Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/qwYmAilJbRBMI39FkpTP_w6-giU.roa
File: qwYmAilJbRBMI39FkpTP_w6-giU.roa (raw, json)
Hash identifier: eoUyvisaDk7RUT9/0E0aAusjvGb+PkYvBwEuQg7Hu90=
Subject key identifier: AB:06:26:02:29:49:6D:10:4C:23:7F:45:92:94:CF:FF:0E:BE:82:25
Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Certificate serial: 01942143DD3E85F32005886056CBABF2553A
Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/qwYmAilJbRBMI39FkpTP_w6-giU.roa
Signing time: Wed 01 Jan 2025 09:48:03 +0000
ROA not before: Wed 01 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214112
IP address blocks: 62.169.138.0/24 maxlen: 24
62.169.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 11:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:dd:3e:85:f3:20:05:88:60:56:cb:ab:f2:55:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab06260229496d104c237f459294cfff0ebe8225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:70:2a:f2:45:ce:bc:53:77:5d:32:21:67:
34:bf:c4:05:66:43:1d:c2:1b:21:a2:a4:64:27:23:
e9:88:5f:ca:80:60:c6:f9:5a:e2:a2:37:64:18:ee:
2c:2b:75:fb:74:d4:13:5c:91:ea:b1:e6:f5:9c:0c:
4a:2f:3f:f4:74:25:0d:dc:65:45:e8:fe:53:0a:e3:
b1:35:64:0d:04:e0:47:d4:76:93:20:5c:c5:d6:8a:
6f:1e:01:95:21:a6:0d:dc:ec:a9:05:5d:b3:06:f6:
9e:d6:0c:34:b9:57:36:07:e7:1b:ed:d2:49:83:6c:
3e:d7:58:03:ad:e7:3d:80:76:21:65:68:f5:b4:14:
87:fc:22:3c:0d:f5:66:4f:d2:ca:e1:dc:59:33:c3:
23:1f:90:41:e9:93:39:ec:98:e1:de:60:9e:f8:a6:
56:1a:f6:d7:7f:b0:f6:90:b3:2f:dd:03:7f:21:ae:
e5:a8:23:be:e2:42:e7:5b:e7:03:85:b5:91:aa:9e:
30:1c:87:9c:47:3f:ce:fb:fc:35:7e:89:c0:31:ea:
10:66:b4:4f:7e:ac:bc:9c:bd:64:fa:5a:58:92:56:
5f:fb:ad:7b:ce:52:be:38:0f:bf:74:8f:42:db:13:
b5:f6:3e:c4:af:a8:ac:0d:4a:61:ed:52:be:a3:ae:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:06:26:02:29:49:6D:10:4C:23:7F:45:92:94:CF:FF:0E:BE:82:25
X509v3 Authority Key Identifier:
keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/qwYmAilJbRBMI39FkpTP_w6-giU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.138.0/24
62.169.156.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e8:e6:73:00:bf:8d:6f:f0:12:6c:a5:92:e7:d3:cc:e0:e3:
2f:69:fa:b2:15:01:5c:5b:ff:e4:34:0b:44:de:48:45:68:57:
23:90:e8:8a:ac:7c:36:35:bf:ea:07:7b:a2:dd:1a:86:4a:b2:
6d:a9:37:e6:90:c2:fa:96:f1:86:af:53:38:97:e3:7e:29:5d:
d8:9a:7d:4d:7a:c6:24:a6:79:d5:5c:3a:b2:cc:70:9f:fd:53:
94:41:af:1f:d5:f6:d4:17:18:a7:d4:6a:0d:7d:d7:83:a0:6c:
b7:57:d4:74:6c:a4:37:8d:32:ae:91:18:33:d2:a4:49:b6:97:
b9:37:0d:5f:a0:c4:1f:d8:7d:65:72:cc:34:e7:a0:94:43:5b:
43:ed:e1:a3:4e:fc:1e:23:39:99:c6:75:99:aa:e0:6a:97:30:
89:63:fd:d6:26:a9:0a:37:a4:85:a9:c6:4a:c5:f1:22:c8:b7:
c7:3d:78:31:55:b4:6a:27:d6:6c:de:e0:09:f6:fc:bd:b0:50:
75:0a:dd:d6:dd:c0:b6:ad:71:85:d1:4e:71:d1:48:69:13:a0:
52:68:b0:fe:22:14:3d:85:c5:fb:aa:50:0c:2c:95:cc:44:8f:
3a:24:18:9e:3c:4a:c3:79:76:e6:29:c3:4c:3b:5d:58:e3:e4:
05:1a:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:49:46 2025 by rpki-client