Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QgUM-Q77JOiE79WCmUH6vRITUbs.roa
File: QgUM-Q77JOiE79WCmUH6vRITUbs.roa (raw, json)
Hash identifier: r5Odj8zf++7c7RtraYpN6cSafMf0v4PJ3EymcFgkfb0=
Subject key identifier: 42:05:0C:F9:0E:FB:24:E8:84:EF:D5:82:99:41:FA:BD:12:13:51:BB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193965B0FBC26E240C167A3B1A01C08A141
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QgUM-Q77JOiE79WCmUH6vRITUbs.roa
Signing time: Thu 05 Dec 2024 10:26:10 +0000
ROA not before: Thu 05 Dec 2024 10:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214927
IP address blocks: 45.137.81.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Dec 2024 16:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:5b:0f:bc:26:e2:40:c1:67:a3:b1:a0:1c:08:a1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 5 10:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42050cf90efb24e884efd5829941fabd121351bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:01:1b:d4:f4:56:91:0c:64:12:d4:7e:22:61:
c0:b1:32:44:53:41:ef:1b:e2:ca:92:55:bf:23:a9:
66:d5:54:37:29:24:da:23:0c:5e:bd:50:9d:91:b2:
7c:bf:f0:a9:3f:d1:1d:72:f1:75:a2:e1:fd:86:4a:
6a:12:5e:0b:3b:cc:29:40:5f:84:85:7a:99:21:70:
09:5b:54:e0:0e:f8:65:4d:cf:48:2b:43:7b:bf:67:
07:d9:1e:6d:87:67:ad:7c:f1:f3:b6:88:ba:e5:f3:
a4:b8:10:dd:84:07:e5:c0:ce:d9:5b:56:f2:98:cd:
3d:a8:2e:31:95:4e:0b:0a:00:c9:ab:05:9c:e1:15:
40:19:e3:c4:f1:a2:ea:82:a4:97:93:85:90:70:a4:
db:bc:10:c2:6b:78:6b:47:cc:b8:a6:06:3f:32:ba:
86:aa:08:a3:6f:90:d0:a0:85:57:8c:69:c7:3d:13:
7d:2d:a4:98:54:9e:da:58:8e:7f:16:c0:a9:92:49:
50:b5:b5:7d:d3:71:1d:34:80:5a:90:e1:3b:56:d1:
56:ca:df:5e:4d:b1:00:51:e7:11:d2:43:ec:c3:52:
87:ac:d8:b1:27:66:2c:4c:97:85:93:7a:fa:ca:a1:
2f:f9:f2:9b:dc:ee:c4:8c:66:e5:4e:e3:43:c4:e6:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:05:0C:F9:0E:FB:24:E8:84:EF:D5:82:99:41:FA:BD:12:13:51:BB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QgUM-Q77JOiE79WCmUH6vRITUbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.81.0/24
45.141.177.0/24
85.209.128.0/24
Signature Algorithm: sha256WithRSAEncryption
28:04:73:c1:78:f7:90:ad:e5:b2:9e:60:a2:82:0c:80:4c:7f:
98:9b:30:18:33:d5:f5:18:b3:4d:6c:12:d6:94:74:9d:5c:d1:
54:fd:03:c2:1a:4e:60:88:8c:92:09:8c:42:9d:5f:d7:91:9c:
31:24:fe:b1:c3:07:c7:c6:26:f8:ae:de:ee:27:7d:a3:43:8e:
59:1e:a2:49:fb:a2:90:45:80:fd:d5:af:a1:20:7f:e1:02:48:
b9:8d:4a:52:f8:5d:d3:4b:90:85:a9:72:58:4a:5d:47:06:02:
94:cb:7a:78:fd:cc:d9:dc:b4:48:93:15:72:ba:30:13:be:75:
88:77:5a:d2:5a:aa:7d:30:b3:36:61:2b:55:47:8c:f5:1f:f6:
da:e6:ab:a4:2d:9f:e7:74:d1:b9:5a:b5:42:4e:ab:ce:ff:0a:
2c:2b:18:57:e8:bb:ce:06:f1:77:ca:b9:4c:05:f5:e8:ef:34:
f4:97:73:5b:73:e9:51:b4:7b:7e:5b:bf:2f:ee:f5:25:79:74:
44:8e:18:20:3f:56:9c:69:9f:f1:33:4a:e6:0d:5d:32:85:77:
8d:68:18:33:8e:89:de:a4:19:ae:40:ef:51:89:2e:79:3e:09:
72:ba:19:06:5e:0d:30:8c:30:34:22:26:f8:30:16:bd:52:6c:
a4:a3:c8:ef
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZOWWw+8JuJAwWejsaAcCKFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQxMjA1MTAyNjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjA1MGNmOTBlZmIyNGU4ODRlZmQ1ODI5OTQxZmFiZDEyMTM1MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AEb1PRWkQxkEtR+ImHAsTJEU0Hv
G+LKklW/I6lm1VQ3KSTaIwxevVCdkbJ8v/CpP9EdcvF1ouH9hkpqEl4LO8wpQF+E
hXqZIXAJW1TgDvhlTc9IK0N7v2cH2R5th2etfPHztoi65fOkuBDdhAflwM7ZW1by
mM09qC4xlU4LCgDJqwWc4RVAGePE8aLqgqSXk4WQcKTbvBDCa3hrR8y4pgY/MrqG
qgijb5DQoIVXjGnHPRN9LaSYVJ7aWI5/FsCpkklQtbV903EdNIBakOE7VtFWyt9e
TbEAUecR0kPsw1KHrNixJ2YsTJeFk3r6yqEv+fKb3O7EjGblTuNDxOYdpQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEIFDPkO+yTohO/VgplB+r0SE1G7MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvUWdVTS1RNzdKT2lFNzlXQ21VSDZ2UklUVWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYlRAwQA
LY2xAwQAVdGAMA0GCSqGSIb3DQEBCwUAA4IBAQAoBHPBePeQreWynmCiggyATH+Y
mzAYM9X1GLNNbBLWlHSdXNFU/QPCGk5giIySCYxCnV/XkZwxJP6xwwfHxib4rt7u
J32jQ45ZHqJJ+6KQRYD91a+hIH/hAki5jUpS+F3TS5CFqXJYSl1HBgKUy3p4/czZ
3LRIkxVyujATvnWId1rSWqp9MLM2YStVR4z1H/ba5qukLZ/ndNG5WrVCTqvO/wos
KxhX6LvOBvF3yrlMBfXo7zT0l3Nbc+lRtHt+W78v7vUleXREjhggP1acaZ/xM0rm
DV0yhXeNaBgzjonepBmuQO9RiS55PglyuhkGXg0wjDA0Iib4MBa9Umyko8jv
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:03 2025 by rpki-client