Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/qPIntH1OE-ICMw9pUDku7sMRfek.roa
File: qPIntH1OE-ICMw9pUDku7sMRfek.roa (raw, json)
Hash identifier: wOgWqYhO4D5kf51Z0108EoD+OgUWJcpFBx+ObZ8tPuI=
Subject key identifier: A8:F2:27:B4:7D:4E:13:E2:02:33:0F:69:50:39:2E:EE:C3:11:7D:E9
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0194A94396F9038B35F5173278CF1CF65B2E
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/qPIntH1OE-ICMw9pUDku7sMRfek.roa
Signing time: Mon 27 Jan 2025 19:36:06 +0000
ROA not before: Mon 27 Jan 2025 19:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a05:1e41::/32 maxlen: 32
2a09:a801::/32 maxlen: 32
2a09:af80::/32 maxlen: 32
2a09:c700::/32 maxlen: 32
2a09:cf00::/32 maxlen: 32
2a09:d700::/32 maxlen: 32
2a09:dd00::/32 maxlen: 32
2a09:e700::/32 maxlen: 32
2a0d:fcc0::/32 maxlen: 32
2a0e:3f40::/32 maxlen: 32
2a0e:5880::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 24 Feb 2025 16:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a9:43:96:f9:03:8b:35:f5:17:32:78:cf:1c:f6:5b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 27 19:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8f227b47d4e13e202330f6950392eeec3117de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:1b:af:9a:5c:1a:98:8d:f9:60:d8:f7:2f:
8d:98:23:b5:6b:0a:ca:83:8f:03:ac:28:9b:79:a9:
ff:5d:04:ca:a4:c7:fe:6a:e9:3e:bf:2c:ae:a7:05:
8f:00:2a:85:38:35:ba:5b:09:5f:30:c2:08:5e:96:
ac:b9:80:b7:91:99:17:8c:25:1c:30:20:71:16:2c:
fb:b1:4d:03:34:56:94:c3:0e:7c:df:af:5a:7a:dc:
4f:62:92:f9:1a:60:99:42:5c:8b:2d:2c:c5:86:35:
cb:6a:b8:45:a4:8c:e4:e7:b4:23:c0:b3:89:e0:4a:
0d:89:f1:6f:f6:26:5f:aa:50:4f:80:26:8f:2c:3a:
01:65:bb:5a:fa:26:58:19:60:b8:f7:43:6a:f1:14:
93:a0:45:09:dd:fa:89:19:73:2f:e3:e4:42:59:4a:
d7:55:1c:3e:26:25:69:ea:55:e0:5a:01:8e:5b:3f:
17:7d:a3:aa:d6:85:a2:19:b9:68:0b:33:36:21:f6:
9b:df:fc:7b:2d:42:55:bd:45:5b:36:ff:53:6b:75:
60:b3:42:c4:8a:13:a0:6b:50:15:1b:c5:d8:32:55:
65:e6:a5:80:33:f7:5b:3b:9f:14:39:78:b1:11:d5:
5e:62:16:ab:2a:d8:3f:08:f3:8b:3b:12:69:7e:91:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F2:27:B4:7D:4E:13:E2:02:33:0F:69:50:39:2E:EE:C3:11:7D:E9
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/qPIntH1OE-ICMw9pUDku7sMRfek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1e41::/32
2a09:a801::/32
2a09:af80::/32
2a09:c700::/32
2a09:cf00::/32
2a09:d700::/32
2a09:dd00::/32
2a09:e700::/32
2a0d:fcc0::/32
2a0e:3f40::/32
2a0e:5880::/32
Signature Algorithm: sha256WithRSAEncryption
83:08:ad:bc:51:65:c3:c9:77:d6:1d:5a:e1:6a:36:02:12:ec:
a6:ae:35:16:20:61:7d:fa:1a:fc:a1:28:08:80:75:7b:e6:93:
a8:bb:c0:04:8d:2e:f7:6d:12:55:9c:70:4a:6a:22:ff:60:8c:
a0:95:2d:1c:b7:ad:b6:66:bc:e7:1a:80:ad:b7:ce:55:aa:79:
30:25:7f:9d:5f:f8:12:45:db:0e:70:5e:0a:c1:59:40:da:db:
d3:75:13:b3:92:00:7a:eb:6b:bb:ab:71:a0:02:36:78:4d:08:
84:3d:ae:df:3e:60:af:1b:50:56:ee:31:92:e5:d8:75:cc:fd:
f1:f7:8a:07:29:4b:72:49:f6:03:05:93:e2:9a:bd:e2:1c:7e:
17:47:51:96:df:5f:30:8b:16:0f:ff:93:5c:51:55:13:c9:99:
6b:91:c2:cb:78:6a:b2:7c:6c:f8:48:a5:3a:d9:3a:c8:0e:53:
9b:76:b3:45:a0:a1:b1:18:b9:da:98:02:55:ab:a9:2b:f4:cd:
82:35:67:12:0a:6d:20:04:30:3b:a5:6f:e4:74:95:93:03:b6:
a5:63:08:43:e3:c3:ac:20:61:08:0f:62:2a:9a:c2:cd:f7:fd:
29:4f:e2:a4:5d:73:26:f3:80:da:92:0f:66:c6:2b:c4:56:6c:
55:18:fd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:22:42 2025 by rpki-client