Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QQJHy4WFmGuhOURD79JK5zS0kdc.roa
File: QQJHy4WFmGuhOURD79JK5zS0kdc.roa (raw, json)
Hash identifier: 0Bd4Ly3m6YaAPmPaaOTKAfzHQLff7ghgcrhIqNX6GAI=
Subject key identifier: 41:02:47:CB:85:85:98:6B:A1:39:44:43:EF:D2:4A:E7:34:B4:91:D7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01980D617AF085F76CD2C9FE04227F51A645
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QQJHy4WFmGuhOURD79JK5zS0kdc.roa
Signing time: Tue 15 Jul 2025 09:19:08 +0000
ROA not before: Tue 15 Jul 2025 09:19:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198926
IP address blocks: 94.183.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Jul 2025 14:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:61:7a:f0:85:f7:6c:d2:c9:fe:04:22:7f:51:a6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 15 09:19:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=410247cb8585986ba1394443efd24ae734b491d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:94:8f:41:2e:30:17:8e:b7:5f:8f:48:22:
84:04:7d:0b:3c:a6:88:7c:d9:03:f2:3c:27:0f:63:
b1:e8:89:a8:6b:7a:6e:8d:99:59:99:e8:9a:c8:b5:
39:43:16:49:ed:a8:c5:f9:05:51:31:9f:95:a0:04:
f7:ba:cf:24:4a:42:52:ff:f6:d2:97:18:83:f0:53:
97:18:56:4c:3a:ff:cd:38:e9:f0:04:d6:d8:5c:51:
f7:ca:31:dd:99:31:3a:98:5e:99:80:01:5a:ed:05:
dc:a5:ec:ef:34:04:56:98:2f:06:64:ef:94:a7:e9:
6e:67:9d:a8:a0:ae:1c:66:0a:49:be:95:22:69:a0:
23:21:a7:14:a8:b6:b1:14:c4:d6:94:1e:36:2e:3e:
98:da:8b:8e:f9:e6:e0:73:8d:70:64:77:1d:02:f2:
e1:fa:f9:ac:87:6c:c2:79:fa:15:e8:76:54:14:9d:
b0:26:5d:e0:e4:a7:ae:82:bb:96:c6:5d:1c:72:40:
58:b5:34:c4:d1:ce:c6:dc:21:2f:a6:0a:0f:5d:49:
72:97:5d:22:60:f9:0c:49:3a:5d:1a:f4:cd:11:9b:
07:2f:67:5f:c4:4e:8e:a5:68:ed:8c:9d:99:e8:03:
7d:20:68:28:66:c1:69:ea:84:20:16:94:ec:6c:45:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:02:47:CB:85:85:98:6B:A1:39:44:43:EF:D2:4A:E7:34:B4:91:D7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QQJHy4WFmGuhOURD79JK5zS0kdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.167.0/24
Signature Algorithm: sha256WithRSAEncryption
81:13:d4:19:66:db:b7:fa:e4:a7:ac:7b:c4:a5:94:a0:9b:bc:
b4:1e:80:15:1e:6f:b3:03:1b:7c:83:78:b4:a8:d6:e9:b8:98:
1f:11:40:42:29:47:63:a5:1c:2b:14:5c:c4:38:e3:d2:28:d7:
10:20:ce:bc:35:2f:25:e8:72:fe:c0:da:21:29:51:03:0e:e7:
22:a9:ca:20:84:45:89:ec:55:4b:fc:96:3c:2a:cf:7e:52:69:
a6:90:67:e0:ee:5b:93:29:4f:b8:5d:76:9e:b9:92:a7:fc:7c:
72:72:c2:bc:39:ae:71:b7:00:e3:31:6c:c6:58:57:95:31:13:
18:4f:87:84:3a:ea:0c:4e:99:c0:45:2c:04:00:7f:c7:aa:d2:
f7:ca:94:74:ad:c9:5d:f2:78:e5:2f:76:18:7b:1c:ee:da:0b:
00:be:38:7e:3f:d4:61:5d:39:89:af:d0:8e:6c:f4:8f:14:b2:
3f:8c:13:12:08:da:99:b2:23:0c:f3:49:42:49:28:78:5d:23:
e8:2c:f5:d3:6f:4e:b0:38:23:4e:79:8f:3a:f1:6a:d8:90:c9:
f2:16:76:7a:89:73:60:1c:84:91:25:59:2a:c7:0a:91:54:85:
d2:43:5e:ef:e3:b4:65:17:e3:37:11:26:8e:ac:48:d9:89:4d:
e4:a1:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:14 2025 by rpki-client