Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/Qnq23wv6DoJv5KugvXMWtp_LhPw.roa
File: Qnq23wv6DoJv5KugvXMWtp_LhPw.roa (raw, json)
Hash identifier: SGnJmLHbkVgR4u5UetoIwP5TS7QIa2iqO6EY0luFmMw=
Subject key identifier: 42:7A:B6:DF:0B:FA:0E:82:6F:E4:AB:A0:BD:73:16:B6:9F:CB:84:FC
Certificate issuer: /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial: 018CC9BBA8CA5D30FFDBDCFB9E478D22B38D
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/Qnq23wv6DoJv5KugvXMWtp_LhPw.roa
Signing time: Tue 02 Jan 2024 10:32:47 +0000
ROA not before: Tue 02 Jan 2024 10:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39434
IP address blocks: 81.24.83.0/24 maxlen: 24
81.24.81.0/24 maxlen: 24
81.24.82.0/24 maxlen: 24
81.24.80.0/24 maxlen: 24
81.24.80.0/21 maxlen: 21
81.24.84.0/24 maxlen: 24
81.24.86.0/24 maxlen: 24
81.24.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:a8:ca:5d:30:ff:db:dc:fb:9e:47:8d:22:b3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Validity
Not Before: Jan 2 10:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=427ab6df0bfa0e826fe4aba0bd7316b69fcb84fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:4e:92:23:f7:10:f4:74:f4:1f:62:1d:55:
bb:c3:86:ab:5f:ec:5f:46:17:db:3b:86:40:c6:5b:
ee:b5:71:dc:f8:05:e7:e4:f1:1e:1e:36:bd:22:7e:
51:c6:a7:b4:0e:99:26:64:66:ff:bc:12:6a:13:9c:
49:76:bf:78:9b:2c:42:06:41:4d:9b:60:b6:a4:6e:
76:c2:40:fc:c8:03:93:5d:46:dc:11:52:22:da:5b:
91:d4:68:ca:cc:4f:1d:55:38:1b:66:82:49:f7:74:
3f:85:f7:8c:50:de:95:7e:0b:59:26:66:2a:53:46:
08:8a:ca:6a:5d:83:d3:22:13:08:d2:3a:b1:5a:b9:
f1:69:f9:fc:6e:67:4b:08:dc:65:e7:28:50:d0:f8:
3e:4a:52:97:86:e4:bf:06:fe:3f:16:fd:76:ef:9b:
2d:f7:64:a0:30:b5:61:5c:1b:dc:77:59:3c:e7:e4:
6c:51:69:f5:33:df:28:43:4e:36:2b:81:21:cd:a0:
df:0e:12:95:05:29:9a:50:d5:0e:8e:20:a4:e0:9f:
25:d4:ab:d5:84:77:eb:a3:72:57:ff:01:29:7e:fa:
b5:37:72:59:05:45:78:1d:d7:99:f5:0c:57:c4:e1:
87:80:66:a9:c9:f9:23:1d:dd:2d:5e:46:1d:8b:33:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7A:B6:DF:0B:FA:0E:82:6F:E4:AB:A0:BD:73:16:B6:9F:CB:84:FC
X509v3 Authority Key Identifier:
keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/Qnq23wv6DoJv5KugvXMWtp_LhPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.24.80.0/21
Signature Algorithm: sha256WithRSAEncryption
80:d3:68:59:4b:db:3b:f4:61:e3:52:16:6d:d6:b1:73:b1:ee:
54:67:71:56:9f:57:04:c1:c2:7a:46:b5:1a:44:1e:da:f3:b5:
db:25:fa:98:fd:a3:c4:e0:33:f1:8e:37:76:eb:24:11:2f:ca:
cc:42:61:9c:32:f2:16:ab:13:54:f2:aa:5f:7e:79:fb:bf:eb:
d3:17:1c:e2:5e:b0:fe:f1:1b:65:0e:88:a6:6c:b1:4e:c8:74:
09:a8:6d:f1:21:74:fa:c2:2e:87:84:2b:7f:9a:a5:a5:32:b9:
35:95:8d:f9:0f:de:28:1c:27:4a:5b:23:23:63:d6:ed:4e:bd:
b3:e1:fb:0a:29:34:9d:08:cd:bf:cf:c3:c0:a2:f6:e3:66:4a:
31:a4:0c:08:99:d1:d7:5f:1e:71:17:42:af:b5:90:c8:dd:aa:
5b:2b:c1:49:56:e5:2d:41:b6:04:20:c9:b2:10:08:de:2e:d9:
4c:70:e9:74:33:fe:da:b2:43:1a:c9:f2:88:f6:3a:98:b3:81:
fd:98:fc:24:a8:a6:ba:9c:30:13:53:e2:6f:92:27:ab:6c:fa:
80:06:50:b5:8f:f0:76:9c:76:a2:c0:a4:29:51:40:f8:90:8d:
8e:ce:d2:21:52:06:02:0a:8e:b5:74:19:96:9a:de:93:c0:c3:
c1:3c:df:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:38:54 2025 by rpki-client