Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qvmWhwr8uW4bhfCwJOo5sR1CG0A.roa
File: qvmWhwr8uW4bhfCwJOo5sR1CG0A.roa (raw, json)
Hash identifier: CTG29t+u2yZ7TOUwa7N6S0GAOWNGYGJIllohyPhlEEg=
Subject key identifier: AA:F9:96:87:0A:FC:B9:6E:1B:85:F0:B0:24:EA:39:B1:1D:42:1B:40
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824A77B6F2506C68F33D25A90DF3F0E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qvmWhwr8uW4bhfCwJOo5sR1CG0A.roa
Signing time: Thu 02 Jan 2025 17:51:18 +0000
ROA not before: Thu 02 Jan 2025 17:51:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 193.8.185.0/24 maxlen: 24
194.113.38.0/24 maxlen: 24
194.113.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 06:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:a7:7b:6f:25:06:c6:8f:33:d2:5a:90:df:3f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaf996870afcb96e1b85f0b024ea39b11d421b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:20:75:10:2d:f0:dd:25:b3:49:f3:44:1c:
00:47:ba:f9:6b:1b:47:30:bf:1d:60:16:3e:6b:49:
e7:fd:92:3a:b1:4a:59:68:78:c1:37:c3:df:24:64:
f1:7a:8d:b9:b1:2e:41:c3:27:d4:ee:2f:68:79:78:
51:b4:84:92:d7:03:c0:03:6f:6c:3d:65:be:76:8e:
62:33:57:a5:7a:1e:f5:ab:3d:13:b7:98:42:02:76:
e1:14:96:c2:92:0d:4d:cc:6f:33:d9:bf:6d:20:f0:
20:88:2f:e6:36:bb:05:46:ba:3c:e7:5f:36:a7:c9:
c2:ac:5d:08:21:76:16:5c:5c:b1:8f:79:d9:f5:bb:
c6:15:fb:15:97:48:b3:c6:d0:ae:be:30:08:8c:b3:
12:d2:da:1c:6e:89:79:d7:3c:82:6f:d7:66:76:79:
44:33:b3:a2:0e:a3:94:e8:8b:24:e8:55:4e:26:e5:
5c:60:54:46:22:8d:6e:e0:eb:b9:ad:18:48:9f:47:
59:62:62:bc:71:a7:b6:27:d1:76:13:fe:fd:20:eb:
de:7d:52:7f:7a:34:1b:c7:91:d2:1f:52:7a:3f:bd:
54:47:c0:d8:36:bd:d2:3d:d5:d3:e0:a7:ed:9d:76:
f7:92:da:af:f6:f3:14:c6:b4:55:36:94:05:53:96:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F9:96:87:0A:FC:B9:6E:1B:85:F0:B0:24:EA:39:B1:1D:42:1B:40
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qvmWhwr8uW4bhfCwJOo5sR1CG0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.185.0/24
194.113.38.0/23
Signature Algorithm: sha256WithRSAEncryption
44:24:a3:ca:ef:c9:81:c4:f0:c3:f5:30:32:73:27:db:8a:b9:
9b:8f:1f:53:7a:83:ff:72:21:54:05:6f:d6:c7:61:48:2b:3c:
24:83:60:b8:87:d0:41:f4:70:de:fa:f4:42:38:c0:a2:ce:46:
01:e0:1d:6b:31:79:9d:07:04:21:53:59:af:9f:16:f5:6c:a8:
75:8e:91:3b:23:32:71:10:b9:d9:a8:91:eb:39:34:08:21:23:
22:9a:12:59:75:62:2e:2a:2b:72:d3:8f:5b:99:2f:91:a2:bc:
14:32:11:f9:9e:0b:87:ce:9e:4c:66:2f:f5:32:8d:db:0e:c0:
4d:94:79:08:f6:70:4c:85:33:80:6d:08:12:51:ab:22:87:5b:
83:ac:60:86:20:a9:b1:8e:c6:aa:d9:84:b9:96:29:f1:fe:a4:
fa:2f:e3:2c:0d:cd:59:85:46:05:7e:b2:89:02:49:eb:a2:c3:
43:9b:5b:5c:8c:41:61:3d:58:03:0c:50:f2:d3:ed:cf:eb:54:
73:7a:90:e0:5d:e6:4d:36:f6:46:04:eb:f8:40:93:0b:99:5c:
c8:07:62:0d:45:a5:0f:62:01:93:24:19:a5:fb:ae:d7:f4:17:
c2:48:49:1f:33:2a:bb:c9:8e:6b:2f:8c:b0:ff:11:1c:34:a5:
7d:2b:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:44:10 2025 by rpki-client