Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QCvEFdweBs0QPK8yF-o0d5Jbthc.roa
File: QCvEFdweBs0QPK8yF-o0d5Jbthc.roa (raw, json)
Hash identifier: CU4mLNYkl5jberqSMS6ngkjPrMRLbbxsIR1iiNfj3mk=
Subject key identifier: 40:2B:C4:15:DC:1E:06:CD:10:3C:AF:32:17:EA:34:77:92:5B:B6:17
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193C0B4B2437ECD786AAB2B05E669819681
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QCvEFdweBs0QPK8yF-o0d5Jbthc.roa
Signing time: Fri 13 Dec 2024 15:48:07 +0000
ROA not before: Fri 13 Dec 2024 15:48:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48614
IP address blocks: 194.87.112.0/23 maxlen: 23
195.133.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:b4:b2:43:7e:cd:78:6a:ab:2b:05:e6:69:81:96:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 13 15:48:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=402bc415dc1e06cd103caf3217ea3477925bb617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:55:80:58:15:a6:95:5b:5a:e4:c4:53:08:99:
c1:6e:ba:63:20:f2:19:15:36:0b:09:f0:cb:ca:dd:
8e:52:21:c9:5e:9f:88:f9:4b:1c:98:ad:e7:05:2b:
e8:a4:bd:f6:f8:71:42:cd:55:73:22:f2:16:9a:08:
c8:e7:65:87:1d:7d:82:c4:27:d3:93:91:d9:16:0b:
0f:65:62:24:6f:c3:57:21:4e:eb:2d:3d:f9:61:df:
e3:8e:85:98:10:df:9a:52:29:24:83:5d:9a:62:e7:
18:99:68:a3:b0:df:64:fd:0c:e5:22:5d:a4:eb:40:
4d:e1:e9:18:f4:bb:2f:36:05:fb:20:43:41:11:da:
06:e2:62:62:d1:0e:b2:8f:d7:1e:2a:35:2b:88:b4:
20:a3:f1:c0:ad:bd:14:81:0e:b8:d0:43:54:49:49:
46:8c:15:96:31:9d:00:cd:39:c6:82:4a:a2:01:1f:
96:27:53:be:ab:1a:6d:68:fe:91:56:03:95:5f:db:
3b:c7:03:2b:6d:92:73:c0:1b:52:8b:e8:19:9f:27:
e1:51:5e:4f:f5:2d:b1:65:ad:06:b1:69:5f:06:a3:
71:51:3a:a1:9c:e3:ef:3a:46:5d:9a:ac:88:5b:44:
22:93:94:78:f8:49:5a:41:77:d7:5f:99:10:d9:57:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2B:C4:15:DC:1E:06:CD:10:3C:AF:32:17:EA:34:77:92:5B:B6:17
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QCvEFdweBs0QPK8yF-o0d5Jbthc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.112.0/23
195.133.68.0/22
Signature Algorithm: sha256WithRSAEncryption
45:ec:88:fd:dd:19:2a:03:d9:51:3e:1a:5f:12:19:75:98:98:
4d:b7:7b:e2:16:40:ac:2a:28:8d:fd:6c:f6:cb:0e:11:f1:4c:
a0:05:95:b7:59:04:cf:da:47:18:30:9c:ed:eb:9e:b1:40:6d:
f8:69:57:a6:29:d6:74:66:fe:fa:91:ac:a5:f8:ba:18:1d:f9:
dc:ec:57:f7:fb:3e:7a:98:aa:45:af:e7:6e:7e:45:91:c7:1e:
da:49:4d:58:7a:7b:16:5e:8b:05:62:aa:82:26:f2:b8:62:53:
9e:d6:0f:c7:73:4a:50:5b:44:a4:b0:08:1c:d3:fb:df:e0:40:
72:da:ee:a5:66:68:ca:c6:d2:25:e3:b4:a3:24:fa:9d:0e:4f:
91:1f:e9:80:94:9c:a9:d3:77:d7:ea:f5:36:8b:76:b0:ca:6e:
d6:9c:04:cd:a3:88:1b:4d:de:99:f2:0e:ab:5e:26:89:3e:22:
f1:aa:1e:2b:b2:b2:97:09:0f:95:2c:34:64:03:fc:dc:d3:a0:
40:c8:b4:4b:62:95:d3:ff:29:79:16:03:8e:37:a7:1a:40:e6:
70:08:16:cc:7a:1b:36:f8:1e:1e:e9:ed:9e:ac:b7:9b:01:63:
4c:7a:75:b4:2a:18:e7:6f:57:e0:6b:1a:3c:99:97:4b:e0:5f:
72:03:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:42:37 2025 by rpki-client