Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/qqwZ6TwQpxAPLdN6UbYaP4XJBMs.roa
File: qqwZ6TwQpxAPLdN6UbYaP4XJBMs.roa (raw, json)
Hash identifier: 6X0FE8vkI0isp4lPbX22XxG2XfuLLCqmgds+VSA04Nw=
Subject key identifier: AA:AC:19:E9:3C:10:A7:10:0F:2D:D3:7A:51:B6:1A:3F:85:C9:04:CB
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 018D7E580AF56FAB5425C44F9A6A0D3BB098
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/qqwZ6TwQpxAPLdN6UbYaP4XJBMs.roa
Signing time: Tue 06 Feb 2024 12:15:15 +0000
ROA not before: Tue 06 Feb 2024 12:15:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48825
IP address blocks: 95.128.128.0/21 maxlen: 21
185.4.48.0/22 maxlen: 23
Validation: Failed, certificate revoked on Tue 29 Oct 2024 10:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:58:0a:f5:6f:ab:54:25:c4:4f:9a:6a:0d:3b:b0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Feb 6 12:15:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaac19e93c10a7100f2dd37a51b61a3f85c904cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:ba:58:14:b3:3d:c3:ab:6a:40:87:6b:5d:
96:61:25:31:94:af:dd:01:21:e0:cb:9d:8c:32:37:
e7:b8:d8:24:af:b3:61:77:02:35:89:b2:43:bb:8f:
b4:f5:7e:75:7c:fd:a3:4c:e0:e8:92:89:d3:c6:90:
f2:c4:c3:96:c9:ab:86:bf:a8:fa:90:dc:5f:64:ec:
38:63:ec:58:5a:ba:6b:37:eb:4f:47:93:59:de:58:
e7:0d:4f:c1:13:19:8a:d3:0c:40:fb:f4:79:50:c4:
38:42:4a:5c:99:bf:02:ef:14:42:0a:31:e9:e7:9a:
6a:f5:06:b4:29:04:83:24:18:0c:d7:50:d8:b7:61:
36:aa:dd:13:de:82:0f:71:8c:09:8a:f9:c0:e9:ff:
5c:e4:49:99:9a:eb:9b:1b:88:8a:12:fd:32:e1:cb:
2d:e1:70:0e:52:16:6d:3b:16:be:d8:42:78:f2:d6:
e3:b2:0c:3e:0f:dd:a0:65:e0:9d:a0:69:ac:e4:b3:
69:7f:3e:b7:bf:3b:4a:0e:5b:27:fc:2c:3d:8f:ff:
f6:17:76:c6:0d:95:32:f9:8b:67:54:fb:70:4f:0d:
f1:46:be:cd:bd:5a:12:9d:6f:7f:d5:19:97:18:06:
1a:02:ca:3e:68:ff:d6:ce:48:6a:e4:c6:9d:3d:0a:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AC:19:E9:3C:10:A7:10:0F:2D:D3:7A:51:B6:1A:3F:85:C9:04:CB
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/qqwZ6TwQpxAPLdN6UbYaP4XJBMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.128.0/21
185.4.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:e1:f8:7b:d8:82:d8:9e:c5:ee:52:97:79:9e:f5:84:e2:08:
d0:1c:94:4f:c5:f2:29:5e:c4:9d:15:e2:7d:f7:a0:64:44:60:
c6:e0:2e:dd:c8:18:1d:a6:70:ad:92:b5:8d:6c:e0:92:4d:e8:
3b:a2:15:e9:0b:06:4c:3c:33:78:46:fa:2e:76:2d:e2:58:22:
a5:ec:01:90:84:d9:56:7b:80:65:fe:06:7f:1b:5b:76:43:f1:
21:50:65:91:2a:1b:59:00:af:84:67:2c:d8:94:c5:43:2e:e3:
74:2b:71:7f:44:52:6e:3a:b3:a4:d2:fa:95:27:2c:23:9c:3a:
81:5e:19:9d:58:78:ee:f5:50:36:85:e5:28:43:49:b3:40:36:
8c:f9:48:40:a3:1f:4b:2a:0b:d1:f6:d7:5a:16:f1:ab:02:f4:
e2:52:8e:a9:19:82:ae:cc:a6:13:cb:7e:d2:ef:97:7e:fd:72:
31:c8:9a:ad:37:93:2b:90:19:71:ce:2a:15:f1:c3:f0:67:1d:
e9:22:35:6b:2a:31:2d:3f:e0:0d:59:3b:37:73:e6:b8:37:5c:
83:19:23:f3:c2:9d:35:32:5a:b4:56:35:fd:59:71:59:37:78:
78:7a:d0:c7:b1:27:4c:fc:7f:57:d2:a7:20:f7:7f:47:c6:f3:
d3:e3:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:20 2025 by rpki-client