Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QD0EyVEbB7EaXlBLVPXFplwR9N4.roa
File: QD0EyVEbB7EaXlBLVPXFplwR9N4.roa (raw, json)
Hash identifier: dKNIf2Qk9e6fqOQ384KSiHuiML7n+R45iQbhm200Jxk=
Subject key identifier: 40:3D:04:C9:51:1B:07:B1:1A:5E:50:4B:54:F5:C5:A6:5C:11:F4:DE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193F97D9D2F4604E211A9B655BAA6EA2BD0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QD0EyVEbB7EaXlBLVPXFplwR9N4.roa
Signing time: Tue 24 Dec 2024 16:26:19 +0000
ROA not before: Tue 24 Dec 2024 16:26:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26832
IP address blocks: 185.141.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:7d:9d:2f:46:04:e2:11:a9:b6:55:ba:a6:ea:2b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 24 16:26:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=403d04c9511b07b11a5e504b54f5c5a65c11f4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:07:3d:ac:c1:e6:de:b7:22:50:1a:5f:cb:
92:b2:2f:2e:94:ea:5a:78:b0:59:d4:7a:34:4d:28:
bf:66:7d:78:0c:13:96:cd:97:8e:4c:85:21:8c:c5:
d6:0d:e5:3f:44:9c:e2:1f:62:f0:9c:58:28:44:17:
e0:03:15:ce:ec:88:85:73:81:c7:58:90:a8:73:77:
2a:ff:e9:f5:09:f4:c7:d5:fe:78:7c:69:34:73:3d:
b6:5d:ce:c1:96:0e:23:84:33:1f:80:32:b7:35:c1:
aa:5c:1d:81:2f:e0:8a:46:4b:f3:9b:03:6f:6e:ba:
df:ee:cd:ca:13:76:5b:fc:92:99:e0:df:84:21:95:
a4:30:51:9f:72:24:e1:a7:62:4f:d6:65:82:fb:1d:
bb:8e:ce:ac:67:93:a1:17:32:3c:f0:3b:ec:86:3b:
8a:b8:85:91:1d:25:79:76:da:a2:a6:e7:10:bc:79:
3a:fa:33:3d:a7:74:66:f8:46:3c:75:95:16:80:f2:
61:61:e4:9a:d8:37:6c:ab:11:ac:91:64:f5:e4:ca:
46:30:04:ff:e5:0c:a7:02:1d:5e:28:a5:23:dc:6d:
6f:26:17:2b:85:0b:48:48:81:f5:95:41:8f:72:08:
5c:32:c9:df:f5:9f:dc:d1:d2:ad:6f:9f:3c:d9:c1:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:04:C9:51:1B:07:B1:1A:5E:50:4B:54:F5:C5:A6:5C:11:F4:DE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QD0EyVEbB7EaXlBLVPXFplwR9N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.216.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ed:e2:f3:92:95:0b:d6:60:67:18:ac:44:30:0e:d8:05:a8:
11:12:9d:12:23:68:81:97:5e:14:f4:82:56:62:c7:a2:42:af:
1e:3b:3d:a9:62:a8:0f:e7:87:06:0a:cf:eb:09:a3:f8:52:62:
ac:f4:dd:04:e1:5e:87:04:f0:4c:7a:13:81:d1:8a:4d:cb:ea:
62:d1:51:bc:ee:70:00:37:d3:18:42:bb:8a:3f:cb:ae:bb:12:
e6:80:5d:82:0d:4f:e8:9d:f5:ae:f2:5b:4d:70:26:92:cf:87:
7f:1b:fc:f1:a8:4c:7d:b4:c7:d6:94:91:c4:b6:51:38:f4:90:
19:4e:12:55:9b:5f:d9:ab:c1:d1:42:67:79:a3:5b:0c:f2:41:
8b:40:2f:37:fa:10:33:91:06:52:cf:67:84:66:57:ef:eb:82:
e7:a3:84:53:cb:6f:70:e4:5a:a5:1d:87:0c:30:f5:4f:99:11:
b2:16:78:9e:b7:4b:91:b1:31:0f:93:ed:16:5b:95:5e:67:9b:
24:50:73:8e:0c:f8:71:0c:3d:af:ae:96:e5:96:fc:30:b8:0d:
9e:7b:9e:d8:4b:5e:20:e4:1a:e3:d1:ad:8f:43:51:3b:9e:a5:
2a:90:07:67:1c:ae:1c:b9:5c:48:31:ed:c6:2c:ac:90:9f:7c:
53:a8:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:43 2025 by rpki-client