Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/qLjkqODjueHuobhJ1udFzRoAGMQ.roa
File: qLjkqODjueHuobhJ1udFzRoAGMQ.roa (raw, json)
Hash identifier: 25ZL3hAJMTV2f/QWFxHeRqRnKtiS+w8jSFdxMw1fc4c=
Subject key identifier: A8:B8:E4:A8:E0:E3:B9:E1:EE:A1:B8:49:D6:E7:45:CD:1A:00:18:C4
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 01942826A248D9109621AC9F88DDF2E2AA6A
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/qLjkqODjueHuobhJ1udFzRoAGMQ.roa
Signing time: Thu 02 Jan 2025 17:53:28 +0000
ROA not before: Thu 02 Jan 2025 17:53:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208949
IP address blocks: 45.88.0.0/24 maxlen: 24
45.148.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 12:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:a2:48:d9:10:96:21:ac:9f:88:dd:f2:e2:aa:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 2 17:53:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8b8e4a8e0e3b9e1eea1b849d6e745cd1a0018c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:b9:30:cb:6b:33:f3:b6:d1:63:e7:08:29:
63:a6:f3:d4:c3:45:dc:00:0b:3a:6f:9f:4d:62:bc:
c7:4a:72:ca:ef:b8:35:4a:88:09:fb:d2:b9:f9:33:
3e:76:e9:40:2c:f4:d7:f7:08:d6:90:a4:0b:d7:2e:
04:29:45:ef:3d:5f:0b:31:94:a0:25:55:7a:b8:9b:
cd:00:e9:75:36:95:80:ab:b2:ae:7d:f1:41:20:c8:
fd:dc:f1:c8:d8:1e:8b:54:62:5f:9d:c8:11:e7:bf:
c6:fd:68:39:4a:b8:8d:da:a4:2d:dd:1a:34:86:71:
ae:97:cc:5b:a6:66:e4:af:73:d1:64:1d:6b:42:d5:
26:38:af:a1:ee:d0:db:3b:1f:36:4c:ab:9c:bb:9a:
79:2e:62:86:b5:ea:e2:3c:57:4e:5b:e1:1d:09:07:
de:a0:22:87:9b:bb:93:ac:98:d1:20:98:65:7d:55:
95:45:50:24:3e:0e:0a:c9:44:b6:c7:13:5a:9a:9e:
cf:fc:7c:ed:a7:e0:cf:85:d7:d6:ad:21:27:37:64:
8d:d8:b0:c5:f1:97:df:a7:34:b8:0a:1f:22:64:bc:
93:56:cc:51:cc:5b:29:7a:50:bd:52:c1:a6:a5:78:
80:c6:7c:ae:1c:ee:0a:cd:14:28:8b:4a:c0:78:4b:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:E4:A8:E0:E3:B9:E1:EE:A1:B8:49:D6:E7:45:CD:1A:00:18:C4
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/qLjkqODjueHuobhJ1udFzRoAGMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.0.0/24
45.148.146.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f0:4d:df:ca:6c:8c:73:e3:bd:88:33:73:6a:95:d7:11:78:
9d:fc:af:bb:e5:c0:d0:8c:c4:bf:24:d4:56:e3:2e:d6:66:52:
39:dd:83:0d:2b:db:9e:23:dc:ac:ca:2d:f8:fc:4f:aa:78:7b:
49:3e:68:05:3a:1f:a1:7e:22:4c:d1:f5:ac:c0:76:b5:b2:cd:
b2:60:e9:da:5e:85:d6:1a:ce:93:6d:cf:ae:49:b2:4a:04:a0:
4b:e0:67:25:00:25:ed:c3:2a:5f:54:f0:3c:12:a3:8b:b7:fb:
c0:c7:6a:42:0c:61:02:4d:00:b9:30:b0:56:3b:5d:3a:85:eb:
f1:af:11:aa:f6:32:e2:53:ca:e2:9a:7e:02:a6:f5:b3:d6:f7:
0c:c4:22:57:14:d1:b5:d8:ca:56:c4:a1:e9:b5:99:6d:1e:34:
31:4b:d3:be:33:a2:73:0f:01:3c:64:e3:c0:51:c9:c8:c9:b8:
9f:09:5d:27:d0:25:4b:22:a7:71:bd:73:09:3e:49:47:d6:76:
18:64:aa:89:13:84:7e:3a:a2:37:1b:5c:1e:3b:86:8e:78:23:
65:42:92:bb:9d:66:0f:22:d1:00:b4:9f:4b:89:76:cb:6c:7e:
77:4a:44:bb:9d:f7:52:c5:93:dd:f5:ce:88:c8:fa:16:f0:f9:
d1:ad:11:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:52:41 2025 by rpki-client