Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/QkIeT914_89-eAy-VsbCtLVJbBc.roa
File: QkIeT914_89-eAy-VsbCtLVJbBc.roa (raw, json)
Hash identifier: WgF0JvfITtsTovtJXnaUra+oRtn84DU5WMKqE3r+U7s=
Subject key identifier: 42:42:1E:4F:DD:78:FF:CF:7E:78:0C:BE:56:C6:C2:B4:B5:49:6C:17
Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Certificate serial: 019428268F07C8D5BE55E6A100A85BFF5D5D
Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/QkIeT914_89-eAy-VsbCtLVJbBc.roa
Signing time: Thu 02 Jan 2025 17:53:23 +0000
ROA not before: Thu 02 Jan 2025 17:53:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216282
IP address blocks: 195.184.234.0/24 maxlen: 24
2a13:e1c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Jan 2025 08:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:8f:07:c8:d5:be:55:e6:a1:00:a8:5b:ff:5d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Validity
Not Before: Jan 2 17:53:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42421e4fdd78ffcf7e780cbe56c6c2b4b5496c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:fd:ed:6f:49:03:4c:22:ac:c8:c3:af:55:
7b:a8:c4:af:01:b4:8e:cc:03:75:72:aa:51:e8:94:
40:e9:61:08:37:c2:6b:98:df:8a:5b:24:63:4d:c3:
80:21:bc:95:23:68:e0:5e:12:e5:37:e9:45:44:67:
46:b0:16:f3:16:06:1c:41:d2:14:ca:02:72:a9:9d:
5e:b1:ae:93:53:d2:60:2f:bf:9e:3f:2b:d8:5c:eb:
c8:7a:e2:09:5b:c1:c7:8e:22:33:27:be:23:f4:e7:
5a:b9:09:47:b6:4a:61:a7:5d:a0:1f:63:11:54:10:
ff:cc:36:78:3a:7c:4d:6f:61:6e:00:4f:11:53:63:
c3:36:1d:3f:95:44:8a:15:7d:3d:c4:d5:fd:f8:91:
89:60:f4:a6:c6:ff:92:d6:74:a2:92:54:1c:56:fa:
2a:64:0c:6a:60:da:62:59:23:10:c3:13:0d:ec:42:
0a:3f:0b:10:e3:35:93:ae:59:6c:80:f9:02:30:0d:
76:f0:47:39:f7:41:21:c2:6c:98:ef:d5:e6:7c:53:
b1:78:90:b2:e8:c3:c1:55:08:92:2f:fb:a4:b5:38:
f5:ab:ab:1c:98:42:12:a6:50:91:8c:34:a7:15:d6:
39:45:0a:ec:06:f8:35:63:76:e1:b1:5d:9c:27:ef:
5a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:42:1E:4F:DD:78:FF:CF:7E:78:0C:BE:56:C6:C2:B4:B5:49:6C:17
X509v3 Authority Key Identifier:
keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/QkIeT914_89-eAy-VsbCtLVJbBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.234.0/24
IPv6:
2a13:e1c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:d4:b4:97:0d:4c:2a:0c:63:50:89:5d:61:c8:a2:ae:2e:8a:
1f:5d:95:33:61:b9:96:0f:d9:27:c9:36:0d:79:f5:bc:f9:be:
f6:e9:a4:dd:26:4e:7d:93:ea:5c:69:8e:56:1e:34:17:65:ef:
77:57:9a:43:1f:c2:35:ff:b7:56:2e:06:13:e1:5f:82:f1:98:
a8:9d:80:b9:76:95:a8:3c:61:fc:cc:76:49:f4:e1:68:37:a1:
71:18:25:e1:64:25:88:b4:61:99:bd:76:ab:f7:ab:12:bb:13:
00:1e:cc:67:a8:0c:55:fd:28:10:82:99:84:76:a1:02:40:83:
53:b4:ac:db:e9:7e:6d:38:d1:be:11:a5:96:91:87:43:7b:3c:
cb:9d:54:51:f2:fe:04:74:05:c4:02:2f:a9:e1:8c:16:8f:0d:
19:1e:1d:86:85:35:f2:06:91:9e:cd:71:6e:ca:53:81:8b:dc:
50:f7:22:66:a9:6d:a4:b0:bd:71:6f:99:2a:4c:1b:60:78:7b:
90:e4:7a:0a:9f:bf:88:1a:0a:00:c0:db:bd:f2:08:53:fc:d0:
56:a5:fb:ab:05:8a:ac:2b:9f:d0:a4:16:b3:71:36:68:0d:48:
51:5c:43:a4:56:76:fd:a8:af:a8:9b:81:bd:9a:c9:89:32:e3:
7f:52:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:30 2025 by rpki-client