Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/QHM31CT1SDn7mq6V4rB1XiaC1hs.roa
File: QHM31CT1SDn7mq6V4rB1XiaC1hs.roa (raw, json)
Hash identifier: TS0UhhA5IIbntI0kyNCnHiIB2ifEmHOxEjr4O3tk/pA=
Subject key identifier: 40:73:37:D4:24:F5:48:39:FB:9A:AE:95:E2:B0:75:5E:26:82:D6:1B
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 019469CE78A96874118B295823F6EFEC593B
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/QHM31CT1SDn7mq6V4rB1XiaC1hs.roa
Signing time: Wed 15 Jan 2025 11:52:06 +0000
ROA not before: Wed 15 Jan 2025 11:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 92.53.160.0/20 maxlen: 24
92.53.184.0/22 maxlen: 24
92.53.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 10:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:ce:78:a9:68:74:11:8b:29:58:23:f6:ef:ec:59:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 15 11:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=407337d424f54839fb9aae95e2b0755e2682d61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:2d:aa:4f:8d:46:db:c5:c3:a0:03:a5:24:
a6:a1:41:c6:87:16:34:d6:ad:30:b8:34:fa:59:8d:
7e:66:d6:c2:00:80:2a:e7:ac:b8:af:bf:06:2f:11:
45:43:8e:af:4a:16:1a:98:24:82:e4:4f:5d:66:65:
af:b2:67:3a:40:0d:3b:15:6f:e4:d0:0c:0b:03:1c:
e1:1d:0a:d1:1e:f7:29:e9:c2:af:7e:7e:00:d9:08:
40:f6:67:84:36:58:dd:13:57:b3:49:d9:9b:1c:b1:
41:66:21:f5:86:8b:e3:39:64:02:fe:88:7c:7c:7f:
53:38:f8:f3:22:80:b1:f2:b8:04:9b:0c:5c:32:f1:
27:59:32:87:73:10:6b:59:58:fd:21:53:78:36:73:
48:de:8c:ef:f4:b9:d6:1e:67:46:1e:28:d5:ca:d5:
52:1c:72:27:1f:5b:79:ad:1e:f7:f7:ea:7b:97:e4:
a6:d4:49:5e:4c:8c:d4:5d:cb:80:f7:47:f4:a6:8d:
4f:1a:ea:ed:0c:a6:c6:61:40:1b:6c:66:29:f7:93:
c1:f8:1a:91:bd:5d:d9:0f:90:0c:07:e8:cd:fb:f1:
68:d1:98:9a:ef:33:7c:35:b3:d1:0e:fb:bb:4e:21:
4d:b8:64:1c:05:c7:e4:97:32:1a:bd:89:07:68:81:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:73:37:D4:24:F5:48:39:FB:9A:AE:95:E2:B0:75:5E:26:82:D6:1B
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/QHM31CT1SDn7mq6V4rB1XiaC1hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/20
92.53.184.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:6e:98:28:a1:87:09:70:01:b6:62:d7:56:fa:62:b2:77:05:
98:16:ed:7e:8f:4c:7d:12:f2:cd:16:21:b3:ef:94:ad:ba:0c:
fb:c8:53:d2:cf:06:17:66:9e:dd:12:0c:41:fa:38:2a:86:cc:
53:be:96:14:7b:a8:4f:9a:31:13:46:8c:53:53:91:01:cf:90:
10:8a:a4:06:c8:9c:45:76:98:4c:0e:0b:e2:f1:97:41:f4:75:
73:62:7e:ef:c6:8b:2e:2c:9c:28:9f:70:d6:6a:1c:e2:cc:ba:
0f:88:30:ca:e9:1b:cc:d8:52:10:d9:16:a1:bd:f1:42:1f:bd:
55:85:67:b6:a8:f4:a2:51:fa:f6:32:53:97:5b:a8:47:ad:ec:
dd:20:0d:42:fd:a7:6b:25:d7:cf:d1:09:2f:65:f4:9e:55:12:
a1:8a:7b:6b:3f:77:6e:65:7e:eb:be:77:30:03:9b:b7:96:ba:
c9:e3:c7:b9:6f:f5:ca:da:4a:ef:79:55:df:92:b0:5e:89:63:
04:47:27:da:b6:88:47:34:11:f4:73:b3:c9:a7:8f:00:3e:7f:
b3:bd:01:a9:89:65:03:6a:52:35:b1:38:66:58:b3:f0:ed:06:
36:c9:93:22:62:ad:75:df:9e:e8:b2:15:8f:60:2a:a2:60:00:
a1:68:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:31:48 2025 by rpki-client