Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QMtIe84oNIzaWSnMp6Paid7eKx8.roa
File: QMtIe84oNIzaWSnMp6Paid7eKx8.roa (raw, json)
Hash identifier: Bda2USjyi/VWnZt8Pm0FixH8nTHvpkHqzcjvJp1UZvs=
Subject key identifier: 40:CB:48:7B:CE:28:34:8C:DA:59:29:CC:A7:A3:DA:89:DE:DE:2B:1F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421441585B0B4B30B77FEDEC0440A41CD
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QMtIe84oNIzaWSnMp6Paid7eKx8.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 45.129.196.0/24 maxlen: 24
88.214.48.0/23 maxlen: 23
88.214.50.0/24 maxlen: 24
88.214.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 15:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:15:85:b0:b4:b3:0b:77:fe:de:c0:44:0a:41:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40cb487bce28348cda5929cca7a3da89dede2b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:d5:65:7a:7f:a4:31:8f:24:f9:61:11:d5:
a8:ed:8a:e6:28:ee:b3:76:39:41:a9:79:8c:ba:8f:
03:a4:9a:65:b3:b2:0b:6c:8f:19:54:a0:09:be:e2:
2b:25:20:0f:22:7a:81:57:cb:cc:1d:75:ae:ed:ee:
64:8c:9b:74:a5:be:cc:30:27:e8:59:a5:5a:31:71:
f4:38:67:af:d1:75:f9:f3:74:55:a7:0a:74:31:d5:
7b:55:f7:39:c8:d2:e8:52:e1:80:47:b0:ee:c9:1e:
07:73:4c:8a:84:75:d1:70:fc:90:fa:7d:b1:76:4c:
4d:f8:3b:cf:1a:4e:54:3b:c4:6d:61:dc:32:a8:70:
e5:af:0a:c4:7e:24:34:74:be:2f:41:e5:7b:85:db:
b1:75:f7:21:44:ec:24:29:29:56:68:cd:af:9f:d0:
d2:af:dc:96:e9:0d:e8:b8:7b:5f:0a:04:b1:48:08:
de:13:26:b8:66:ac:77:c3:ad:3d:38:43:92:96:40:
e2:7a:75:86:6f:3a:16:c3:75:c7:1d:cb:9e:25:15:
a6:b0:bf:db:aa:49:cb:8f:7c:2d:dd:11:36:58:d6:
0d:3a:bb:b8:c2:e6:0e:09:a1:50:b1:f4:f6:3b:3f:
b9:3f:c6:55:ec:69:64:e0:86:7f:2f:a1:73:ee:53:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CB:48:7B:CE:28:34:8C:DA:59:29:CC:A7:A3:DA:89:DE:DE:2B:1F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QMtIe84oNIzaWSnMp6Paid7eKx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.196.0/24
88.214.48.0/22
Signature Algorithm: sha256WithRSAEncryption
55:f7:ec:66:4d:67:fd:af:14:d1:cb:e6:d6:21:d6:df:47:76:
43:a0:ae:1e:75:c6:0e:80:37:7b:f4:24:ac:36:8e:be:f3:57:
47:28:38:22:17:bb:0d:36:75:4b:ab:16:90:32:6e:69:85:d3:
33:37:3a:01:70:7e:49:c1:46:52:c3:9c:5d:76:36:da:25:51:
df:c7:0e:30:53:32:00:60:81:dc:b9:bf:b3:38:08:6c:6e:8c:
cb:43:9b:c2:36:02:08:13:92:1c:70:e1:f6:b3:0c:f9:81:56:
60:da:58:88:4b:be:6e:8b:a9:b6:d0:2d:ba:53:44:7d:ce:2a:
7a:d3:1d:6d:9f:aa:71:77:2b:d2:ca:22:4f:a1:7d:3e:e9:8a:
b3:c7:b3:9c:bb:15:36:a5:5b:4a:ed:47:27:87:40:ed:4e:db:
0f:ea:f3:b3:c6:76:12:48:0a:45:95:2e:b1:47:66:bd:3d:50:
23:74:56:c0:92:31:5f:b4:6f:21:07:45:b6:8a:04:c1:ba:b7:
71:f2:e7:5f:20:9f:85:46:19:f8:0e:b3:0c:88:fa:df:9a:bd:
f7:0c:44:77:19:84:71:8d:1e:75:d8:8a:9a:be:c1:64:eb:32:
ac:bb:87:f5:0d:ff:d2:8e:8a:0a:10:5c:78:a0:08:35:89:bf:
2c:fd:08:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:04 2025 by rpki-client