Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/QklubDWVCUGfJLZ0VLzV0L0L5F4.roa
File: QklubDWVCUGfJLZ0VLzV0L0L5F4.roa (raw, json)
Hash identifier: MmaBuIhLNNGO8fLUZcdDfJIgiQHnXyRwsUWz3hXtBCU=
Subject key identifier: 42:49:6E:6C:35:95:09:41:9F:24:B6:74:54:BC:D5:D0:BD:0B:E4:5E
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01938CB6CBC256A81666A847E9B8A4036B51
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/QklubDWVCUGfJLZ0VLzV0L0L5F4.roa
Signing time: Tue 03 Dec 2024 13:30:10 +0000
ROA not before: Tue 03 Dec 2024 13:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30738
IP address blocks: 109.248.227.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
195.211.52.0/22 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 10 Dec 2024 05:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:b6:cb:c2:56:a8:16:66:a8:47:e9:b8:a4:03:6b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Dec 3 13:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42496e6c359509419f24b67454bcd5d0bd0be45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:c3:55:ae:da:85:32:92:5f:7b:53:08:0f:
b1:f7:cc:c7:f4:9c:9d:03:35:57:e7:f1:52:4e:a4:
27:d1:6f:d1:3c:87:8d:4f:4e:50:e1:e5:4b:8c:45:
84:45:48:c5:42:11:f1:fd:ac:5e:38:9e:f4:d3:44:
0c:40:e5:c1:db:5f:8b:ac:92:b8:b6:78:46:9b:2b:
8d:70:9f:b8:e9:0d:ff:1b:4c:46:42:54:dc:84:0f:
38:39:c9:3e:2c:62:0b:89:7a:7a:66:37:07:b3:98:
cb:48:a3:53:7d:35:11:c5:cc:22:2c:b6:d8:24:cd:
07:90:e6:7b:04:7c:4e:b0:a2:f6:69:f7:0d:20:5c:
13:dc:b9:c4:16:3b:6b:62:b5:01:a9:d4:1a:af:8f:
19:f6:79:8f:86:5c:c9:9c:a9:17:f4:d1:ee:ac:d6:
7f:1c:a7:0c:e8:e3:70:0b:a6:c5:c3:7c:4d:a0:0d:
8e:9e:76:90:c1:42:fa:06:da:4f:38:e3:ed:d1:5d:
b4:cc:fb:2b:41:25:61:a7:45:51:fa:88:07:8c:b5:
e1:8e:df:43:ab:ff:c3:aa:c7:b8:35:62:ea:c8:f4:
e4:56:e6:7a:91:30:0a:2a:10:57:4a:d5:52:ec:32:
c6:60:9d:a2:08:21:77:69:da:82:b7:4a:c5:45:01:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:49:6E:6C:35:95:09:41:9F:24:B6:74:54:BC:D5:D0:BD:0B:E4:5E
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/QklubDWVCUGfJLZ0VLzV0L0L5F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.227.0/24
188.130.182.0/24
195.211.52.0/22
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
8d:bd:f1:42:be:d2:4e:fd:64:02:9f:cf:b8:34:8c:7b:ca:e3:
7f:a4:d6:f7:d1:8e:31:50:1d:2d:94:b6:05:8d:48:1e:27:ed:
bc:54:5d:da:ba:d7:ea:b3:a7:30:17:26:29:74:55:35:fb:f7:
c4:f7:b2:7a:d9:41:39:50:69:26:9a:e4:09:8a:37:16:ad:a7:
69:ac:a6:3b:b1:3f:9b:c9:29:31:d3:92:37:e8:28:e2:bf:7f:
1b:ea:74:95:71:54:76:83:7b:75:55:a7:7e:6c:0a:2a:6d:4f:
4c:75:67:20:37:b9:fc:19:71:af:be:7f:cd:5a:64:de:c9:89:
c8:85:b0:9e:d8:76:ec:66:d3:fe:8f:1e:3b:00:17:21:f2:c5:
f6:cd:e8:7e:cf:40:75:fd:a2:6c:72:31:ff:01:3c:d6:75:07:
35:c6:a8:f6:e9:2f:c4:25:0a:89:41:2a:47:44:61:4d:60:61:
06:cb:3f:48:a3:cc:12:f0:cd:1c:87:67:95:b2:bc:30:68:4b:
9d:ed:1c:b7:dd:f1:55:a2:11:36:7c:d5:09:1c:1e:f0:cf:c3:
30:16:5d:9f:b1:e6:a8:dd:f8:eb:d7:80:d6:b9:01:ec:b5:6e:
b2:64:e8:49:29:76:f6:c4:9e:3a:51:0d:7f:f9:c2:fb:b9:7a:
4d:12:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:18:52 2025 by rpki-client