Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/q7VYbcOKwyoFIN68NG3Qnz4PWbE.roa
File: q7VYbcOKwyoFIN68NG3Qnz4PWbE.roa (raw, json)
Hash identifier: odAWe6F5r1RzjwSdpa3oaRS6Vgp4/fhdM7LSE+TMHRI=
Subject key identifier: AB:B5:58:6D:C3:8A:C3:2A:05:20:DE:BC:34:6D:D0:9F:3E:0F:59:B1
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019425FDA5B75DDDB8A4AE2CA47C59EBEA25
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/q7VYbcOKwyoFIN68NG3Qnz4PWbE.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42065
IP address blocks: 91.108.0.0/22 maxlen: 24
91.108.24.0/21 maxlen: 24
91.108.32.0/23 maxlen: 24
91.108.52.0/24 maxlen: 24
94.124.176.0/22 maxlen: 23
94.124.178.0/23 maxlen: 24
95.140.92.0/24 maxlen: 24
95.140.94.0/24 maxlen: 24
95.161.0.0/18 maxlen: 24
95.161.88.0/22 maxlen: 24
95.161.95.0/24 maxlen: 24
95.161.96.0/23 maxlen: 24
95.161.102.0/23 maxlen: 24
95.161.104.0/23 maxlen: 24
95.161.124.0/24 maxlen: 24
95.161.125.0/24 maxlen: 24
95.161.127.0/24 maxlen: 24
95.161.240.0/20 maxlen: 24
95.161.248.0/21 maxlen: 21
185.51.60.0/22 maxlen: 24
2a00:11d8::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Apr 2025 14:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a5:b7:5d:dd:b8:a4:ae:2c:a4:7c:59:eb:ea:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abb5586dc38ac32a0520debc346dd09f3e0f59b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:4a:d5:b6:54:e3:f7:c9:76:30:91:04:59:
39:c5:7c:db:26:c0:c9:ef:5f:13:0a:fd:ea:4f:f7:
00:8b:29:7b:04:45:5e:6b:2d:9b:4c:88:23:26:57:
7a:14:28:1a:6a:73:72:93:eb:ef:31:a9:6d:8f:f5:
fd:7f:ba:f8:01:2c:eb:fb:f5:ad:e9:dc:c7:e9:2f:
93:bf:08:98:10:75:50:6c:3f:76:c0:93:72:62:78:
c5:e9:d3:f1:0b:3c:37:b6:da:10:34:83:e2:35:b2:
1f:b7:c4:09:33:8b:8a:77:56:3b:8e:d6:b4:9a:77:
5e:a6:a3:df:f3:ec:b0:34:26:8f:49:fb:4e:df:96:
49:38:c5:0c:6b:5b:20:28:81:0e:37:40:4b:ba:d7:
f7:c9:5f:1f:e2:2e:4c:0f:ce:29:42:9e:a0:dc:8f:
0c:07:27:3b:8f:1f:1f:44:67:ad:3c:2d:d5:5b:ee:
56:dd:6b:9b:d7:30:b6:c8:57:0c:ff:6e:df:8b:21:
98:1d:7b:4c:2f:d4:55:f3:1d:71:27:12:90:3a:a2:
b3:95:c4:04:75:17:bf:86:89:67:de:ac:40:76:ab:
52:67:81:be:b9:7a:3c:78:39:ed:27:da:0e:36:0b:
ad:af:28:b0:bc:07:ec:ec:e5:c7:ec:64:d5:ba:a9:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B5:58:6D:C3:8A:C3:2A:05:20:DE:BC:34:6D:D0:9F:3E:0F:59:B1
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/q7VYbcOKwyoFIN68NG3Qnz4PWbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.0.0/22
91.108.24.0-91.108.33.255
91.108.52.0/24
94.124.176.0/22
95.140.92.0/24
95.140.94.0/24
95.161.0.0/18
95.161.88.0/22
95.161.95.0-95.161.97.255
95.161.102.0-95.161.105.255
95.161.124.0/23
95.161.127.0/24
95.161.240.0/20
185.51.60.0/22
IPv6:
2a00:11d8::/32
Signature Algorithm: sha256WithRSAEncryption
63:02:d1:1a:69:be:99:d9:2d:28:43:fb:26:23:71:3d:df:fb:
78:c4:23:81:1b:da:a5:9b:17:31:7e:94:6a:3c:62:b8:e4:a9:
10:84:96:ea:f5:cd:d4:d9:10:f6:d3:b1:89:9d:9e:c7:be:e0:
4f:98:1e:99:f2:2a:db:b3:1c:97:67:09:c3:5e:82:22:c2:54:
d6:ec:eb:90:68:6c:37:5b:5d:43:d2:4c:f1:74:ad:82:bc:1c:
93:c6:23:4f:ef:db:08:39:ee:d7:eb:59:fa:dc:6b:85:db:43:
25:fa:e9:06:8c:0f:5f:0d:33:45:2d:05:54:ff:69:3a:02:43:
4c:df:a4:e6:5a:37:a0:16:1e:b4:11:3c:9a:82:34:64:ac:81:
30:06:6b:4f:70:f0:b0:5c:5b:73:8b:d9:71:4c:41:f1:40:e9:
4f:06:f4:1e:74:d1:cb:f8:39:44:95:46:a7:f2:3a:df:11:55:
ff:0d:78:75:d9:0d:e2:13:63:71:04:ff:ab:71:e7:a2:4c:02:
c9:be:8c:05:c2:d8:7a:c4:f5:ef:65:c0:fd:e0:b4:ea:44:7d:
28:dc:16:a5:82:3f:24:42:94:03:04:10:fb:aa:24:4d:01:a7:
3b:74:1b:3e:d0:42:57:7c:d5:d2:dc:e5:c1:83:f6:32:1e:9a:
4d:c2:7d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:20:53 2025 by rpki-client