5d:06:39:09:31:17:bc:ba:ed:11:c1:42:
ba:0a:df:d3:bf:ee:66:1d:3f:13:b2:3e:54:fb:58:
fc:d6:2a:89:3c:22:33:8f:5a:d3:d0:42:94:6e:c4:
db:fe:ea:37:e6:e4:40:a9:25:b4:f8:3f:81:8a:94:
1a:d5:c7:dc:f9:1a:36:41:41:42:ad:10:88:a6:3b:
41:b8:00:ac:04:40:2f:23:21:27:dc:65:87:b2:fc:
e7:1c:ac:63:c4:ac:59:0f:9e:50:b7:61:23:8f:ea:
fc:7b:72:fe:79:85:f8:99:f8:b0:8e:0f:60:c2:e5:
7b:ea:48:d9:a2:86:fe:c5:20:ec:45:10:15:f6:6a:
04:01:ae:28:c3:28:95:33:29:03:0e:8a:c1:ad:95:
39:a8:8e:08:59:db:e2:9f:01:14:06:49:4a:04:fe:
b3:2d:f4:14:3f:f3:1a:50:70:af:f0:de:d3:43:85:
31:b3:58:b7:55:72:1d:a4:53:0e:4c:8f:ea:37:03:
41:40:82:56:20:69:2f:59:1f:3b:c3:18:0e:db:57:
20:0c:ef:60:1c:d5:10:06:07:59:c8:28:9e:ae:e5:
f3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F4:AE:55:14:D7:8B:41:0D:D9:93:4D:7B:F8:2C:E8:CF:C2:D4:D2
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pfSuVRTXi0EN2ZNNe_gs6M_C1NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.8.0/22
87.229.31.0/24
87.229.64.0/24
87.229.108.0/24
87.229.112.0/24
87.229.125.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5c:bc:57:69:0f:e7:6f:39:ac:56:f1:a0:d3:be:b9:7b:1b:
94:3a:cd:e8:83:76:c9:d1:1b:a7:41:9a:1c:ba:07:71:0a:91:
e0:28:10:24:f2:08:45:14:b3:b0:66:15:81:a2:c3:3b:54:b6:
64:fd:50:87:68:f1:cc:75:ce:d9:f4:5e:eb:5d:e8:2d:62:dd:
21:90:21:44:32:c0:4f:58:76:dc:c6:de:3d:d9:74:2f:e8:35:
47:37:6e:72:19:9b:e3:1c:52:4b:c0:a9:9e:d6:d8:f1:ac:bf:
8c:ca:db:e5:88:d6:c1:1e:dc:92:82:e1:b4:9f:7c:6a:1f:f2:
e2:1b:0e:28:49:d1:cf:36:6a:51:08:6a:16:54:31:2b:d1:9f:
0e:c8:e2:4b:55:ee:9d:39:01:c0:9d:c6:d3:4f:5a:24:21:cb:
57:57:76:84:f6:04:88:e1:c5:9c:49:53:6d:2d:0f:b4:00:62:
9f:ec:de:5d:99:e5:53:f7:2e:3e:eb:26:ac:94:10:74:3f:bd:
13:c2:75:f2:38:1f:df:53:c4:eb:2b:f7:a2:9b:2f:87:cb:eb:
ff:b3:4f:4a:9d:e1:a3:7e:d0:4f:59:55:d6:62:35:4b:18:c5:
a9:49:f4:9b:01:83:fa:92:19:73:66:af:70:48:a0:d0:fa:f2:
66:7c:0d:b5
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZZe/XKV8DIaB5Vn6NvCqcG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNDIyMTkzMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWY0YWU1NTE0ZDc4YjQxMGRkOTkzNGQ3YmY4MmNlOGNmYzJkNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOkVpn3md3Un0aepdwlVdEFocq+q
ICq4zkBFblAE0x5dBjkJMRe8uu0RwUK6Ct/Tv+5mHT8Tsj5U+1j81iqJPCIzj1rT
0EKUbsTb/uo35uRAqSW0+D+BipQa1cfc+Ro2QUFCrRCIpjtBuACsBEAvIyEn3GWH
svznHKxjxKxZD55Qt2Ejj+r8e3L+eYX4mfiwjg9gwuV76kjZoob+xSDsRRAV9moE
Aa4owyiVMykDDorBrZU5qI4IWdvinwEUBklKBP6zLfQUP/MaUHCv8N7TQ4Uxs1i3
VXIdpFMOTI/qNwNBQIJWIGkvWR87wxgO21cgDO9gHNUQBgdZyCieruXzDQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKX0rlUU14tBDdmTTXv4LOjPwtTSMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvcGZTdVZSVFhpMEVOMlpOTmVfZ3M2TV9DMU5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCV+UIAwQA
V+UfAwQAV+VAAwQAV+VsAwQAV+VwAwQAV+V9MA0GCSqGSIb3DQEBCwUAA4IBAQAk
XLxXaQ/nbzmsVvGg0765exuUOs3og3bJ0RunQZocugdxCpHgKBAk8ghFFLOwZhWB
osM7VLZk/VCHaPHMdc7Z9F7rXegtYt0hkCFEMsBPWHbcxt492XQv6DVHN25yGZvj
HFJLwKme1tjxrL+MytvliNbBHtySguG0n3xqH/LiGw4oSdHPNmpRCGoWVDEr0Z8O
yOJLVe6dOQHAncbTT1okIctXV3aE9gSI4cWcSVNtLQ+0AGKf7N5dmeVT9y4+6yas
lBB0P70TwnXyOB/fU8TrK/eimy+Hy+v/s09KneGjftBPWVXWYjVLGMWpSfSbAYP6
khlzZq9wSKDQ+vJmfA21
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:53:16 2025 by rpki-client