Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qqTrDiAi8KmEQUAJuXsYDirk16w.roa
File: qqTrDiAi8KmEQUAJuXsYDirk16w.roa (raw, json)
Hash identifier: 0k5sbmSCS1/0XpR1IDyhmGe0PIeX3NwintG3afqv95M=
Subject key identifier: AA:A4:EB:0E:20:22:F0:A9:84:41:40:09:B9:7B:18:0E:2A:E4:D7:AC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F3DABC028C712BA24D374B74F393819AD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qqTrDiAi8KmEQUAJuXsYDirk16w.roa
Signing time: Fri 03 May 2024 08:56:56 +0000
ROA not before: Fri 03 May 2024 08:56:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 45.128.26.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 07 May 2024 14:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:ab:c0:28:c7:12:ba:24:d3:74:b7:4f:39:38:19:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 3 08:56:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaa4eb0e2022f0a984414009b97b180e2ae4d7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:ea:04:c4:fb:89:e2:0b:ec:08:1d:d1:1b:
af:91:d3:aa:a3:fc:0c:dd:60:fc:1f:b7:15:64:4d:
40:0e:4e:38:34:c3:f3:dd:eb:c7:b3:e3:1b:0b:0c:
2f:77:69:1d:83:14:14:20:7e:7f:8b:b1:40:d8:bb:
06:31:13:c1:11:92:5f:df:61:e1:45:77:7b:15:c3:
51:af:8d:58:84:b8:5b:5b:fe:52:51:84:93:a1:6f:
f5:1f:5b:87:6a:9f:34:64:18:52:90:bd:12:e1:14:
12:fe:28:e3:e3:48:82:95:8f:4b:21:ab:a0:3e:e0:
68:02:23:85:2a:bc:5f:d6:9b:ee:b5:32:ce:c4:47:
f9:47:88:7c:c0:98:d2:28:c9:eb:4c:95:19:48:55:
3f:c0:77:07:2c:92:97:19:08:0e:68:0c:f6:9d:b0:
7b:38:4d:84:e9:a8:b3:23:10:8f:93:fe:0f:fb:e7:
32:fa:65:75:68:95:f6:d3:40:49:17:2e:25:7a:ee:
17:84:0f:4b:c2:45:76:a3:3b:5d:bf:1d:bd:86:a1:
0c:05:24:3d:95:1b:b1:d0:35:b6:e5:6f:34:18:fc:
f9:64:3e:c7:96:e9:bf:38:82:d9:fb:d3:f4:19:6e:
af:e5:7d:9c:c8:33:af:3c:39:58:da:0c:6a:2f:38:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:EB:0E:20:22:F0:A9:84:41:40:09:B9:7B:18:0E:2A:E4:D7:AC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qqTrDiAi8KmEQUAJuXsYDirk16w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:b5:58:05:c9:31:f1:b7:9d:e8:98:46:cd:9c:d1:33:e7:b9:
fa:f4:33:0c:f1:9e:e9:a8:87:12:9c:0f:54:88:1a:30:61:02:
03:d2:f4:56:ec:a2:4e:5f:d7:47:a0:d0:62:84:8b:4d:9b:07:
0d:6d:41:18:2c:48:3a:cf:2c:40:b9:ac:7f:c7:54:dd:f4:35:
72:0f:f7:0f:79:b3:b4:8d:a6:f2:b4:d7:30:2a:f6:4d:bb:77:
7c:a1:d0:01:6f:00:7b:8d:85:40:a1:9b:48:1f:a0:74:eb:a4:
08:e5:b0:a8:84:20:c3:6d:ab:e1:5a:d7:c0:1f:69:a2:bd:39:
24:bb:34:d9:b6:ae:52:06:35:1f:1c:41:09:a4:6e:b4:7f:98:
43:84:90:01:b0:6f:84:a9:5c:74:ab:95:bd:cb:00:3b:30:c0:
ef:91:57:aa:23:b9:5c:8a:a5:b5:5f:aa:61:9f:dc:9e:d3:37:
b4:16:ce:2e:4a:9c:9d:40:03:59:30:44:dc:1f:d9:ff:43:d4:
28:fa:2a:42:ac:da:19:55:6c:34:7d:19:9f:9a:a4:1d:d9:c9:
55:1d:62:b4:86:d0:4d:7a:68:09:85:d7:30:5f:8f:dc:41:61:
32:2b:35:2a:aa:e6:66:80:c2:86:e7:3f:72:88:2f:92:1c:93:
ef:c9:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:18:04 2025 by rpki-client