Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/qpG0l8Q4vLFdXnkCAgmVd08Lrr0.roa
File: qpG0l8Q4vLFdXnkCAgmVd08Lrr0.roa (raw, json)
Hash identifier: IWJ4ukCQHAoB2h7dDl04IoZZGHc5XBfuS/FbWke8yxE=
Subject key identifier: AA:91:B4:97:C4:38:BC:B1:5D:5E:79:02:02:09:95:77:4F:0B:AE:BD
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 018CC3B707B37EDE9637C855EA94B821370C
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/qpG0l8Q4vLFdXnkCAgmVd08Lrr0.roa
Signing time: Mon 01 Jan 2024 06:30:01 +0000
ROA not before: Mon 01 Jan 2024 06:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50525
IP address blocks: 91.148.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 14:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:07:b3:7e:de:96:37:c8:55:ea:94:b8:21:37:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Jan 1 06:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa91b497c438bcb15d5e7902020995774f0baebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:8a:36:af:a3:0f:68:03:9a:fa:ca:48:31:
d9:b6:c1:18:02:0c:5b:e2:14:e7:79:47:a1:a2:32:
eb:48:c0:d0:30:d0:19:2a:9f:ce:32:65:7a:e5:ae:
92:10:50:20:eb:21:df:e9:69:3a:f2:94:74:fa:2a:
12:d6:5f:a3:00:08:41:b6:bd:70:2a:9a:5d:08:13:
b2:ef:d2:fe:00:4d:2f:96:1c:00:22:f6:50:ef:ed:
ae:b1:79:c1:7a:3c:ea:e4:b0:90:d4:50:e3:b8:3e:
a4:c2:07:a4:e3:d5:2c:67:6d:26:d7:fa:b5:13:6b:
30:04:55:53:2e:49:82:52:f3:1b:cc:53:7f:51:dc:
e7:49:76:32:c4:c7:d5:dd:f7:cc:d0:61:0d:47:98:
85:4e:1a:09:fd:57:4b:35:eb:3a:92:56:6a:02:47:
ee:b4:a3:a2:be:9a:73:f0:5a:62:be:b9:f7:4d:45:
95:fb:18:ca:74:2f:cd:bb:1b:fe:42:fc:01:f6:d3:
98:f0:9d:26:d8:cc:9f:df:c4:14:28:0d:e3:0d:87:
db:0d:4f:4e:c9:f4:10:2b:f8:38:8f:db:c1:96:39:
e5:e8:c6:99:81:49:30:dd:86:31:da:be:ce:c1:c9:
29:24:dd:95:d0:ed:58:51:81:c2:62:ee:40:f2:a8:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:91:B4:97:C4:38:BC:B1:5D:5E:79:02:02:09:95:77:4F:0B:AE:BD
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/qpG0l8Q4vLFdXnkCAgmVd08Lrr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:3c:c9:5b:8f:14:42:b8:77:f4:55:4b:f5:80:cf:88:49:5d:
25:8f:49:0d:b6:5a:79:03:3d:77:4a:0c:17:24:25:f1:26:0b:
f2:a2:8c:c7:1f:ac:ee:68:d4:69:f0:2c:44:ef:ea:c5:ce:ca:
04:d4:d3:03:d0:9c:a7:b1:92:d8:11:40:3c:e1:dd:63:30:eb:
12:fe:62:91:ff:ff:eb:a5:23:e4:12:71:f4:4e:c0:e2:ea:d4:
ad:15:94:9b:02:4b:37:be:0d:c1:0b:fc:05:2e:cf:fb:68:4b:
b2:58:a5:54:d1:d1:d0:16:4c:90:0b:7f:4a:ca:87:b6:d2:d3:
85:a3:8a:26:a6:63:c4:08:48:41:4c:94:ed:d2:38:64:a1:50:
09:c0:19:4e:da:85:d5:9d:f2:e7:2e:ec:69:cc:24:19:cc:e9:
c4:9b:fb:68:94:eb:7f:3c:47:ca:ae:5f:9a:e0:95:6b:48:ae:
b2:7a:66:62:3a:dd:da:90:6b:8d:b3:0f:29:e5:71:43:8e:ff:
33:4d:22:ab:b5:46:84:c8:4e:5c:1f:8e:2a:c0:65:09:f9:f2:
01:4c:a4:78:aa:29:d2:a4:6f:c2:a6:bc:75:fd:ce:9d:19:8b:
5a:c3:f8:f3:5d:c7:6e:6b:a0:5c:24:0d:9c:26:50:2f:a2:91:
3a:ea:71:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:54:39 2025 by rpki-client