Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/QNe3KMGHjGUjqAmORRm89TnbH6o.roa
File: QNe3KMGHjGUjqAmORRm89TnbH6o.roa (raw, json)
Hash identifier: wPjlKJsuWuApDJ0+TezG+AKoc5MDHdHVgpgqMHZqqNM=
Subject key identifier: 40:D7:B7:28:C1:87:8C:65:23:A8:09:8E:45:19:BC:F5:39:DB:1F:AA
Certificate issuer: /CN=e9be181aabdb195513a26c67b621e2986818d03d
Certificate serial: 0194920768C9B57F8CFD00F9A838CBB54E4A
Authority key identifier: E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/QNe3KMGHjGUjqAmORRm89TnbH6o.roa
Signing time: Thu 23 Jan 2025 07:19:06 +0000
ROA not before: Thu 23 Jan 2025 07:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:3900::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 06 Feb 2025 17:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:07:68:c9:b5:7f:8c:fd:00:f9:a8:38:cb:b5:4e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9be181aabdb195513a26c67b621e2986818d03d
Validity
Not Before: Jan 23 07:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40d7b728c1878c6523a8098e4519bcf539db1faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:82:ef:e0:ec:37:60:ee:b6:a7:00:e4:e0:
0b:f6:20:19:51:09:0e:5b:bd:0c:8b:fe:67:c1:59:
5d:06:39:bd:a0:ad:8f:f2:a6:9d:29:5c:e2:1c:21:
c4:1a:db:6d:1b:0e:41:77:4d:1e:fa:11:22:e6:21:
05:d5:be:8e:16:5e:fc:7f:b5:f2:e1:ce:6b:1f:c0:
f6:35:2b:83:94:f5:c7:2c:dd:bf:5c:87:e5:b7:86:
e3:56:f4:60:96:f0:35:ea:aa:1e:19:b4:37:8b:69:
06:4a:50:b9:70:99:af:48:fb:0a:13:37:91:75:9b:
93:64:f0:bf:a1:fa:68:8e:87:e1:b0:3f:31:ed:35:
29:5a:b4:09:89:b2:3a:49:fa:1b:6c:18:a4:ba:ee:
1f:81:ca:4c:d8:3d:0a:f7:3a:cf:3b:21:49:e5:b0:
30:d1:ac:60:5b:41:09:6a:4c:ac:9c:2f:74:94:4e:
bf:27:b9:6f:d7:06:9a:59:23:4f:9a:0e:39:53:f0:
3c:07:1a:38:6c:23:66:3d:cf:b0:eb:3a:fb:e7:78:
71:ce:35:a5:85:b8:6f:39:84:38:b7:c1:ce:77:da:
95:c8:06:5f:c1:ee:c1:b3:d8:cc:32:5e:db:d8:62:
27:f0:cb:0f:91:ec:14:f9:9f:4a:2e:89:f8:7b:21:
16:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D7:B7:28:C1:87:8C:65:23:A8:09:8E:45:19:BC:F5:39:DB:1F:AA
X509v3 Authority Key Identifier:
keyid:E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/QNe3KMGHjGUjqAmORRm89TnbH6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3900::/32
Signature Algorithm: sha256WithRSAEncryption
4f:c6:e7:2d:53:3c:a5:48:e8:11:7d:91:f3:50:59:10:e5:fe:
d1:95:32:da:79:6f:1e:db:83:d9:c1:17:09:cb:0b:60:59:4b:
f3:b5:fa:62:ad:7b:d5:5f:46:8c:fb:9b:c4:3c:18:7c:28:a4:
16:29:74:5a:da:47:59:3d:dc:a6:26:a5:28:42:61:1b:a1:e2:
da:30:c3:52:93:fa:6d:f7:a5:ec:2c:a8:3f:2c:01:4b:89:e4:
2d:bb:2e:d1:70:80:19:a2:7c:e9:f3:73:db:76:49:13:c7:31:
93:a5:ae:84:f4:49:95:ac:72:9b:67:d7:58:86:8a:b5:ca:4a:
35:09:7f:22:f2:4a:5e:ff:a0:bd:5c:7e:dd:91:16:bb:0f:67:
c1:a7:9a:72:b2:62:44:f2:12:a1:22:f4:0e:bf:f8:4f:ee:54:
04:03:b1:aa:f9:8d:d0:8d:e4:69:43:34:02:14:b9:06:06:66:
10:08:bd:67:ce:74:05:f5:dc:52:d7:19:a7:75:b7:c2:68:76:
8d:f5:5a:6b:a6:55:16:96:c3:7d:59:7a:e0:1f:b9:2f:af:97:
c9:04:34:be:79:fa:2e:c5:9c:3e:65:08:a7:25:41:f7:07:b8:
17:48:a4:5e:0f:70:f8:2c:28:c6:e3:90:5e:97:ef:fe:3e:6b:
ca:31:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:42 2025 by rpki-client