Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/QDkHl4mrHxhF9luOVkU65Ma6Q3A.roa
File: QDkHl4mrHxhF9luOVkU65Ma6Q3A.roa (raw, json)
Hash identifier: Fwwmg0r/XMoLQuY0of3rcNf/vrDuQthGOSTZtqwk45E=
Subject key identifier: 40:39:07:97:89:AB:1F:18:45:F6:5B:8E:56:45:3A:E4:C6:BA:43:70
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01947AA78591EAB9E5DFAC58C44FC203479B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/QDkHl4mrHxhF9luOVkU65Ma6Q3A.roa
Signing time: Sat 18 Jan 2025 18:23:06 +0000
ROA not before: Sat 18 Jan 2025 18:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 46.29.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 17 Feb 2025 14:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7a:a7:85:91:ea:b9:e5:df:ac:58:c4:4f:c2:03:47:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 18 18:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4039079789ab1f1845f65b8e56453ae4c6ba4370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:75:ee:51:d1:99:ca:49:47:d6:be:6d:a6:
95:9d:e6:d8:ec:bc:ae:b6:83:96:37:4e:e3:ab:72:
d0:b6:8d:2f:04:00:54:a3:f4:fb:35:79:92:e5:bb:
e7:23:b1:78:23:f9:e2:f3:45:d2:6f:05:2d:0c:6a:
7e:f1:de:28:e1:5a:0d:f7:4d:cb:6f:1e:df:af:54:
77:bd:41:71:fb:d5:d8:35:38:42:65:60:ba:b0:97:
b3:e6:b7:79:63:27:77:5e:d5:8e:ab:f6:b3:56:64:
85:52:98:dd:6e:1f:61:42:fc:d9:ca:78:2c:0c:9f:
4e:a7:6d:21:2a:d9:2f:e3:41:b6:ab:2a:a4:8f:f2:
91:b3:fb:d4:1e:f5:81:1d:6f:90:08:42:4b:f2:d8:
68:fd:0f:9d:96:6c:97:15:64:31:f5:f7:0d:a9:d0:
22:cf:7a:ff:fb:d2:a4:db:af:5b:fe:bb:db:0f:bb:
4a:b6:9e:33:fa:9e:e1:10:bd:51:b7:98:49:86:4c:
d4:00:97:49:83:27:9b:e5:1c:20:28:6f:2a:49:f9:
37:06:d5:a5:75:49:ab:61:b1:9e:f7:fe:e1:0f:d9:
31:5f:46:8c:04:dd:18:5f:3b:14:cf:94:8e:08:52:
a1:4f:96:1c:8a:11:de:ac:4a:95:dc:1a:0f:84:0a:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:39:07:97:89:AB:1F:18:45:F6:5B:8E:56:45:3A:E4:C6:BA:43:70
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/QDkHl4mrHxhF9luOVkU65Ma6Q3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.26.0/23
Signature Algorithm: sha256WithRSAEncryption
33:cb:76:77:2f:96:8c:ac:f9:83:2d:bf:2b:da:92:27:ca:7a:
14:13:ea:30:8a:28:21:1f:3f:be:e1:bc:55:4f:81:9e:2f:07:
db:92:e0:8a:51:a9:d3:a2:05:9f:f0:f4:72:cb:0a:bc:bc:8f:
d5:ef:29:28:95:c1:9b:8f:0c:b6:c0:9f:3c:1e:5b:73:62:69:
dd:89:f1:6b:80:6d:3d:e0:9b:d2:49:a8:43:c7:36:bb:4a:a1:
c3:cd:7c:5a:1b:1c:21:5c:19:85:b4:c4:8d:a5:36:02:b7:f7:
fa:aa:29:1e:a9:2a:30:40:f6:49:16:6e:3f:d2:8f:45:7b:64:
6a:73:19:37:05:0e:4f:93:1d:b2:bb:2b:4f:5e:ce:6e:92:a4:
c0:9b:b1:44:00:20:e2:97:bb:e2:35:a8:3f:d0:72:20:a8:3d:
39:5a:19:e1:54:ee:42:fb:77:25:26:2a:bb:1f:cd:3b:f3:7e:
3d:ee:2b:f6:1f:9f:7a:48:24:f0:b3:0a:95:da:15:37:3c:4f:
52:c5:0e:79:2f:23:8c:d5:49:63:a2:c3:34:e7:f6:2a:3d:e9:
b1:42:f7:36:23:55:b7:0d:85:83:74:32:9f:53:67:c3:64:4e:
6c:a5:c2:60:ca:01:8e:74:e6:cd:ba:27:05:7a:3d:c7:f6:98:
dd:1b:3d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:42:46 2025 by rpki-client