Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/QC3mRZCahyrgZ_X9YsyMlK8bJs8.roa
File: QC3mRZCahyrgZ_X9YsyMlK8bJs8.roa (raw, json)
Hash identifier: 9xbn2dbnLM7Wx/fk62qYYFfbFoXkzIfaG0hPjUdKdEA=
Subject key identifier: 40:2D:E6:45:90:9A:87:2A:E0:67:F5:FD:62:CC:8C:94:AF:1B:26:CF
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 01942625CCA3C1C4D3B753494E4412173DCB
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/QC3mRZCahyrgZ_X9YsyMlK8bJs8.roa
Signing time: Thu 02 Jan 2025 08:33:18 +0000
ROA not before: Thu 02 Jan 2025 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41327
IP address blocks: 5.183.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:25:cc:a3:c1:c4:d3:b7:53:49:4e:44:12:17:3d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jan 2 08:33:18 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=402de645909a872ae067f5fd62cc8c94af1b26cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:9c:b0:ba:39:15:80:3b:68:1c:61:23:b9:
90:6a:98:a8:48:a4:6a:48:8f:eb:46:0a:d5:f8:9e:
dc:69:5f:b2:ef:b7:95:1d:79:c6:74:6b:ef:89:f9:
79:9e:e9:95:0f:70:a8:a0:9d:fa:70:87:2b:a3:c3:
cb:a1:4b:e5:e7:15:46:fd:27:a1:20:3d:02:80:6e:
d3:cc:77:e8:35:5c:0e:73:4e:3c:61:08:c2:ce:cf:
29:1b:e4:0f:df:54:22:5b:db:84:ae:bd:5a:cd:f8:
a8:38:8c:16:d7:54:61:cd:84:38:2e:f9:41:6d:9f:
0d:eb:ef:13:c2:b6:76:64:da:8c:ec:f8:ee:74:70:
c1:b8:2c:6e:77:4c:0d:17:2f:be:98:18:06:97:bc:
56:bc:3e:06:83:ad:0e:d9:9d:e6:89:da:c0:2f:e9:
9a:49:27:6f:e8:cd:18:26:ce:42:f6:8a:db:b6:43:
a8:c8:1c:77:d4:e0:ca:4f:33:d0:a7:d3:2a:86:f3:
e7:b7:b8:45:cc:57:f8:ee:93:88:e7:89:ae:3f:0a:
b2:39:9f:c8:96:de:fe:58:94:50:a8:e4:33:95:aa:
5e:f5:5d:bd:ee:ac:4e:e7:e1:97:45:8a:ab:00:4b:
f3:27:30:e8:63:c6:b8:22:c3:32:e4:cb:3f:27:33:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2D:E6:45:90:9A:87:2A:E0:67:F5:FD:62:CC:8C:94:AF:1B:26:CF
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/QC3mRZCahyrgZ_X9YsyMlK8bJs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.110.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1e:65:8b:c0:5e:c9:09:05:99:5d:e3:a7:97:db:65:aa:bd:
55:05:00:68:62:9d:f4:97:60:2d:d2:42:21:20:36:b0:ea:e0:
2e:3b:cb:74:32:05:1a:1c:88:21:0b:4d:15:00:ba:46:69:a3:
fe:3d:62:9b:e4:8e:2d:35:38:28:1a:f4:2f:ce:7d:58:c8:ea:
79:03:44:a4:99:40:68:39:89:41:42:c1:15:d9:de:38:3a:62:
6e:38:01:b3:da:10:a2:ba:a6:55:72:bb:55:21:45:a6:4a:da:
29:c0:0c:af:4c:19:3a:81:5d:62:78:f9:75:5f:af:de:d4:3c:
b6:2f:a0:84:9d:3c:5e:b7:33:03:81:ab:29:60:d8:1c:ea:aa:
26:72:42:23:e8:09:c3:3c:9b:50:6f:da:b0:83:ce:1a:de:85:
e4:e3:23:18:f0:1a:a9:7c:eb:d0:b7:37:f8:38:26:a5:56:d5:
a1:c4:64:09:95:77:62:e8:66:69:b3:30:2f:35:42:85:d5:5e:
db:dd:cb:e6:8c:42:a0:6f:cc:c8:a7:4e:0f:c9:79:39:12:80:
74:db:79:72:99:0b:9d:56:dd:31:5e:b3:6e:aa:c5:74:d8:a6:
c6:36:e8:5e:e8:a6:78:b8:56:5a:32:61:ce:fc:d1:fd:f6:ed:
09:78:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:59:13 2025 by rpki-client