Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/qmQr0V68VBjW2WJEg-ucCJy4qaU.roa
File: qmQr0V68VBjW2WJEg-ucCJy4qaU.roa (raw, json)
Hash identifier: YCg3ERmS0L2FaoSNkUSFlczZk7gFP+41U6l0ocynUqU=
Subject key identifier: AA:64:2B:D1:5E:BC:54:18:D6:D9:62:44:83:EB:9C:08:9C:B8:A9:A5
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B55801DAD4B7EE7FCB2C431E189726
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/qmQr0V68VBjW2WJEg-ucCJy4qaU.roa
Signing time: Thu 02 Jan 2025 15:49:43 +0000
ROA not before: Thu 02 Jan 2025 15:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134176
IP address blocks: 109.121.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 08:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:58:01:da:d4:b7:ee:7f:cb:2c:43:1e:18:97:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa642bd15ebc5418d6d9624483eb9c089cb8a9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c9:25:1f:d9:8f:df:8a:25:6f:5b:40:2e:f7:
b1:c4:c0:4f:1e:15:2a:78:bd:a7:2d:92:bb:83:e5:
02:d0:1f:ac:37:f3:af:0e:a6:e4:dd:77:bc:5a:1f:
d3:a1:4d:cb:8d:8a:f8:98:58:ee:8f:51:cb:58:d8:
ac:4b:e9:6a:2e:d3:1c:06:e7:3c:60:ec:af:55:d3:
d7:68:dd:b4:5b:82:de:72:2e:9a:9b:f1:c2:49:61:
e9:40:2c:8c:99:1f:3d:93:26:a5:5b:0a:94:ac:3d:
dd:7d:85:23:9e:23:e1:d6:d6:83:05:e1:e5:57:a4:
39:d1:80:cc:04:be:86:a4:45:70:47:c1:d8:e9:86:
98:24:61:82:6e:4e:23:6f:39:4c:76:38:57:7f:f5:
2d:ba:13:17:de:f4:99:63:32:64:d3:b0:e1:d2:ce:
97:fb:a4:37:61:14:99:1c:a6:98:81:a0:61:b6:36:
f4:61:eb:c9:4a:4e:0f:dc:ad:5d:a7:e9:fe:76:7c:
d2:93:90:ad:90:87:84:45:fd:3c:56:34:fe:eb:0f:
da:5a:11:99:dd:83:50:cd:7f:09:16:93:3c:c7:ba:
20:67:63:53:74:41:d6:a4:08:cc:59:3e:8b:44:0b:
20:b8:e2:6c:92:69:41:95:1c:d7:e4:7e:10:77:15:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:64:2B:D1:5E:BC:54:18:D6:D9:62:44:83:EB:9C:08:9C:B8:A9:A5
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/qmQr0V68VBjW2WJEg-ucCJy4qaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.34.0/24
Signature Algorithm: sha256WithRSAEncryption
17:7e:4e:b6:a3:ca:c5:8e:ba:c8:37:39:9f:e4:67:7b:25:e1:
90:74:55:9d:1e:ad:55:0e:2e:11:bb:cb:23:fc:e3:6b:14:2c:
9f:b6:c4:17:e5:bc:ea:ce:c3:d4:a5:13:ea:60:26:e7:54:bf:
88:7a:82:9f:a6:e7:89:4d:57:00:89:f0:47:62:77:e9:dc:e1:
b7:01:6b:78:ce:0e:d2:a6:dc:15:78:c5:e3:17:cf:a6:49:ba:
d0:c3:9f:bd:45:75:56:d5:a0:ef:06:ad:38:b5:12:76:b3:df:
5f:6e:1a:1a:5d:0c:9a:b5:e4:d4:3e:73:68:4c:9f:b6:94:c3:
60:12:6c:8b:01:7f:e4:17:7c:52:21:a0:5f:fd:55:6a:f2:71:
26:a6:bd:47:43:4a:cb:9c:f1:40:29:50:8c:af:10:a0:0b:a2:
39:14:15:58:79:1f:7a:a5:fc:ba:b1:67:b7:7e:fd:e5:cf:29:
85:e9:72:bd:72:d0:b6:0e:4f:47:10:e4:f5:ea:53:f3:d4:f4:
05:e1:6f:5c:6b:4f:39:de:91:83:e2:d7:9e:f2:b0:17:f8:1c:
0a:71:b0:f3:60:69:63:fb:cd:8a:1a:e6:44:28:5d:a4:71:5e:
ef:a6:8f:da:3d:a2:64:ba:52:ad:c1:b5:d4:3b:ae:e7:95:11:
61:0c:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:56:14 2025 by rpki-client