Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qcF_rwICC7wRyM2h-ZLqdemfsPY.roa
File: qcF_rwICC7wRyM2h-ZLqdemfsPY.roa (raw, json)
Hash identifier: Qqq/zE9Gai1Hv1KsAS9S1ZzgkRC5brlQRkilUt1cbRQ=
Subject key identifier: A9:C1:7F:AF:02:02:0B:BC:11:C8:CD:A1:F9:92:EA:75:E9:9F:B0:F6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F6B96343C2EB75D69C64A88546E6EBC8D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qcF_rwICC7wRyM2h-ZLqdemfsPY.roa
Signing time: Sun 12 May 2024 06:55:56 +0000
ROA not before: Sun 12 May 2024 06:55:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 131642
IP address blocks: 45.12.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 08:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6b:96:34:3c:2e:b7:5d:69:c6:4a:88:54:6e:6e:bc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 12 06:55:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9c17faf02020bbc11c8cda1f992ea75e99fb0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:c5:a5:0a:40:31:ef:e4:a8:41:ec:d3:13:
7b:8c:13:5b:3f:9a:cf:0c:cf:b6:8a:b3:f8:66:50:
6c:59:da:ab:4c:f2:4e:d8:5b:4b:76:5c:b6:1f:6c:
73:6a:91:c3:cb:ff:be:86:04:82:29:ae:6c:e3:09:
59:39:47:01:7c:f9:fa:32:4e:ab:3f:b5:22:c7:9c:
29:5d:45:0a:d7:da:cd:c6:48:bf:43:b9:87:3d:ba:
b4:e5:1e:de:9a:6d:39:32:a1:4f:4a:04:d4:51:f0:
ef:a0:4c:bc:c7:83:b0:41:c2:64:bd:af:d1:da:bb:
44:e7:89:84:81:a1:92:a4:02:3f:f4:b2:e9:3e:c2:
c3:3a:e1:d7:43:a1:01:52:20:f0:f2:5b:a4:8e:ab:
6b:3e:20:ea:ed:c2:fd:33:88:2b:18:0e:8c:ab:d4:
ee:d5:98:83:d9:22:eb:68:0f:29:be:d6:89:74:ff:
bc:90:bb:5f:86:bf:36:80:bb:94:6d:4f:e1:2a:21:
56:db:5f:d8:d8:3d:76:5a:de:e9:fc:ae:4c:bc:44:
9e:10:84:f5:7e:90:11:e0:39:6d:55:79:5d:14:3d:
e2:6e:2e:9a:a6:49:1a:2d:8f:8c:0d:bd:b1:8b:04:
f0:da:f1:0a:5c:4e:af:30:86:f1:12:1e:2c:e7:ac:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C1:7F:AF:02:02:0B:BC:11:C8:CD:A1:F9:92:EA:75:E9:9F:B0:F6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qcF_rwICC7wRyM2h-ZLqdemfsPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.62.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d8:73:db:02:5f:97:9b:2f:3c:4e:e2:d4:91:43:ab:51:13:
ea:87:4f:6a:20:23:0d:0d:c7:d0:27:a1:cb:d2:e3:41:e1:26:
57:80:fd:1d:ef:2a:bd:39:d7:dd:ab:3b:bc:d9:29:94:16:56:
cf:6c:34:54:df:3e:e5:52:bc:cb:6d:28:84:66:8f:92:4d:21:
b9:36:cb:e8:d6:77:a3:7b:5c:fe:b8:e9:73:9e:1e:a6:4a:42:
2c:aa:38:07:5d:82:f8:b5:38:c0:a7:80:ac:e9:4c:85:bb:f6:
ab:53:1f:7c:68:79:8e:3c:f2:29:a3:86:34:15:ad:60:79:55:
38:c3:ad:5a:c7:73:f0:54:68:96:f9:1e:e1:35:cf:53:9a:f8:
77:bd:9d:f1:63:45:02:14:ba:98:df:0a:aa:88:f0:1d:9d:ad:
ec:6a:44:63:5e:dd:6c:83:8b:10:75:08:fb:5a:bf:d0:18:2f:
2a:6b:96:b9:a8:2a:5a:aa:26:8d:d6:28:6e:65:d7:cd:9f:fd:
78:7a:51:b5:b6:48:19:ab:3c:45:ed:3a:87:aa:cc:fe:70:67:
0e:3e:41:d2:8b:dc:f3:73:f7:56:32:a3:7b:ed:80:b1:b5:8b:
30:2d:fd:00:dc:9d:15:14:e3:91:32:5b:a1:16:6f:14:20:61:
84:e4:ce:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9rljQ8LrddacZKiFRubryNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNTEyMDY1NTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWMxN2ZhZjAyMDIwYmJjMTFjOGNkYTFmOTkyZWE3NWU5OWZiMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvefFpQpAMe/kqEHs0xN7jBNbP5rP
DM+2irP4ZlBsWdqrTPJO2FtLdly2H2xzapHDy/++hgSCKa5s4wlZOUcBfPn6Mk6r
P7Uix5wpXUUK19rNxki/Q7mHPbq05R7emm05MqFPSgTUUfDvoEy8x4OwQcJkva/R
2rtE54mEgaGSpAI/9LLpPsLDOuHXQ6EBUiDw8lukjqtrPiDq7cL9M4grGA6Mq9Tu
1ZiD2SLraA8pvtaJdP+8kLtfhr82gLuUbU/hKiFW21/Y2D12Wt7p/K5MvESeEIT1
fpAR4DltVXldFD3ibi6apkkaLY+MDb2xiwTw2vEKXE6vMIbxEh4s56x2xwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKnBf68CAgu8EcjNofmS6nXpn7D2MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvcWNGX3J3SUNDN3dSeU0yaC1aTHFkZW1mc1BZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQw+MA0G
CSqGSIb3DQEBCwUAA4IBAQBG2HPbAl+Xmy88TuLUkUOrURPqh09qICMNDcfQJ6HL
0uNB4SZXgP0d7yq9Odfdqzu82SmUFlbPbDRU3z7lUrzLbSiEZo+STSG5Nsvo1nej
e1z+uOlznh6mSkIsqjgHXYL4tTjAp4Cs6UyFu/arUx98aHmOPPIpo4Y0Fa1geVU4
w61ax3PwVGiW+R7hNc9Tmvh3vZ3xY0UCFLqY3wqqiPAdna3sakRjXt1sg4sQdQj7
Wr/QGC8qa5a5qCpaqiaN1ihuZdfNn/14elG1tkgZqzxF7TqHqsz+cGcOPkHSi9zz
c/dWMqN77YCxtYswLf0A3J0VFOORMluhFm8UIGGE5M5V
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:33 2025 by rpki-client