Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Qz1Nv-ynZL6ZKiBFudQY6YQVCLc.roa
File: Qz1Nv-ynZL6ZKiBFudQY6YQVCLc.roa (raw, json)
Hash identifier: BAsLQYP2bBDjlp5G4NzkONVDawtU4FPZXVOAlzxH8N8=
Subject key identifier: 43:3D:4D:BF:EC:A7:64:BE:99:2A:20:45:B9:D4:18:E9:84:15:08:B7
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01940D62B278F67A461E563619BE60D28968
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Qz1Nv-ynZL6ZKiBFudQY6YQVCLc.roa
Signing time: Sat 28 Dec 2024 13:09:19 +0000
ROA not before: Sat 28 Dec 2024 13:09:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 2a0b:ac00::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 28 Dec 2024 14:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0d:62:b2:78:f6:7a:46:1e:56:36:19:be:60:d2:89:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Dec 28 13:09:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=433d4dbfeca764be992a2045b9d418e9841508b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:12:57:85:d2:cb:89:97:2b:4c:24:cf:e1:
dc:c4:b6:74:85:d0:2e:38:95:d6:8e:c6:29:2f:c3:
8f:98:1a:04:21:45:18:6e:1f:18:21:9d:49:56:5b:
ef:c9:9b:0e:54:cc:f6:0c:a4:29:07:27:3f:6f:60:
3e:f2:28:45:ea:07:fa:16:4a:99:c1:10:e9:91:01:
fd:24:ab:36:8c:99:a2:f8:43:f6:8a:a4:15:02:40:
5c:d9:9d:c1:25:2c:d8:37:47:ef:18:a9:1c:ca:40:
82:64:0a:6e:54:93:41:08:3d:03:47:32:7d:1a:49:
7d:78:0d:ed:c1:6b:17:93:07:71:4d:d1:00:9a:14:
7a:28:19:e0:53:9f:f5:83:c7:f3:9c:46:23:bc:d5:
7f:48:cd:41:86:06:a5:45:f6:47:ee:e1:b6:21:b8:
af:35:ab:b8:bc:a7:e6:a7:d6:50:21:f2:ab:50:fc:
3b:eb:6c:a4:af:f8:2b:fc:ec:5b:ac:03:70:02:d7:
44:fc:a7:35:79:ff:ab:a3:79:a4:42:28:f5:b0:1b:
ce:74:b6:59:e5:b3:44:ca:bb:a5:02:a8:a3:ab:1e:
cc:9f:f3:70:25:55:c3:f6:f8:3a:75:42:e3:be:92:
b5:2e:5b:7b:21:04:b3:7f:ac:c5:05:a8:97:fb:e8:
83:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3D:4D:BF:EC:A7:64:BE:99:2A:20:45:B9:D4:18:E9:84:15:08:B7
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Qz1Nv-ynZL6ZKiBFudQY6YQVCLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ac00::/29
2a13:c240::/29
Signature Algorithm: sha256WithRSAEncryption
22:29:cf:8b:11:e8:1b:0e:32:de:2b:33:15:e0:5a:70:bf:0d:
a3:5f:92:56:64:64:61:5a:81:16:4a:9d:0a:da:03:c6:67:63:
ee:ce:e7:32:5e:3d:28:ee:ac:f3:c9:96:9c:62:be:7a:ab:4d:
bc:01:a0:97:b8:48:8a:0b:9c:cc:20:6a:8c:21:9e:1e:ee:06:
c1:58:43:c8:61:40:e7:fd:20:c0:94:aa:bd:9a:20:02:02:aa:
8c:f2:00:c0:48:6b:07:62:34:4b:d8:4e:3d:6a:05:4e:74:37:
d8:52:a2:ef:e9:5b:6a:72:da:df:c1:d3:3d:75:91:23:fd:18:
30:4d:f7:9d:ad:90:f0:d2:a8:da:48:81:cd:bd:4b:5c:87:19:
15:80:bd:23:4c:ac:c9:69:a9:db:10:40:ce:c6:49:67:fb:04:
e3:8e:f8:d4:9f:e7:35:13:ea:2c:0a:9b:c9:41:b4:b4:b8:6f:
40:e3:6f:2d:9a:62:17:9f:41:00:93:b1:6b:d0:02:bd:24:e0:
f7:1a:fa:19:cd:6e:65:78:fb:ca:76:12:2b:1d:3c:83:27:bd:
29:39:71:5e:46:5d:66:d5:d8:6b:da:8a:db:37:f0:bb:10:22:
c7:11:00:3b:3b:5d:43:6d:b3:72:45:c2:7a:b8:22:34:a2:2f:
22:15:dc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:14:45 2025 by rpki-client