Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/cQP0K72CrGA6yehBJlaeoS92XQI.roa
File: cQP0K72CrGA6yehBJlaeoS92XQI.roa (raw, json)
Hash identifier: 3a9RnsI/cuqk7USHcHU/xGIthOE2V3Bl0qb8fuhvaLE=
Subject key identifier: 71:03:F4:2B:BD:82:AC:60:3A:C9:E8:41:26:56:9E:A1:2F:76:5D:02
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B300BD3E1FE759399925FA4FD80F68
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/cQP0K72CrGA6yehBJlaeoS92XQI.roa
Signing time: Thu 02 Jan 2025 01:48:18 +0000
ROA not before: Thu 02 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212496
IP address blocks: 159.148.38.0/24 maxlen: 24
159.148.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 10:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:00:bd:3e:1f:e7:59:39:99:25:fa:4f:d8:0f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7103f42bbd82ac603ac9e84126569ea12f765d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4a:e2:be:78:b8:e9:db:3e:aa:c6:db:3b:8a:
07:71:ea:f1:79:ee:f2:a3:e2:83:cf:ea:de:38:f2:
f6:93:93:cf:47:9c:6a:5a:e3:ee:61:f4:8d:d5:5a:
d4:59:59:26:4b:46:ad:dd:83:cd:78:a7:6a:71:71:
52:f7:79:df:d7:3c:6d:9e:2a:99:82:26:9a:2a:96:
e7:43:d2:09:3d:ec:b6:ac:49:71:bb:93:93:bc:e7:
3f:53:2a:30:50:03:bd:67:07:7c:ac:61:94:0e:2f:
1c:fa:76:dd:8f:26:fa:37:c3:1e:81:9f:81:08:f0:
b0:48:55:e4:c5:fe:18:16:fe:86:83:e2:2a:86:dc:
59:84:98:3a:ef:fd:c0:37:88:b0:b9:1f:fa:3e:48:
23:31:93:55:80:3c:0a:ab:0a:81:a6:72:2a:16:b3:
71:24:dc:c6:05:35:00:0c:ca:7e:14:65:6e:98:43:
05:67:db:f7:60:15:eb:32:e9:ee:24:d3:f9:f5:21:
9e:01:95:41:b6:8a:93:7e:6c:eb:0b:f2:58:09:de:
b6:7b:ec:41:7c:b0:3a:49:2a:6b:40:1e:ea:b6:f9:
ce:4b:50:24:88:5e:4d:80:da:f9:bf:7d:53:ae:cf:
03:df:fe:8c:11:c8:6b:25:11:d2:3f:bd:e2:a5:7d:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:03:F4:2B:BD:82:AC:60:3A:C9:E8:41:26:56:9E:A1:2F:76:5D:02
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/cQP0K72CrGA6yehBJlaeoS92XQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.38.0/24
159.148.88.0/24
Signature Algorithm: sha256WithRSAEncryption
80:22:40:b1:d4:98:88:4c:a2:e5:7d:08:64:d8:5c:a6:f8:55:
06:36:e6:c9:78:40:de:1f:4c:92:a7:e2:85:1a:3b:81:5b:3e:
b8:9a:0a:39:90:8e:fc:0d:e5:fd:ef:9b:ea:dd:5c:81:ca:e2:
0f:12:3e:6a:71:0e:c2:6d:8a:71:e8:d3:54:33:40:c6:bc:17:
0d:39:49:8e:c9:45:d0:0e:e0:52:48:b4:c8:a6:c9:a6:18:c2:
74:20:3f:98:ce:25:f2:82:86:fe:98:b2:3f:66:a5:04:28:8f:
3d:d3:68:56:64:3e:ae:74:8e:81:85:ad:8a:39:55:1e:94:17:
7d:1f:97:27:32:b0:c5:4d:84:1a:7d:40:0e:30:d2:54:2c:7f:
66:b4:87:04:06:a6:3d:7b:8b:b8:3d:99:46:90:5c:84:23:94:
f8:99:61:34:be:b8:e7:07:be:a4:c0:83:26:0e:00:69:84:28:
4b:a5:bc:c3:02:d6:b5:4b:21:1c:f6:29:07:96:6b:7a:1b:86:
d9:eb:8b:cd:7f:f8:47:ec:4f:83:8e:f2:f8:46:e8:0c:cd:81:
f9:bd:38:80:62:a0:dc:a4:b1:85:7d:8e:08:ae:5c:ed:32:92:
bb:af:6d:a8:02:4c:35:95:be:25:d7:b6:e5:22:39:2e:98:31:
3b:cf:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:03 2025 by rpki-client