Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/qgeRMUl5m6W98pxw4dgZKejnNZ0.roa
File: qgeRMUl5m6W98pxw4dgZKejnNZ0.roa (raw, json)
Hash identifier: wqarHFyuEknZwGXNH/ThJNY7/N6FZS4KNCu5einF/Wc=
Subject key identifier: AA:07:91:31:49:79:9B:A5:BD:F2:9C:70:E1:D8:19:29:E8:E7:35:9D
Certificate issuer: /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Certificate serial: 018CCA96E31E44A9F248C292592FD7930D33
Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/qgeRMUl5m6W98pxw4dgZKejnNZ0.roa
Signing time: Tue 02 Jan 2024 14:32:15 +0000
ROA not before: Tue 02 Jan 2024 14:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216162
IP address blocks: 69.7.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:e3:1e:44:a9:f2:48:c2:92:59:2f:d7:93:0d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Validity
Not Before: Jan 2 14:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa07913149799ba5bdf29c70e1d81929e8e7359d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:43:5b:2e:95:8f:41:a5:eb:89:43:34:ce:
26:07:46:99:99:2d:81:30:2a:f5:9b:4f:52:d0:cc:
9e:9b:b1:3e:6c:f8:45:14:41:fe:7f:be:64:b6:e6:
57:64:b4:4e:74:92:01:e7:62:1c:0c:52:5f:16:00:
9b:b3:2a:2c:69:a3:9c:d4:6a:69:4b:2f:17:05:75:
f7:2c:6d:3f:b1:3d:ca:ad:fc:56:1e:6f:3e:99:cd:
48:fd:43:10:13:85:0a:79:8b:91:45:ef:85:56:03:
65:0b:4a:b9:49:76:e3:ee:2e:97:92:96:de:cb:f7:
a8:12:ff:f0:95:c9:d8:e9:ef:c5:4c:d8:18:21:db:
b2:d8:fd:58:bb:65:a8:2c:a8:aa:c7:72:ac:23:4d:
69:b6:6b:c7:34:89:cc:6c:84:dc:01:fd:a1:c1:3f:
a1:11:f3:70:dd:d2:cd:fa:49:6d:f8:53:ac:f0:d3:
86:18:69:01:d5:b7:81:24:1b:75:60:9f:8a:1e:c0:
6b:ae:8a:0b:36:21:82:b2:9c:b3:55:37:35:86:57:
81:2d:b8:3e:8d:3d:4f:6a:3c:3e:00:54:8a:9c:75:
4b:67:59:64:32:b8:26:76:b3:60:48:24:92:d9:86:
89:25:a5:4a:12:58:0e:ca:06:1e:1f:e0:7c:0f:0e:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:07:91:31:49:79:9B:A5:BD:F2:9C:70:E1:D8:19:29:E8:E7:35:9D
X509v3 Authority Key Identifier:
keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/qgeRMUl5m6W98pxw4dgZKejnNZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.7.78.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ab:1e:7d:ee:c6:9a:81:e8:41:36:e2:37:99:44:57:7d:66:
b4:66:53:5a:30:9d:ea:61:d0:70:ca:24:5f:58:5d:f6:d7:b9:
0b:27:fa:b2:79:47:1a:47:40:a1:fc:f3:48:b8:e8:07:c9:93:
bd:83:ad:c8:3a:29:6d:1b:7b:7e:ab:a2:07:32:e0:d7:88:bf:
28:c5:5e:37:83:89:30:89:9d:a9:18:ad:13:4f:d5:0e:8a:b0:
bf:e6:bd:f9:f4:af:76:d1:3d:53:bb:7b:e2:7e:f1:79:2f:b6:
5b:37:b7:d2:08:d7:9c:e1:d1:c9:3f:f5:84:d6:e4:99:5e:26:
84:6b:7e:58:6f:21:85:66:09:d2:7b:c4:0f:2a:05:98:9c:48:
b8:36:50:20:de:c1:e1:cd:50:c5:bd:41:b3:7e:ae:c5:de:01:
fd:9b:77:ec:5d:27:43:0d:95:23:ad:6e:86:1e:3d:1f:62:86:
a8:04:e2:c1:77:1a:37:9d:55:72:86:cd:04:f8:b3:db:49:60:
a1:89:a8:a6:2d:d6:d0:4b:ad:8c:2b:02:9b:f8:d9:63:49:c6:
95:43:99:8d:76:de:c1:16:bf:c3:78:a5:27:05:3b:68:2d:e9:
e4:5b:08:27:3d:48:a7:4d:0f:3c:ab:5a:33:5f:f6:48:3b:21:
9c:40:59:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:02 2025 by rpki-client