Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QWhteR3jVqTaAlaTu9_8UsUc90M.roa
File: QWhteR3jVqTaAlaTu9_8UsUc90M.roa (raw, json)
Hash identifier: Gi/nI8puu1b3doMdmwvpApmv0Go0512hsU4Du54YKig=
Subject key identifier: 41:68:6D:79:1D:E3:56:A4:DA:02:56:93:BB:DF:FC:52:C5:1C:F7:43
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019411E8D5A402194D21F361199A70BDBE83
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QWhteR3jVqTaAlaTu9_8UsUc90M.roa
Signing time: Sun 29 Dec 2024 10:14:19 +0000
ROA not before: Sun 29 Dec 2024 10:14:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 185.34.101.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 06:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:11:e8:d5:a4:02:19:4d:21:f3:61:19:9a:70:bd:be:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 29 10:14:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41686d791de356a4da025693bbdffc52c51cf743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:8b:d8:61:e6:f3:21:52:5a:4f:d7:d9:f5:
e3:ae:21:93:31:78:3a:89:8c:17:06:94:f5:89:8f:
5b:a6:bd:4b:bb:fe:73:ab:b9:a7:34:07:0b:f2:d4:
17:02:3c:a2:71:bf:e5:94:b6:7b:78:f8:62:66:4b:
86:f9:b3:61:5d:5b:a5:1d:b6:8b:fd:80:b0:d5:96:
ec:85:f1:7b:66:1c:c5:0c:71:18:a6:d0:9f:3b:aa:
e8:9d:87:69:3f:5b:6d:b4:9d:e1:d6:db:4e:6f:31:
40:85:17:8c:34:b9:d4:0b:4e:89:f0:54:7b:35:4d:
9a:2f:b5:39:69:46:9d:f0:f3:ef:91:d4:30:e2:b0:
23:bc:57:3d:62:40:40:85:ee:3a:15:3f:ab:62:c4:
c6:7e:1b:3a:af:26:ce:ce:a5:e9:2e:af:32:4f:4b:
4c:d4:a6:b6:6b:08:f2:93:d6:6d:d5:31:f0:6e:ce:
f5:5b:b9:34:c4:7e:8a:3d:d3:61:3f:33:95:51:98:
14:9b:1a:64:93:cf:dd:ad:35:a6:9e:df:f7:e3:e3:
d0:e6:96:1b:c7:a4:a7:88:41:c8:8a:43:59:85:14:
b8:17:00:03:bf:e7:c2:c8:1a:8a:dd:d4:5e:25:ed:
81:f6:45:ae:96:7f:1f:3a:1e:43:3b:a0:44:bb:45:
9d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:68:6D:79:1D:E3:56:A4:DA:02:56:93:BB:DF:FC:52:C5:1C:F7:43
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QWhteR3jVqTaAlaTu9_8UsUc90M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.101.0/24
188.64.142.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e5:6f:48:4e:16:55:34:30:7d:59:29:2a:fd:a9:96:5f:ed:
ce:4d:14:99:53:47:c9:5f:fe:3d:9e:ac:de:48:03:7b:db:e1:
2b:d1:86:4c:00:75:d3:87:2c:d3:5f:a6:09:ef:b8:62:18:98:
b3:b5:83:e1:e4:33:5e:b0:fc:6b:44:f8:14:d3:5c:de:06:4b:
e0:59:3b:09:8b:b1:04:fd:ea:da:8a:cd:17:4b:26:63:2c:53:
ac:0e:9f:15:46:68:0f:c5:d1:b0:13:d4:d8:7a:71:34:5a:eb:
41:b3:1b:e3:b6:61:12:67:bb:aa:c3:d8:21:27:27:43:69:e6:
83:d2:b4:73:ce:41:50:ae:5e:56:1b:18:bd:06:cd:c5:f8:05:
ee:62:41:0f:b9:10:29:4a:15:6b:d9:0a:01:05:43:de:31:40:
03:f1:df:75:1f:fc:30:5e:11:44:32:ba:46:6a:23:3d:d0:6f:
7b:1f:41:8d:f8:ef:93:ee:5c:9e:36:ce:a4:2b:1b:23:a9:12:
9c:40:bf:7b:b1:62:b5:3a:e9:14:b4:a5:5e:5f:c6:57:2d:51:
1c:f0:97:bc:93:5b:5b:39:bb:83:b9:dd:26:be:49:76:cb:7c:
d2:1c:d3:6a:77:77:f8:db:d5:2d:12:a2:41:9c:ec:bf:96:aa:
40:c7:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:23 2025 by rpki-client