Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/QQxplVbDtlHGZQZGCUKVxBGsXz4.roa
File: QQxplVbDtlHGZQZGCUKVxBGsXz4.roa (raw, json)
Hash identifier: 8Q57hqVBUClJYvvdabxldGMC1WcoYKBG90Z0i8MtziQ=
Subject key identifier: 41:0C:69:95:56:C3:B6:51:C6:65:06:46:09:42:95:C4:11:AC:5F:3E
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 018CC56ED55A8CD273B969546E2E5199E627
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/QQxplVbDtlHGZQZGCUKVxBGsXz4.roa
Signing time: Mon 01 Jan 2024 14:30:24 +0000
ROA not before: Mon 01 Jan 2024 14:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33387
IP address blocks: 93.113.130.0/24 maxlen: 24
93.113.44.0/24 maxlen: 24
94.176.109.0/24 maxlen: 24
94.177.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d5:5a:8c:d2:73:b9:69:54:6e:2e:51:99:e6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Jan 1 14:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=410c699556c3b651c6650646094295c411ac5f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:ae:0d:86:b0:ae:a0:5b:da:23:3f:d7:a9:
3e:74:3a:7c:cb:75:6d:5c:ac:94:a0:da:8d:8c:04:
25:7d:5a:ab:85:61:c9:fc:16:7e:45:1b:c2:f5:90:
da:6c:c0:e3:e7:56:85:a9:35:b6:2b:7e:3a:54:d5:
9a:78:ce:ae:ac:c7:d8:40:1f:18:37:ad:3d:9c:1b:
39:12:21:2a:f5:9f:34:f8:fd:03:c2:64:2e:71:18:
8c:da:9a:71:75:52:67:a5:f6:2b:bb:5f:11:ce:a4:
86:49:41:0c:a1:5c:7b:74:e6:d7:64:d7:02:7c:cb:
3d:6e:a9:c5:d0:06:92:fd:b5:b8:05:7c:64:cd:89:
48:7b:17:82:88:a5:09:c4:4e:f3:31:59:14:bc:41:
09:de:bd:e7:4a:d5:d3:fe:88:03:17:b7:ff:1b:7a:
e1:04:bb:1d:f1:9a:a8:54:6c:8c:ed:0c:f4:3f:a6:
5b:ce:92:fc:38:65:33:8e:72:8d:00:8d:8f:6f:fd:
60:2a:9f:1a:1e:8e:75:5e:e5:b6:44:48:55:c0:49:
cb:80:9d:3f:11:1e:66:d2:98:3b:4f:e4:c7:91:39:
1a:c8:9d:f8:d0:55:5e:f9:eb:e2:e1:45:79:a8:55:
5a:91:e2:22:db:34:ae:35:ac:a9:75:bf:47:68:22:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0C:69:95:56:C3:B6:51:C6:65:06:46:09:42:95:C4:11:AC:5F:3E
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/QQxplVbDtlHGZQZGCUKVxBGsXz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.44.0/24
93.113.130.0/24
94.176.109.0/24
94.177.67.0/24
Signature Algorithm: sha256WithRSAEncryption
86:34:0f:d7:5f:66:97:50:58:d8:6d:e3:c1:5e:3c:21:ef:a9:
6c:ee:f6:35:e9:83:99:a0:a3:c6:0b:cf:de:1b:85:f2:a6:8d:
d2:9a:31:63:55:c3:89:67:9f:02:e2:63:23:55:2f:1c:02:1b:
83:d5:17:51:64:7e:3e:5b:29:d5:f1:d6:65:0e:a1:e4:4d:94:
6a:41:bd:91:6d:87:bb:96:eb:c9:a5:18:19:5c:08:e6:e0:3e:
2b:0b:7c:23:e0:09:be:bc:2b:3c:b9:02:c8:00:57:d4:15:fe:
60:55:2c:2a:ea:0b:b9:1b:5d:cd:0f:25:be:8a:02:64:be:96:
ac:ac:af:09:f5:2e:fd:c3:af:85:3a:8c:bd:74:4c:41:7b:ff:
e2:6c:5b:04:71:c7:a4:ad:8a:ee:bb:f1:ba:85:a8:21:59:a0:
d8:9a:76:6a:97:1c:b3:d4:2d:f3:87:ab:d1:3d:39:26:43:0a:
f5:33:e6:65:ad:f3:27:b5:b9:9b:86:8b:b9:fa:e9:e8:44:2a:
bc:c1:a9:71:8d:d5:63:a9:b0:d6:64:90:40:90:c2:53:b6:91:
e3:e7:e2:1d:c8:00:d9:01:11:01:72:97:51:a7:c8:b4:30:c6:
5e:1d:aa:8e:4f:1e:e3:64:68:67:53:46:4c:4d:cc:79:09:4a:
31:47:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:50 2025 by rpki-client