Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/QuaGRP6hjegGxrEifz7JyKFSUwc.roa
File: QuaGRP6hjegGxrEifz7JyKFSUwc.roa (raw, json)
Hash identifier: Kma1kLh1hMAMt38D1q5P50DS0aP8v17GGizvtbNKvu4=
Subject key identifier: 42:E6:86:44:FE:A1:8D:E8:06:C6:B1:22:7F:3E:C9:C8:A1:52:53:07
Certificate issuer: /CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Certificate serial: 018CC9BB0BFD21F223F03000189C39AD46A3
Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/QuaGRP6hjegGxrEifz7JyKFSUwc.roa
Signing time: Tue 02 Jan 2024 10:32:07 +0000
ROA not before: Tue 02 Jan 2024 10:32:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206827
IP address blocks: 194.31.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:0b:fd:21:f2:23:f0:30:00:18:9c:39:ad:46:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Validity
Not Before: Jan 2 10:32:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42e68644fea18de806c6b1227f3ec9c8a1525307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:64:ff:1b:ac:65:5a:3e:27:0a:eb:ed:5f:
21:24:c1:2f:98:48:96:66:4f:e3:b5:2a:74:da:67:
c8:71:98:db:01:7e:67:0a:ba:c0:73:ef:2a:9c:7e:
20:fb:fb:60:d0:62:6c:6d:ff:4b:c4:7d:d1:02:18:
1d:98:0c:57:a2:50:a7:d1:a7:e7:d5:94:38:ec:e7:
31:c2:ed:a1:66:53:fc:bd:b0:5b:00:57:94:3b:ff:
73:c9:a7:28:e0:f8:87:b3:13:9e:b5:c7:fb:2a:8b:
78:0f:6f:b6:8c:47:cb:7f:5a:37:15:c7:e2:71:d8:
c9:5f:71:e4:5e:a1:ab:77:af:f6:5a:ae:e6:8b:da:
c9:3e:56:2e:33:35:51:05:0f:4f:44:ea:78:fc:ae:
9b:b3:fe:e5:1a:fa:13:ca:39:e6:95:ef:17:d4:70:
f5:91:a8:50:5a:3e:a7:13:79:53:04:9c:2a:b9:e5:
c2:a8:15:1b:d7:6d:6f:c3:aa:bc:af:7a:a8:e7:86:
2e:57:56:f1:33:c2:84:5e:7a:82:9a:22:d4:e0:b1:
4e:18:8e:8e:38:66:c9:73:a0:ec:16:51:f4:3e:f3:
75:a7:63:87:1d:10:2e:3c:e1:4b:2e:8e:9d:4c:02:
a2:1e:92:17:ee:87:57:1d:ee:69:36:e6:15:2f:a5:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:86:44:FE:A1:8D:E8:06:C6:B1:22:7F:3E:C9:C8:A1:52:53:07
X509v3 Authority Key Identifier:
keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/QuaGRP6hjegGxrEifz7JyKFSUwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.66.0/24
Signature Algorithm: sha256WithRSAEncryption
48:3e:ff:34:b5:db:2a:e0:b7:9e:90:ea:ed:1b:4c:e0:9f:63:
c9:8e:16:ac:65:3b:9a:ce:99:53:34:ad:e8:c9:d5:a1:38:e0:
ea:aa:25:b4:54:e0:a8:72:64:0e:e8:6d:e9:4b:4c:08:c4:50:
2c:e0:30:88:0f:eb:14:58:ae:22:f5:d8:fb:94:d9:66:f4:01:
ec:8b:1c:45:31:fc:0b:95:90:c9:e1:e5:1a:b8:39:56:a6:86:
e3:6a:ed:97:27:6d:51:42:6d:49:84:ff:05:80:d7:56:fb:b6:
6c:79:37:92:39:1a:ac:13:bc:22:5c:cc:ab:4f:95:86:20:8e:
f0:d7:a3:4a:08:5d:e1:76:ee:8c:0a:da:10:55:1c:e7:1a:95:
49:7f:63:1c:bb:9e:13:80:73:3e:45:fd:e1:9c:2a:aa:f4:70:
09:f9:57:2f:25:70:cc:23:70:60:3c:f0:05:13:84:98:56:c4:
c5:76:9f:a1:86:ef:3b:4e:75:63:21:fd:84:12:05:d0:59:85:
00:14:90:d8:ec:39:3b:57:83:89:79:bd:f2:bc:10:3c:0d:b3:
f7:1c:e0:cc:89:5c:70:cd:1f:d4:03:68:45:04:1e:b3:cd:4a:
f0:72:44:ae:54:3c:19:e5:ca:44:53:1a:78:7b:92:14:11:a2:
89:a6:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:11 2025 by rpki-client