Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qxBk5FeyNCuC8aS1OU7jtyOG6gI.roa
File: qxBk5FeyNCuC8aS1OU7jtyOG6gI.roa (raw, json)
Hash identifier: Mr+u1YO4o/Hf0zXIFV/ZryrakCBUcvni5fo4K7ZC+V4=
Subject key identifier: AB:10:64:E4:57:B2:34:2B:82:F1:A4:B5:39:4E:E3:B7:23:86:EA:02
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01963ED6DC97F7EDF494C782DE2E8FF72428
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qxBk5FeyNCuC8aS1OU7jtyOG6gI.roa
Signing time: Wed 16 Apr 2025 13:43:10 +0000
ROA not before: Wed 16 Apr 2025 13:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.8.0/22 maxlen: 22
87.229.23.0/24 maxlen: 24
87.229.31.0/24 maxlen: 24
87.229.64.0/24 maxlen: 24
87.229.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 12:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:d6:dc:97:f7:ed:f4:94:c7:82:de:2e:8f:f7:24:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 16 13:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab1064e457b2342b82f1a4b5394ee3b72386ea02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:e3:14:68:67:d8:ed:a9:07:d4:f9:77:90:
de:1d:8a:1e:73:7c:9c:1c:e6:a0:85:87:a8:6e:ef:
5f:1d:33:97:89:e2:ff:e3:46:17:9b:24:0f:ec:72:
c0:4d:46:77:b4:87:55:96:23:64:55:fc:61:c9:f7:
51:a5:7c:9c:60:c6:19:63:99:0b:80:9a:7c:bd:f6:
4d:fc:67:a2:c4:72:1e:07:b5:7d:c2:f2:2f:2c:b3:
42:cd:d8:45:1a:aa:44:3c:56:3f:3b:99:0d:ff:82:
0b:13:88:77:dc:50:d3:33:14:6a:df:56:06:04:76:
c5:8f:9d:66:c0:ff:3c:48:d6:11:c5:60:49:17:7b:
d5:a8:5d:39:64:03:25:c6:f1:94:7f:df:e9:53:df:
80:50:93:e8:0f:4b:e3:6f:cb:12:c0:39:40:0d:4f:
22:37:52:fa:db:6f:df:36:f1:19:96:98:e0:7b:7e:
58:51:2d:c8:83:17:f9:e1:29:7b:21:2d:d8:87:f8:
96:43:28:f3:db:23:e6:d8:9d:03:48:6c:7b:1d:94:
ee:7d:0c:c5:5e:b4:53:6a:e8:16:91:28:1c:fa:b3:
85:02:4b:d2:4a:65:ed:ba:b4:9a:5d:13:85:cb:c6:
00:9b:a0:74:df:6d:a0:b5:e6:90:9f:0f:e7:30:a5:
7e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:10:64:E4:57:B2:34:2B:82:F1:A4:B5:39:4E:E3:B7:23:86:EA:02
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qxBk5FeyNCuC8aS1OU7jtyOG6gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.8.0/22
87.229.23.0/24
87.229.31.0/24
87.229.64.0/24
87.229.125.0/24
Signature Algorithm: sha256WithRSAEncryption
49:8b:ec:e8:83:c3:a6:63:75:85:5d:74:dc:b5:9f:43:4e:58:
d1:4b:39:14:92:28:1d:fe:69:5b:83:44:3d:44:95:9f:06:09:
80:b9:7e:69:4e:34:38:79:ac:16:5d:a3:84:97:87:19:61:a8:
2f:b5:bc:8e:ba:44:79:40:75:2e:11:97:83:72:04:20:f7:de:
a2:f2:60:7e:8c:c1:66:20:7a:0a:38:c5:df:96:57:d8:9c:26:
09:02:89:25:02:ab:64:14:66:5c:76:19:87:b3:ce:cb:39:ca:
e2:4f:76:87:c7:22:b8:6d:3c:9c:0f:b7:12:6f:7b:13:50:d6:
93:6d:d7:a9:6a:77:44:45:31:6a:2f:3a:91:04:31:ec:99:cd:
c3:1d:50:68:5e:57:8d:22:cd:c5:7c:45:73:4c:b9:42:f1:79:
11:a2:40:2c:ec:7e:cd:7a:a6:c4:26:41:58:15:e1:b5:d9:48:
16:53:36:55:f1:45:9c:bc:f3:89:9d:53:7f:65:c0:11:b2:81:
04:4a:11:84:64:66:6a:e5:11:c9:ef:1e:fc:18:be:07:29:5f:
00:c0:a6:6d:da:2f:ef:fe:e0:7f:90:4e:99:10:c1:78:ae:ad:
8e:19:5e:51:33:c3:5d:9c:1f:42:88:c9:29:bd:33:b5:24:27:
92:31:cf:dd
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZY+1tyX9+30lMeC3i6P9yQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNDE2MTM0MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjEwNjRlNDU3YjIzNDJiODJmMWE0YjUzOTRlZTNiNzIzODZlYTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTDjFGhn2O2pB9T5d5DeHYoec3yc
HOaghYeobu9fHTOXieL/40YXmyQP7HLATUZ3tIdVliNkVfxhyfdRpXycYMYZY5kL
gJp8vfZN/GeixHIeB7V9wvIvLLNCzdhFGqpEPFY/O5kN/4ILE4h33FDTMxRq31YG
BHbFj51mwP88SNYRxWBJF3vVqF05ZAMlxvGUf9/pU9+AUJPoD0vjb8sSwDlADU8i
N1L622/fNvEZlpjge35YUS3Igxf54Sl7IS3Yh/iWQyjz2yPm2J0DSGx7HZTufQzF
XrRTaugWkSgc+rOFAkvSSmXturSaXROFy8YAm6B0322gteaQnw/nMKV+awIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKsQZORXsjQrgvGktTlO47cjhuoCMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvcXhCazVGZXlOQ3VDOGFTMU9VN2p0eU9HNmdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCV+UIAwQA
V+UXAwQAV+UfAwQAV+VAAwQAV+V9MA0GCSqGSIb3DQEBCwUAA4IBAQBJi+zog8Om
Y3WFXXTctZ9DTljRSzkUkigd/mlbg0Q9RJWfBgmAuX5pTjQ4eawWXaOEl4cZYagv
tbyOukR5QHUuEZeDcgQg996i8mB+jMFmIHoKOMXfllfYnCYJAoklAqtkFGZcdhmH
s87LOcriT3aHxyK4bTycD7cSb3sTUNaTbdepandERTFqLzqRBDHsmc3DHVBoXleN
Is3FfEVzTLlC8XkRokAs7H7NeqbEJkFYFeG12UgWUzZV8UWcvPOJnVN/ZcARsoEE
ShGEZGZq5RHJ7x78GL4HKV8AwKZt2i/v/uB/kE6ZEMF4rq2OGV5RM8NdnB9CiMkp
vTO1JCeSMc/d
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:51:28 2025 by rpki-client