Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QvKT4_NiDWd4OiT4PCbn2Rm_j7I.roa
File: QvKT4_NiDWd4OiT4PCbn2Rm_j7I.roa (raw, json)
Hash identifier: JXL2CBFNr15usJsCfMGqpLFhs8HzKYUM0JAfumMjHf0=
Subject key identifier: 42:F2:93:E3:F3:62:0D:67:78:3A:24:F8:3C:26:E7:D9:19:BF:8F:B2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F3B01AE54D0786F5732BA3E95617C66C3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QvKT4_NiDWd4OiT4PCbn2Rm_j7I.roa
Signing time: Thu 02 May 2024 20:31:56 +0000
ROA not before: Thu 02 May 2024 20:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 45.128.26.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
2a07:f300::/29 maxlen: 29
2a13:18c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 May 2024 08:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3b:01:ae:54:d0:78:6f:57:32:ba:3e:95:61:7c:66:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 2 20:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42f293e3f3620d67783a24f83c26e7d919bf8fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:05:38:7f:7d:13:12:7d:22:a2:44:e6:ae:
65:d2:fd:bc:99:e1:08:26:8f:28:f4:6f:52:a3:58:
17:9c:01:ab:89:a3:a3:48:1f:0a:e4:18:e9:8c:ff:
ea:1f:d8:99:8d:7a:9a:e1:a4:80:a4:50:3b:f4:bf:
43:70:3b:57:44:e9:fd:4d:e6:f9:dd:f6:b9:28:32:
7e:cd:a7:de:22:76:e4:e6:1f:f3:f2:60:9c:aa:3c:
8f:ab:7d:87:0b:b5:e3:8d:a8:d2:15:1a:ee:47:4d:
1a:5a:fd:26:79:6c:2a:bc:2f:8e:de:3a:aa:cf:ba:
80:fc:99:39:ef:6d:b3:92:f1:db:ff:b1:40:98:99:
88:06:5b:2f:4c:6a:40:76:06:c3:3b:c0:e9:04:e4:
56:2e:99:4b:3f:e0:52:e9:83:c7:ee:b0:e8:82:ac:
37:9e:36:e1:31:e7:f7:8e:b6:35:00:05:cd:66:f4:
f4:f6:3b:59:28:93:9c:c1:83:fb:3a:12:24:3d:17:
10:93:f3:7b:5b:e8:2b:c5:bb:25:0e:25:04:9c:ad:
78:6c:91:78:e8:c8:d4:32:d4:6b:aa:d3:dc:61:bc:
dd:30:c7:ad:ba:29:fb:c5:ea:0a:7a:b2:02:b0:d4:
01:8a:37:d1:c4:1b:a1:d4:b0:cd:05:c5:e7:ff:33:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F2:93:E3:F3:62:0D:67:78:3A:24:F8:3C:26:E7:D9:19:BF:8F:B2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QvKT4_NiDWd4OiT4PCbn2Rm_j7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
IPv6:
2a07:f300::/29
2a13:18c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
8e:87:e2:3f:07:6c:e3:63:ec:1c:ab:fb:8f:8b:89:4b:2b:6e:
9e:af:8b:28:36:b3:de:a2:fd:65:00:db:d3:0f:47:b4:05:38:
49:bc:48:63:03:42:fb:1f:f5:6e:b8:52:1b:dd:ad:1a:8c:68:
3c:c4:bd:69:73:83:b4:79:d2:7d:f7:75:d9:ff:f7:9b:5f:6c:
6d:8d:62:26:b1:d6:5a:07:9a:ba:5b:2e:b8:a5:80:04:77:5a:
7a:c6:8e:ba:94:15:25:58:4a:31:bb:05:ee:a4:76:f3:86:4c:
4a:42:9b:d3:f1:24:0b:d1:ac:e5:37:84:b3:44:31:c6:6a:3e:
4d:ef:8b:09:cf:34:7a:ee:f9:bc:e2:77:72:44:5d:14:ae:8c:
45:47:9f:ac:58:2d:2c:b5:9c:69:a5:63:66:77:7e:df:ef:38:
f1:7e:61:a1:f8:4c:53:00:f4:13:35:95:81:f7:3e:c2:30:8d:
fb:4a:7c:f5:1e:20:e0:97:f1:79:2e:23:35:66:65:b4:77:cc:
85:9e:3e:1a:d6:fe:f7:70:e6:67:d6:88:55:fe:37:6f:cf:a7:
29:40:d5:6d:fd:71:9c:65:ec:71:4d:40:53:7d:8d:c3:ed:07:
00:65:7a:33:3d:0c:4c:12:67:9b:41:a9:4d:ba:b2:00:e2:dd:
c8:10:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:58:34 2025 by rpki-client