Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Q7AQn_2EMYD4_rcCizHr_ePeGV4.roa
File: Q7AQn_2EMYD4_rcCizHr_ePeGV4.roa (raw, json)
Hash identifier: PVZHB/YnLFmBmgE2yH/y7E9zX8+OQrxPNIj6RVFoisE=
Subject key identifier: 43:B0:10:9F:FD:84:31:80:F8:FE:B7:02:8B:31:EB:FD:E3:DE:19:5E
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0194222034A674DF92E2BE3709AAE3472A34
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Q7AQn_2EMYD4_rcCizHr_ePeGV4.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214653
IP address blocks: 93.185.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 09:34:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:34:a6:74:df:92:e2:be:37:09:aa:e3:47:2a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43b0109ffd843180f8feb7028b31ebfde3de195e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a2:a6:40:cb:b8:3e:71:2c:9d:1a:73:01:87:
60:97:ca:50:3c:d6:26:51:e1:5f:3d:d3:c0:72:47:
32:c0:47:11:c4:42:ac:30:1b:75:b5:42:e0:02:92:
06:a4:4a:f6:5c:df:17:ce:09:b6:96:8d:43:6b:6a:
af:8d:8f:b3:b7:c4:bc:2c:bf:a7:59:a5:8d:a1:f6:
c1:17:7b:f5:65:5b:96:46:8e:68:57:0b:26:3c:62:
8f:3c:cd:bb:48:18:5a:69:75:8b:d0:89:85:71:d1:
ff:5c:47:7c:40:e4:c5:bd:3a:49:18:cc:7c:d6:13:
5d:d8:d7:8b:3f:87:a7:a1:b3:02:89:36:8c:10:90:
6e:66:34:d7:87:43:02:1d:67:cf:36:7c:e2:b3:fa:
da:47:83:c8:3a:71:19:2a:40:74:79:4d:66:da:b8:
7b:27:2b:39:64:eb:d0:4f:54:7e:bf:69:5b:4a:95:
b4:49:73:1c:30:00:96:39:5d:a0:17:f1:41:89:8b:
18:a7:86:2b:e0:52:36:9a:24:8c:7c:c0:39:ff:f3:
5e:01:bd:c7:5a:d0:6e:d7:42:e7:47:59:2c:94:47:
62:8e:a3:93:07:c6:ab:5c:f5:a5:3d:ff:40:a3:53:
5f:7b:e6:15:f7:ba:02:6d:0c:52:4f:9b:6a:3d:a4:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:10:9F:FD:84:31:80:F8:FE:B7:02:8B:31:EB:FD:E3:DE:19:5E
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Q7AQn_2EMYD4_rcCizHr_ePeGV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:62:98:54:dd:1f:55:e7:e8:b0:bb:12:27:a2:d4:1b:89:70:
b2:bb:26:ab:c3:39:b9:fa:8c:9f:b5:8c:b4:6a:b8:3d:cf:97:
aa:66:17:d0:bc:ae:b3:03:40:5e:a4:13:00:eb:18:c5:84:ff:
bb:80:f3:4d:cf:87:f5:b2:75:ac:5a:db:28:e9:21:85:27:59:
52:b7:3b:34:b8:d4:95:57:34:90:3c:20:81:90:c0:6d:c6:bd:
7b:28:5c:82:05:e6:16:d4:67:61:85:87:3d:24:b0:58:87:25:
8c:c5:3e:d5:82:8b:4f:3d:09:7f:d1:b9:ef:86:0d:ed:3c:ac:
ab:c6:cc:52:20:30:3e:73:07:f9:6a:5a:20:f7:af:7d:bd:08:
31:2e:9d:3a:e1:86:04:18:47:11:3b:1d:d1:5c:b2:c9:18:bc:
94:14:07:d7:5d:85:be:28:ac:e7:53:55:52:92:5d:6b:a7:95:
24:04:fd:a9:28:17:dd:f7:4c:52:39:d9:06:59:a0:c2:80:6f:
53:07:a4:6a:ab:b4:77:e7:f7:cd:75:71:15:0d:53:b0:6b:96:
de:55:e1:8a:ec:3f:0b:d0:f3:90:34:e9:d7:96:98:d7:76:f5:
ba:a7:0e:be:d0:cd:bc:70:42:26:9c:60:c5:9c:64:26:5e:f1:
67:0e:8b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:02:15 2025 by rpki-client