Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/QQvDb4micga5TS5yOKczRREDWbE.roa
File: QQvDb4micga5TS5yOKczRREDWbE.roa (raw, json)
Hash identifier: BLqO8a4PHCicESqMbJX+ezxsDs84Az7XfGws/4kLVUU=
Subject key identifier: 41:0B:C3:6F:89:A2:72:06:B9:4D:2E:72:38:A7:33:45:11:03:59:B1
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747CECD065861AF27A6C3A0A7669ACD
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/QQvDb4micga5TS5yOKczRREDWbE.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34641
IP address blocks: 2a0b:b86:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Feb 2025 11:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ce:cd:06:58:61:af:27:a6:c3:a0:a7:66:9a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=410bc36f89a27206b94d2e7238a73345110359b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:46:80:34:8c:19:07:c5:ad:ca:7d:4c:24:
02:c0:47:ba:25:1d:86:e4:b6:60:2b:df:0f:19:6f:
f4:22:21:af:31:be:cc:16:bd:f9:3c:de:49:ed:1f:
f7:37:a4:e8:60:49:20:c0:6d:21:76:b2:28:66:7f:
2f:37:a6:eb:c0:84:a9:61:60:d1:d5:7d:40:7f:36:
c1:61:a7:35:cf:02:81:5b:f7:4b:ab:ed:0e:6d:50:
94:b3:90:74:f5:c3:be:92:7d:68:53:99:14:7f:2e:
ce:69:34:ba:b4:73:b2:29:99:e5:26:1b:eb:e1:1d:
e6:5e:b4:f8:b9:85:b4:20:3f:95:37:1a:eb:dc:90:
a5:f5:5d:b7:27:f7:19:e3:9e:58:15:b8:d7:9e:db:
40:f6:07:cd:bd:46:88:e3:f4:18:e0:69:d5:10:82:
4d:ac:3b:a8:24:81:21:4a:c9:ce:c3:84:e8:e9:49:
3e:eb:fc:ab:16:ce:79:c4:01:e8:84:65:24:67:34:
33:3a:5c:bc:6b:38:af:ae:d4:0c:e3:3d:88:9f:fc:
d0:43:c3:fd:b9:ba:eb:d9:70:03:d3:be:9e:4d:1e:
50:26:30:6b:a9:cf:4e:85:02:97:66:94:bf:a6:f4:
85:cb:05:69:db:9c:63:8d:9f:84:97:aa:5d:4d:a1:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:C3:6F:89:A2:72:06:B9:4D:2E:72:38:A7:33:45:11:03:59:B1
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/QQvDb4micga5TS5yOKczRREDWbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b86:100::/40
Signature Algorithm: sha256WithRSAEncryption
16:14:3c:30:41:ac:3c:56:23:c3:0b:b2:40:38:39:e0:ac:19:
74:34:01:a6:ef:3c:05:70:35:b9:00:64:c7:7f:33:7b:d7:b8:
d3:50:e9:84:74:c1:7a:6c:8c:77:8c:f1:1a:61:25:ec:bd:70:
a1:99:b7:11:a9:9c:4b:34:c2:fc:ea:38:e9:51:b5:d1:e9:68:
02:c4:77:5d:91:53:96:42:6c:e5:34:19:18:4a:3e:8b:dc:84:
34:8d:6f:8c:8f:d2:ee:61:15:5b:1d:f7:be:96:2e:6e:13:97:
b8:f0:b3:ba:10:ac:d2:94:a5:45:bc:8f:87:c2:3e:3f:60:6e:
76:c2:e9:31:a4:9e:e3:c6:b2:0c:57:c3:59:16:da:53:40:fa:
d3:1b:04:52:c9:5a:18:c5:1f:6e:45:50:a9:0a:57:2b:c9:ab:
6b:5a:49:c7:de:7e:0d:83:ec:8d:f7:cf:ea:a1:9b:eb:9a:d2:
ed:98:82:26:7e:d7:4d:a6:86:3a:13:67:ce:d3:96:a3:4f:28:
55:53:8c:f9:71:2f:ba:50:bd:c4:d3:e0:53:27:eb:e0:17:94:
8e:58:ee:83:49:73:73:2b:b6:41:c1:b2:9c:ab:31:3c:eb:55:
0b:80:2f:27:ab:73:2e:7d:50:0c:46:ca:32:92:55:3b:bd:c3:
7f:97:db:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:42:29 2025 by rpki-client