Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/q0FoEqzAla9-4x0gTlBY6-_YAt0.roa
File: q0FoEqzAla9-4x0gTlBY6-_YAt0.roa (raw, json)
Hash identifier: pCfnmCS6PsjwlFZRl5C+hL0zvcXP+AA8tj+TEI55lQc=
Subject key identifier: AB:41:68:12:AC:C0:95:AF:7E:E3:1D:20:4E:50:58:EB:EF:D8:02:DD
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0196F7F07BC57A868069C267E8854B8E1C47
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/q0FoEqzAla9-4x0gTlBY6-_YAt0.roa
Signing time: Thu 22 May 2025 12:20:54 +0000
ROA not before: Thu 22 May 2025 12:20:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 109.122.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 14:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:f0:7b:c5:7a:86:80:69:c2:67:e8:85:4b:8e:1c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 22 12:20:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab416812acc095af7ee31d204e5058ebefd802dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:da:0d:c4:ac:4b:ff:5d:4f:e4:f0:2a:f1:
91:f9:f2:70:45:f8:30:e9:c0:3b:47:2a:56:41:b6:
71:59:13:ab:3a:c6:47:55:bd:79:86:32:ba:80:f4:
9d:ab:dc:0c:b3:06:37:77:68:a3:7b:55:41:85:ec:
76:24:06:8f:3c:17:39:3e:6f:a2:57:47:8e:7c:fc:
40:a6:65:f8:71:e2:80:01:3f:a6:1f:71:85:c8:f8:
40:36:55:c0:a4:bf:7a:80:c2:5a:ce:31:a7:96:40:
f3:9b:96:4c:ee:3f:10:e3:6f:c3:80:7d:fe:cc:f3:
0e:41:d5:55:ed:42:28:a6:b3:16:fd:05:68:64:3a:
36:b3:94:4d:48:1b:78:c0:f8:f7:d8:c4:05:39:7b:
ee:c6:a2:07:39:90:e1:07:ad:84:60:82:a0:e7:90:
5e:3b:f5:49:e8:4f:49:e6:3f:06:eb:7a:a4:93:11:
3a:c8:8e:a1:1c:ff:0c:12:5e:83:90:00:5f:9a:f5:
1e:54:6e:98:15:35:59:31:6f:e8:96:05:5a:84:2d:
02:6a:60:81:49:3e:58:ae:6a:ab:c3:ed:72:54:b7:
f0:01:1d:3c:e5:32:c7:e9:15:c5:8f:0f:f1:c8:c8:
18:27:59:c2:e8:79:cb:08:64:e2:8c:17:a8:98:26:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:41:68:12:AC:C0:95:AF:7E:E3:1D:20:4E:50:58:EB:EF:D8:02:DD
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/q0FoEqzAla9-4x0gTlBY6-_YAt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.44.0/24
Signature Algorithm: sha256WithRSAEncryption
34:29:55:f3:37:34:3a:26:8a:a2:99:ab:ca:25:f0:4b:67:b3:
c7:d3:2e:3b:d1:6f:0f:de:d8:32:6a:e1:52:d5:75:91:6c:b2:
1c:08:15:b1:ee:b9:0d:96:1b:65:9e:1b:92:0b:d1:6e:0c:33:
20:4e:74:92:3c:6b:b3:4a:3f:a3:d2:fc:c9:4a:94:12:88:fc:
e2:26:e0:92:33:df:47:60:5c:f2:91:dd:88:a7:d9:0c:c7:77:
d3:b8:f9:61:c9:55:40:1b:c7:55:3a:b9:d6:fb:5c:48:2a:7f:
1a:f9:e4:07:a8:f0:19:85:e4:26:21:b9:10:c0:b4:c1:9f:bb:
7e:28:28:95:b7:67:98:e7:b8:7c:33:d7:00:49:c8:6c:ee:c7:
71:d8:11:85:c2:e3:77:28:27:4d:03:5b:3b:cc:46:e3:a9:44:
4b:eb:39:42:da:2f:c8:4e:1b:dc:c0:be:55:86:a1:f6:45:8a:
8a:b8:2b:8f:e4:9f:b4:e7:c7:93:39:e8:1e:94:91:fe:7d:5c:
9f:f0:a3:19:74:12:2d:bf:e0:82:6e:43:bd:5a:95:f8:1a:6c:
ff:1e:51:c0:17:7f:7c:1e:1e:ff:0f:52:cf:51:0e:93:cb:72:
51:90:4f:48:2f:ff:1e:b4:15:e8:61:f1:38:d0:5d:00:bf:86:
a0:fc:4f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:24:32 2025 by rpki-client