Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QXKyfJ7d3CSaQcEZIh7kDxAmDEw.roa
File: QXKyfJ7d3CSaQcEZIh7kDxAmDEw.roa (raw, json)
Hash identifier: Cn5s4zviz2p0/6nXetUAdaceB6jeGTneNI+LUYKKsbg=
Subject key identifier: 41:72:B2:7C:9E:DD:DC:24:9A:41:C1:19:22:1E:E4:0F:10:26:0C:4C
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 0194266C06F4A6C6F5E95E6DB168C5329E62
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QXKyfJ7d3CSaQcEZIh7kDxAmDEw.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50313
IP address blocks: 185.33.172.0/22 maxlen: 22
212.42.32.0/19 maxlen: 19
2a0d:9480::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 31 Mar 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:06:f4:a6:c6:f5:e9:5e:6d:b1:68:c5:32:9e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4172b27c9edddc249a41c119221ee40f10260c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:73:86:ad:9c:fd:56:f3:e2:45:4c:2f:85:
44:52:58:d5:a6:42:74:c8:58:c0:e3:bc:e7:fa:dd:
4a:90:75:e4:93:56:ad:0d:55:36:20:1d:39:ee:57:
d1:bc:59:e5:6d:3d:be:87:02:de:ae:11:b7:69:9e:
21:f9:e9:9c:59:d7:fe:63:ae:e2:bf:20:c4:81:e9:
10:52:2d:0b:20:b4:fa:79:02:58:fe:1d:33:a6:2f:
56:77:6a:49:b2:f7:72:05:00:f4:11:53:5e:8c:35:
2a:37:5e:71:43:37:a3:29:64:c6:0d:b1:67:21:e9:
0e:3c:f9:c8:c2:99:8b:d0:0e:5c:bf:4a:11:14:a3:
0d:bb:38:56:18:dd:b8:11:5c:d9:5f:f0:f5:ac:d0:
d6:1f:2f:99:ad:bd:55:ce:b5:a9:f1:a8:67:62:f6:
dd:02:97:74:f2:63:2a:23:cc:e2:bf:a3:49:2f:85:
19:9d:ef:9a:e6:78:93:9c:33:85:3e:bb:87:2d:9b:
ff:87:f8:5a:56:86:36:d0:af:f5:f1:81:03:2a:e5:
47:0c:97:0e:19:19:01:e5:55:96:d1:63:fd:34:af:
ac:f0:ba:51:4d:da:06:46:11:ec:50:d0:cd:6a:29:
ff:be:ff:09:64:57:2c:6b:31:21:09:ec:68:b1:a4:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:72:B2:7C:9E:DD:DC:24:9A:41:C1:19:22:1E:E4:0F:10:26:0C:4C
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QXKyfJ7d3CSaQcEZIh7kDxAmDEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.172.0/22
212.42.32.0/19
IPv6:
2a0d:9480::/29
Signature Algorithm: sha256WithRSAEncryption
29:43:ae:ea:aa:8e:7f:f6:6f:16:b9:9d:9e:6e:85:60:da:6f:
80:cf:ae:d8:4f:2b:68:ec:65:6a:f2:6b:dd:c0:5d:a5:70:c0:
b1:49:37:de:de:f0:ca:fa:17:99:b0:48:45:1a:ae:0a:b6:2c:
49:a2:8f:5b:da:ea:ee:05:a2:06:2c:a7:e5:2a:4f:b1:95:e3:
7a:e9:b1:2a:cc:3c:87:6e:a0:c6:84:fe:54:39:11:7e:7e:b7:
9f:89:38:3a:14:f8:9e:9b:5b:c4:7a:51:bf:1e:68:d2:88:40:
fe:5a:ca:fb:de:45:15:e9:73:ed:0c:fb:1a:3c:57:50:a2:39:
8f:18:96:2a:15:b8:6b:fd:73:eb:57:30:98:3f:f9:15:d8:36:
60:39:3b:de:b8:6f:01:e5:f0:7c:77:25:c2:cd:98:5c:9a:5a:
89:30:2c:41:e1:60:e0:3b:c8:89:51:a2:8f:3f:e6:b4:7b:b0:
c3:a2:d4:e1:d8:d3:dc:a3:73:cd:79:f0:6f:67:40:fc:3d:92:
9f:c3:3f:55:fd:91:b3:c1:24:6d:f0:e7:d6:bf:20:eb:d7:5b:
cf:33:7c:85:ec:a5:c1:07:7e:a0:df:85:b4:87:df:42:9a:31:
fa:5a:c2:82:e1:a0:a3:b1:60:fa:cd:26:c0:e4:98:5b:48:fd:
22:18:50:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:19:37 2025 by rpki-client