Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/QQGqBRV9PZ6qMhsuRowAmYTp-cc.roa
File: QQGqBRV9PZ6qMhsuRowAmYTp-cc.roa (raw, json)
Hash identifier: Q2gFcDz+84Udkc2RoIo/Aq8fv+17jYbjYu7qylzmB+c=
Subject key identifier: 41:01:AA:05:15:7D:3D:9E:AA:32:1B:2E:46:8C:00:99:84:E9:F9:C7
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 01921F54DEF6EA6C74FDBE3579CC22AA060E
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/QQGqBRV9PZ6qMhsuRowAmYTp-cc.roa
Signing time: Mon 23 Sep 2024 14:41:48 +0000
ROA not before: Mon 23 Sep 2024 14:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 194.150.220.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 17:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1f:54:de:f6:ea:6c:74:fd:be:35:79:cc:22:aa:06:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Sep 23 14:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4101aa05157d3d9eaa321b2e468c009984e9f9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:f1:9d:de:38:52:c6:88:a1:02:15:83:ea:
5f:ab:74:9b:a2:ad:d8:85:1f:0c:12:36:20:66:8c:
52:ab:9a:2c:d5:49:ce:3b:74:29:b1:db:bd:ba:50:
0b:60:ce:47:ad:9c:65:23:44:60:43:63:9d:00:07:
fb:f6:ca:8b:5e:bf:0b:03:53:e6:10:7a:ef:5e:e1:
11:7b:c7:7b:6e:40:a4:c0:fa:ee:58:a9:79:47:77:
30:1d:33:48:fd:4e:65:94:4e:66:8f:ab:4d:a7:ab:
4c:66:2b:3a:61:c2:8e:9c:2a:e4:02:04:71:d1:ca:
95:45:c8:b7:37:cc:48:50:94:67:2e:ff:c8:d9:7f:
13:7e:4d:16:d8:4c:d4:8d:7e:ef:28:20:38:50:57:
36:18:0d:5e:6f:25:96:25:01:91:83:a2:da:45:22:
5e:a1:06:e9:e0:85:ac:35:fa:41:24:38:e7:03:d4:
b6:60:65:1d:12:a4:85:a1:25:07:5c:70:c4:59:90:
dc:5c:2c:89:1a:ea:6d:72:d7:30:35:6f:05:98:c1:
59:6e:c9:24:79:9b:9e:d3:91:58:75:19:f5:1e:ce:
22:7a:a8:5f:c6:9d:9a:9b:c8:75:0d:ce:b2:8b:39:
99:67:07:7c:9f:5b:c3:ca:4c:fb:d9:db:3e:fc:04:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:01:AA:05:15:7D:3D:9E:AA:32:1B:2E:46:8C:00:99:84:E9:F9:C7
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/QQGqBRV9PZ6qMhsuRowAmYTp-cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.220.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:41:1b:c1:0b:c0:19:c9:a1:cb:b7:df:27:b7:ca:99:8d:f7:
c2:a6:85:ed:14:c3:a7:aa:8a:3c:d9:ae:6d:0f:6d:68:66:fb:
9f:2b:0f:62:a9:dc:d2:d8:89:87:f2:47:c5:e8:bc:dc:b4:83:
9f:0a:02:92:f2:3b:95:64:0a:81:17:c6:1f:0f:0b:1e:87:c7:
8f:c4:1c:69:4c:ca:dd:e2:29:18:ea:db:4e:2d:a7:07:2e:0a:
92:72:1a:fd:8f:c5:82:b5:ec:88:22:83:ef:57:a1:25:4c:01:
2d:05:d3:b6:41:1b:98:f2:ca:ea:5a:c4:b6:98:04:0e:b6:d3:
0e:23:8a:72:04:eb:f6:40:78:e5:ea:ea:68:1c:3f:d4:05:4c:
34:00:8f:70:a8:7b:d2:0d:4d:c2:9b:df:b4:88:04:fd:26:3f:
4d:de:b5:97:eb:d0:96:14:f7:09:30:b8:a0:b5:05:e9:28:b3:
40:cf:5a:a7:49:01:3f:34:4f:f2:f4:1a:db:8e:85:8e:94:3b:
aa:1a:e0:e5:c8:b6:7a:dc:50:89:f6:e6:3e:0a:a1:04:52:17:
e7:a7:65:51:f3:b4:12:b7:f3:a2:cb:34:df:8e:26:8e:1e:31:
08:1f:6b:17:13:f5:7e:cc:ee:4d:8b:52:3b:56:0c:d6:15:0c:
a3:84:96:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:33 2025 by rpki-client