Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/QInkO39k2OBPv3XPzYINktxqG6o.roa
File: QInkO39k2OBPv3XPzYINktxqG6o.roa (raw, json)
Hash identifier: IiAwGbRcx+NvZ+sI/4OnsTaJwpdaVcPcMjn17JeISew=
Subject key identifier: 40:89:E4:3B:7F:64:D8:E0:4F:BF:75:CF:CD:82:0D:92:DC:6A:1B:AA
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 019082A7E0C0F10AB0A5B45AE90ABAE22AAC
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/QInkO39k2OBPv3XPzYINktxqG6o.roa
Signing time: Fri 05 Jul 2024 11:29:18 +0000
ROA not before: Fri 05 Jul 2024 11:29:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48789
IP address blocks: 46.238.240.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 30 Jul 2024 08:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:a7:e0:c0:f1:0a:b0:a5:b4:5a:e9:0a:ba:e2:2a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Jul 5 11:29:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4089e43b7f64d8e04fbf75cfcd820d92dc6a1baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cf:9e:cf:a8:3d:5a:4c:3f:cd:71:d8:09:88:
6b:a9:f6:e9:54:5f:df:43:33:17:1d:0a:57:e0:2d:
c5:6c:31:4e:2e:d5:6a:7d:02:8d:7d:a1:f7:ea:49:
21:b2:ec:5c:37:cf:83:a4:46:6d:40:02:c2:22:dd:
99:b3:59:1a:0d:99:20:cb:16:7b:d3:a3:37:74:40:
af:a5:9f:57:e6:74:e4:51:06:f2:ec:76:ca:e0:34:
fa:e3:0a:e9:0b:d6:26:1d:0f:2b:44:9e:82:6a:a5:
1e:8b:7b:35:67:a9:63:3e:0d:ba:91:e5:fa:df:cd:
23:3b:8b:c9:1a:9f:b5:4a:2f:a9:2d:ca:bc:73:5c:
90:0c:ff:eb:98:6f:df:8c:24:81:d8:19:ea:81:71:
60:07:46:66:47:d5:d6:09:77:85:2e:d8:c7:3d:aa:
d3:d1:2e:02:fa:f6:f1:3e:cb:f0:f0:d4:a4:da:9f:
09:76:66:9f:c9:25:be:e9:af:ac:9b:05:ee:5a:97:
45:17:d2:49:90:cd:4b:53:45:c7:f4:4f:b5:54:55:
bb:5a:33:38:7b:22:b5:0d:82:cb:da:a8:fd:6e:cd:
d7:94:5f:e6:b2:b5:b7:77:0a:b9:6c:43:8d:dd:c5:
d5:a5:db:31:31:a4:f3:12:7e:93:3d:2f:2c:a7:a2:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:89:E4:3B:7F:64:D8:E0:4F:BF:75:CF:CD:82:0D:92:DC:6A:1B:AA
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/QInkO39k2OBPv3XPzYINktxqG6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.238.240.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:c8:02:bd:cf:7c:55:ef:b7:24:51:62:96:e3:4c:6b:3a:81:
b6:ce:df:f9:40:9b:46:6f:b8:93:3d:57:4c:81:df:16:e1:1f:
5e:4b:a3:85:1f:49:f8:8c:ee:63:33:5f:7a:76:8d:dd:e5:30:
e5:0f:60:37:0f:71:58:1d:6d:cb:c0:23:f8:1a:90:b2:68:1d:
10:71:cb:85:31:bc:78:b0:eb:22:da:24:07:a0:b8:c9:e1:37:
a3:f0:81:ea:27:bc:d0:8e:54:2e:88:a7:6a:d1:6b:de:f0:6f:
83:2e:a0:19:24:44:7c:5b:05:2f:3e:d9:a8:00:5c:fb:4c:90:
b9:2e:86:69:3a:1a:5a:b0:a1:6e:5b:50:56:7a:d3:e1:d3:cc:
ad:7d:a3:bd:c2:8b:1d:6c:0a:da:53:35:bd:5b:d5:aa:45:49:
fe:fb:2e:51:d7:3f:a8:8d:b2:04:5c:fd:51:16:41:82:a3:46:
94:ef:0f:8d:8f:8d:ec:0f:98:f8:03:4c:38:a8:01:cb:64:d8:
0c:b1:cf:c4:08:72:7d:c5:b5:7e:62:0e:5f:05:07:cb:d8:36:
71:ec:2a:1f:87:9a:7a:fe:5f:1f:fc:e6:46:ad:f5:11:a4:17:
7c:b6:12:d7:20:86:48:c9:ad:e8:fc:1b:2c:99:bc:8f:4f:73:
fa:b1:b9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:50:02 2025 by rpki-client