Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QUY5AsgoAkqR09dBFpalGf3Qcj4.roa
File: QUY5AsgoAkqR09dBFpalGf3Qcj4.roa (raw, json)
Hash identifier: GNdZYccFrS3YI7yFZppXp6VxUiKGsVC1ArdkFBZJhUQ=
Subject key identifier: 41:46:39:02:C8:28:02:4A:91:D3:D7:41:16:96:A5:19:FD:D0:72:3E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824CBB0ACEBE23544ACA38BB515086F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QUY5AsgoAkqR09dBFpalGf3Qcj4.roa
Signing time: Thu 02 Jan 2025 17:51:27 +0000
ROA not before: Thu 02 Jan 2025 17:51:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215311
IP address blocks: 87.121.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 00:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:cb:b0:ac:eb:e2:35:44:ac:a3:8b:b5:15:08:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41463902c828024a91d3d7411696a519fdd0723e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:d1:82:69:f0:fd:f5:30:6a:b6:7c:53:bb:
4b:54:ab:53:e5:79:7c:9a:c4:95:d8:e2:b6:cd:84:
d8:86:36:5f:f0:16:96:dc:0e:e4:3b:78:38:ed:e3:
d7:b2:9a:7a:07:68:e8:68:24:8d:78:e6:6a:a2:0d:
fa:1c:fa:9d:b2:9a:39:fa:a7:5b:fd:22:04:0d:3a:
4d:98:8b:c0:a1:1c:42:91:a0:30:1c:43:a4:27:78:
e3:db:26:4e:bf:95:57:59:70:4f:e9:f3:df:e9:2c:
9e:32:ac:59:0c:1a:cb:e6:dc:2d:7e:70:42:e8:14:
60:29:5e:3f:d1:3e:4b:1e:07:33:31:a6:e2:f6:6c:
fc:5e:fe:eb:ab:5b:af:39:2d:f0:f6:67:ea:a8:92:
c4:9b:8c:cd:0f:66:80:fe:40:d0:9d:8b:36:f9:2b:
e1:22:2b:e1:e5:61:19:42:a3:5d:9d:3a:2b:49:08:
3a:19:38:80:c8:d9:dd:67:69:8d:48:60:70:06:7c:
19:fd:0b:0b:9d:15:c3:06:b5:0a:eb:ab:ae:8d:da:
86:0f:9e:74:f8:28:e3:62:d2:9c:7e:46:25:ad:de:
35:5b:89:1a:ca:95:5a:8b:97:8c:4a:0b:b1:02:1b:
44:c4:85:a5:ee:bf:02:3b:4d:dd:4b:3b:d2:74:47:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:46:39:02:C8:28:02:4A:91:D3:D7:41:16:96:A5:19:FD:D0:72:3E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QUY5AsgoAkqR09dBFpalGf3Qcj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:35:38:32:d4:0f:e6:b8:7d:db:49:fc:74:75:08:0d:f9:28:
f3:8b:67:54:09:65:ed:f0:49:62:1f:68:ed:7a:7e:82:8d:cf:
87:5c:c4:f7:09:bb:90:b6:2b:dd:a7:b7:64:69:23:98:1a:73:
c7:b0:fc:75:f9:3d:9e:22:85:f1:cf:fe:d0:80:88:9f:08:89:
a5:c0:e4:d7:b2:2a:91:7a:b6:e3:8e:e4:b4:62:8d:a3:e7:50:
04:1c:0a:53:43:42:d7:e8:64:77:0c:a9:49:a1:3d:81:52:31:
85:14:75:7f:45:2b:8a:b9:67:03:25:90:bf:38:09:41:b5:53:
3e:55:16:ce:67:3f:c4:37:34:57:ec:4b:98:98:3c:ee:05:30:
33:30:2a:2e:aa:55:4e:a3:8a:f0:49:c1:63:27:61:10:92:1c:
c2:5a:94:51:71:4a:2d:97:22:48:95:c2:56:68:ca:5c:70:20:
a1:b7:e1:0d:43:c0:31:c7:b3:fc:eb:ec:7e:56:69:88:24:97:
0e:a4:ac:d5:26:53:87:71:d3:ca:e5:15:9b:61:33:33:51:61:
e5:bf:7b:94:bd:00:e3:4d:b2:86:61:64:ab:00:e6:e4:a7:06:
b3:b1:64:dc:1f:cb:91:0f:a7:8a:ac:6f:16:e4:4a:aa:ed:7c:
4e:36:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:32:10 2025 by rpki-client