Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qtwn8duTO1PC2gFs-7Z2WTHRoVQ.roa
File: qtwn8duTO1PC2gFs-7Z2WTHRoVQ.roa (raw, json)
Hash identifier: 9VLSw9JQzk5OTIowkHPbKbufBrcEKa0/gXt/XgMkIok=
Subject key identifier: AA:DC:27:F1:DB:93:3B:53:C2:DA:01:6C:FB:B6:76:59:31:D1:A1:54
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018DCB6759FFBA85DB58BD03BA8D692E3F8F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qtwn8duTO1PC2gFs-7Z2WTHRoVQ.roa
Signing time: Wed 21 Feb 2024 11:22:44 +0000
ROA not before: Wed 21 Feb 2024 11:22:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a05:b300::/29 maxlen: 29
2a06:a5c0::/29 maxlen: 29
2a06:a600::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a0a:1400::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0e:2240::/29 maxlen: 29
2a0e:5a80::/29 maxlen: 29
2a0e:9b00::/29 maxlen: 29
2a0f:a00::/29 maxlen: 29
2a0f:1380::/29 maxlen: 29
2a0f:1580::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a0f:7f00::/29 maxlen: 29
2a0f:8100::/29 maxlen: 29
2a0f:8300::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0f:dd40::/29 maxlen: 29
2a0f:e0c0::/29 maxlen: 29
2a0f:e140::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0f:e640::/29 maxlen: 29
2a0f:ec00::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a10:67c0::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
2a13:200::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 05 Mar 2024 10:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:67:59:ff:ba:85:db:58:bd:03:ba:8d:69:2e:3f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 21 11:22:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aadc27f1db933b53c2da016cfbb6765931d1a154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:69:5e:96:0d:2d:36:c8:85:fe:d4:d6:54:38:
9e:3a:49:95:9a:fe:eb:01:1a:8c:d0:1d:a4:da:b6:
7f:79:6f:15:39:88:a5:5c:7e:8d:65:d8:7e:d7:0d:
7e:3c:63:37:d4:a2:d4:1b:cb:3d:7a:b8:c2:41:9b:
73:2e:82:7c:27:0b:34:0b:a8:97:e2:cc:1c:8b:21:
6c:67:e3:f9:dd:77:04:80:e7:3d:55:dc:69:71:d4:
5c:c2:ba:03:1c:f0:01:54:06:1b:18:ae:49:c7:84:
39:a1:07:e3:07:22:09:51:b1:1d:7a:a1:db:53:61:
ab:20:75:d7:4e:c1:12:8b:43:5e:11:40:d0:12:0a:
91:bd:6e:04:77:df:f1:26:aa:2e:de:33:e2:6f:d3:
23:71:8b:e0:27:3f:9a:5b:11:43:1b:75:00:47:e9:
1e:98:3a:3f:62:26:73:75:af:2a:7a:3f:fd:2a:f5:
f8:8e:87:f3:e5:dc:e1:d2:de:a4:25:f5:99:11:b0:
b0:92:c0:66:fe:92:6c:6a:41:a4:36:77:74:7a:88:
a9:49:c7:ad:64:0b:a4:d3:27:68:15:9a:cc:34:fa:
7c:b8:5d:9a:c7:53:8f:4d:a5:ce:83:8b:32:11:97:
07:0a:6e:9e:21:1c:1c:07:fc:25:a9:46:b0:a7:a6:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DC:27:F1:DB:93:3B:53:C2:DA:01:6C:FB:B6:76:59:31:D1:A1:54
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qtwn8duTO1PC2gFs-7Z2WTHRoVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:a5c0::/29
2a06:a600::/29
2a06:dfc0::/29
2a0a:1400::/29
2a0c:4880::/29
2a0e:2240::/29
2a0e:5a80::/29
2a0e:9b00::/29
2a0f:a00::/29
2a0f:1380::/29
2a0f:1580::/29
2a0f:3f80::/29
2a0f:7f00::/29
2a0f:8100::/29
2a0f:8300::/29
2a0f:9600::/29
2a0f:b400::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:dd40::/29
2a0f:e0c0::/29
2a0f:e140::/29
2a0f:e540::/29
2a0f:e640::/29
2a0f:ec00::/29
2a0f:ee00::/29
2a10:67c0::/29
2a12:d540::/29
2a13:200::/29
Signature Algorithm: sha256WithRSAEncryption
63:35:7e:8d:1a:6a:c0:47:0a:66:7b:37:98:69:7b:11:46:b1:
8c:47:6e:f7:46:f9:8b:14:a3:82:6f:b3:b4:d6:bc:c0:d3:8b:
99:89:c5:d4:23:20:e3:d6:8e:1f:7f:91:90:ba:59:c2:59:02:
46:1f:28:68:ff:93:5a:d0:56:39:a1:ab:59:74:fa:cb:4f:ad:
ee:f5:d8:ef:11:66:63:9a:54:7e:50:7c:1e:c6:85:eb:a7:94:
22:c6:c3:34:91:c3:be:6d:9b:7b:0d:06:37:47:93:1e:c7:f3:
6e:cf:0c:32:b3:75:6f:85:1d:ad:02:35:29:b8:89:33:7e:ac:
0e:db:8c:10:d9:c6:df:2e:3e:ea:48:0b:12:7e:47:bd:52:48:
9f:fc:28:f6:08:96:1a:d9:27:e7:b7:91:d5:cf:d6:b0:44:6c:
fd:f7:aa:a0:57:64:ae:66:6f:46:5c:c2:bf:24:b2:20:d0:54:
b1:6b:07:c6:43:31:3c:17:85:41:a7:d7:a0:45:10:1e:1f:ab:
dd:eb:13:da:cc:bc:ff:bd:7c:34:c4:02:72:5d:58:e9:2e:17:
c9:60:11:90:62:26:ac:2f:22:56:bb:18:38:4c:41:c6:f1:69:
fa:2f:b1:4b:5a:7f:73:56:01:fe:51:2f:4c:de:23:2e:a7:3b:
40:92:68:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:26:41 2025 by rpki-client