Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/CQX8S2meSU1BmR-DPi1s6EiqlhM.roa
File: CQX8S2meSU1BmR-DPi1s6EiqlhM.roa (raw, json)
Hash identifier: ddtwBgCOPpM968GD4P4QsewU5N5ym/CRJL2YFxpjaRA=
Subject key identifier: 09:05:FC:4B:69:9E:49:4D:41:99:1F:83:3E:2D:6C:E8:48:AA:96:13
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194734F0723E2FA4DCA6441DE2262B8A284
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/CQX8S2meSU1BmR-DPi1s6EiqlhM.roa
Signing time: Fri 17 Jan 2025 08:09:06 +0000
ROA not before: Fri 17 Jan 2025 08:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 62.171.228.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 17:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:4f:07:23:e2:fa:4d:ca:64:41:de:22:62:b8:a2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 17 08:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0905fc4b699e494d41991f833e2d6ce848aa9613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:21:47:a0:cf:9d:45:3e:a3:28:81:74:77:
72:78:e3:ce:bb:91:b6:46:6a:11:99:6e:ed:02:30:
57:84:43:10:9e:19:33:c9:ab:16:1d:a6:88:07:ed:
a7:cf:d8:3e:09:1c:be:11:d7:6b:b5:c4:70:a0:0d:
5b:dc:2d:9e:c7:53:48:35:ae:19:2b:be:90:13:62:
72:80:45:58:17:67:81:ac:47:e6:70:3a:35:2e:0c:
b0:51:56:4f:9a:7e:ab:1d:92:d2:b9:89:75:3a:21:
ca:8b:e3:bb:a7:98:12:a9:41:1e:07:5c:10:3b:73:
a2:0e:c2:01:ab:e5:15:2b:85:34:53:d5:19:2d:c8:
5f:be:e8:0f:c2:ee:c4:55:18:24:db:fc:1a:9e:1c:
43:11:a9:62:94:cd:f2:e3:62:15:bc:22:73:0e:3f:
d0:6a:84:4c:57:63:d6:62:04:d1:6c:c3:dc:09:f8:
2d:7d:ec:2e:6f:09:fd:e6:ad:ea:a4:d2:53:70:12:
9b:92:6c:71:27:d4:f7:2b:18:f8:2b:f8:1f:fa:6b:
6f:21:f0:45:f2:39:17:fd:0e:c8:c2:05:8c:05:dc:
31:00:6b:f6:9e:80:0c:3b:99:b4:7a:d8:d3:88:7c:
fa:07:f4:3b:e3:83:0a:8b:20:04:97:ad:89:d6:b8:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:05:FC:4B:69:9E:49:4D:41:99:1F:83:3E:2D:6C:E8:48:AA:96:13
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/CQX8S2meSU1BmR-DPi1s6EiqlhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.228.0/24
217.180.13.0-217.180.14.255
217.180.20.0/24
217.180.38.0/24
217.180.45.0/24
217.180.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8c:8b:5e:9c:5f:92:e4:e9:76:14:12:40:65:6e:6e:13:de:
0e:fd:02:3d:2a:28:f6:32:94:61:57:bd:fa:c2:95:f1:4d:8b:
e4:86:35:41:c1:e9:bc:90:df:99:fe:24:68:4c:4e:1c:2d:f5:
6b:e5:78:47:f7:4f:3c:5f:0d:b9:ef:75:08:7e:50:37:dc:0d:
e9:58:d7:4f:f7:06:c4:e0:f0:00:f3:2a:ce:e7:66:f4:af:cc:
6f:1c:03:78:d9:ab:31:9f:91:14:a2:ec:c5:4e:1d:b7:91:59:
cc:f9:13:b7:1f:98:8a:08:40:06:7b:ac:d5:e4:ed:65:b9:32:
6c:15:a2:ca:59:fe:fa:47:69:85:38:6c:da:30:99:ae:d3:21:
81:fa:ea:e7:9d:23:c9:ea:c4:27:73:a9:2f:b1:f4:b4:3f:6d:
0e:24:8c:4a:26:06:d4:81:42:b8:63:c3:72:87:e5:65:4b:6e:
66:60:2e:f1:77:75:bb:0d:8c:1a:7c:50:b4:3c:85:53:77:fb:
c1:9a:16:64:27:b1:8c:27:b5:c0:31:83:b0:71:ba:85:d1:8f:
df:99:56:c7:80:2d:34:c5:62:f5:18:1f:91:54:95:f6:87:b9:
61:e8:7a:a4:13:9e:e7:38:45:54:05:9b:e9:56:f0:bf:48:16:
08:ba:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:46 2025 by rpki-client