Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QXWXwAwATiwReCtwPLpxs7JV448.roa
File: QXWXwAwATiwReCtwPLpxs7JV448.roa (raw, json)
Hash identifier: 2bPFI9P2o+qSKPxLJd+8zXCXMBO0ZNgTzxX68VNknEg=
Subject key identifier: 41:75:97:C0:0C:00:4E:2C:11:78:2B:70:3C:BA:71:B3:B2:55:E3:8F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01955A67B2C3496050C5392ECD28B189B3AC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QXWXwAwATiwReCtwPLpxs7JV448.roa
Signing time: Mon 03 Mar 2025 05:08:20 +0000
ROA not before: Mon 03 Mar 2025 05:08:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 77.90.47.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 00:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5a:67:b2:c3:49:60:50:c5:39:2e:cd:28:b1:89:b3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 3 05:08:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=417597c00c004e2c11782b703cba71b3b255e38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:c9:e1:58:0d:df:8a:c1:e9:5a:73:37:47:
a4:7a:4e:b3:e1:7c:55:06:92:2a:a0:43:da:1d:5a:
17:a4:2a:04:59:8a:ed:06:5d:a3:e7:ae:ae:ae:44:
35:84:21:65:10:31:ec:b4:1e:40:28:97:79:19:bb:
70:06:e0:0b:5a:9c:61:f2:21:14:d4:85:a4:18:02:
76:04:e7:45:e3:c8:42:86:5d:e4:30:fb:95:a4:79:
25:aa:d3:cd:34:b6:99:60:fb:41:95:f8:2b:48:57:
ad:6a:dd:a9:bf:c2:89:c5:4d:58:eb:a7:13:44:86:
f8:e2:5b:ba:99:e0:0c:28:34:29:46:33:4a:15:1f:
93:00:4f:c9:7c:69:78:4d:44:42:86:2c:d9:64:c1:
15:d0:42:94:a2:fe:18:b3:48:fe:64:98:82:bd:0c:
bf:7f:9d:97:b8:41:46:b0:e0:ae:31:20:18:d5:ab:
7c:1e:f3:53:13:e1:df:2a:a4:26:70:e1:5d:0e:ce:
96:e7:92:3d:14:c4:78:ea:7e:e3:81:8e:e4:aa:fe:
e9:34:a7:4c:92:ce:e6:27:4c:bc:11:e8:95:ed:5b:
68:ac:08:eb:25:3c:6c:7c:d6:dc:7b:ed:83:0d:c6:
8c:fa:ba:3a:a0:02:db:d8:0c:b0:b7:f6:d6:86:b7:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:75:97:C0:0C:00:4E:2C:11:78:2B:70:3C:BA:71:B3:B2:55:E3:8F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QXWXwAwATiwReCtwPLpxs7JV448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.47.0/24
94.249.168.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:50:33:c3:23:fd:f6:4a:68:c0:17:7c:33:b5:06:20:53:3b:
65:db:32:6d:fb:10:44:78:42:2c:1d:1f:51:7a:e3:58:9d:ef:
26:b2:b1:b0:6d:8d:e8:72:b2:50:9f:27:1f:7e:71:1a:42:e0:
1a:c2:b7:85:3e:c5:80:45:9f:23:14:3f:5e:88:c4:25:55:c8:
79:3b:6b:30:62:46:0e:eb:4d:0e:41:39:aa:95:55:3b:b0:a7:
a7:8a:5e:44:b3:f6:07:62:4d:57:0e:79:97:6f:33:fb:f9:24:
8b:9c:e6:d8:08:21:8d:02:1e:09:ee:a5:90:1a:3c:f1:00:ad:
9c:6f:36:bb:5c:e8:18:64:bd:a5:a0:04:36:44:f8:c7:73:12:
f2:14:57:2d:62:71:67:0b:74:a4:a0:d3:62:89:3f:f6:09:30:
c5:b1:9c:18:05:1b:eb:5c:4b:80:ec:c2:5d:9a:68:f7:b9:55:
29:97:20:79:5f:43:98:db:8b:8d:b2:23:ad:74:94:6f:17:8d:
2e:5b:46:97:dd:41:19:f8:5e:9e:4b:39:e9:f1:1a:db:be:a9:
84:fe:15:d4:dd:17:09:c2:3c:43:55:c4:bf:41:06:d4:ce:44:
93:31:68:1d:43:04:8b:c8:5f:ee:80:f2:e1:50:74:58:f9:fa:
c7:bd:81:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:19 2025 by rpki-client