Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/q2GfE3O0OJZTufVQq7w2RB-JIlk.roa
File: q2GfE3O0OJZTufVQq7w2RB-JIlk.roa (raw, json)
Hash identifier: Qzv8tOZ80PS7fILCTkU1q5LTw8Itc9aUjZ3X0pLdz6M=
Subject key identifier: AB:61:9F:13:73:B4:38:96:53:B9:F5:50:AB:BC:36:44:1F:89:22:59
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019423D7FFFE6EC840B5A5448ECA2106B5FD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/q2GfE3O0OJZTufVQq7w2RB-JIlk.roa
Signing time: Wed 01 Jan 2025 21:49:05 +0000
ROA not before: Wed 01 Jan 2025 21:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213877
IP address blocks: 150.241.105.0/24 maxlen: 24
150.241.108.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 23:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ff:fe:6e:c8:40:b5:a5:44:8e:ca:21:06:b5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 1 21:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab619f1373b4389653b9f550abbc36441f892259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:c6:12:01:8f:3c:36:2a:ad:85:d0:fa:ac:
ec:58:25:38:93:18:ca:57:93:42:5f:a7:72:20:0b:
8a:e5:00:7c:9d:20:67:5e:ed:6c:06:4a:3b:16:40:
ec:36:f5:74:68:51:5d:2f:0b:e7:10:b4:90:16:79:
ef:51:bb:60:43:af:14:e1:a7:29:df:f4:87:4a:f0:
fe:6b:7e:47:95:54:a7:10:6c:e2:b6:08:97:44:fe:
91:3c:ad:cd:bd:25:e0:2b:ed:6b:80:c2:fb:4e:fc:
be:b9:5c:cc:07:cd:6c:5f:b2:86:5f:d5:e9:7e:7c:
d0:71:de:ed:fd:a6:bb:af:4d:af:6f:c7:c1:7e:37:
9e:1a:41:dd:ed:d0:9f:db:e7:76:03:1e:63:4a:24:
d7:d4:3b:da:8d:d5:78:ab:6c:9c:94:88:a7:b0:c5:
d8:50:81:fe:1b:da:82:80:69:49:4a:42:39:04:35:
de:5a:7a:99:57:74:8b:3a:26:a7:83:7a:c1:38:95:
5a:68:0b:be:da:ab:51:ce:46:5b:9a:c8:16:7e:b3:
54:3b:74:0c:5b:ff:94:7a:29:61:74:e8:ba:71:10:
d6:36:a3:19:4f:34:b4:1e:9b:8e:09:43:5b:c8:fa:
64:45:1a:55:11:3b:98:ef:fa:1b:ee:37:27:0b:ed:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:61:9F:13:73:B4:38:96:53:B9:F5:50:AB:BC:36:44:1F:89:22:59
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/q2GfE3O0OJZTufVQq7w2RB-JIlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.105.0/24
150.241.108.0/24
150.241.123.0/24
Signature Algorithm: sha256WithRSAEncryption
42:3a:91:0d:64:19:c9:6d:82:6b:1f:cc:f4:2d:85:4e:22:e3:
0a:2e:56:10:ff:7a:8d:91:fc:92:37:2c:19:d4:cc:5e:86:4d:
f7:c0:51:de:06:7f:08:09:95:3e:3f:47:a4:44:4e:08:cc:0b:
7f:8c:73:17:11:b9:94:ab:ff:17:14:ba:77:b6:9a:b7:09:53:
05:ba:bd:ac:0a:f1:9f:98:63:bf:31:5a:9b:5d:14:a6:70:41:
08:f0:c5:e0:6e:01:e8:cc:b9:2c:9e:2d:ac:7f:52:31:53:27:
f9:eb:4d:ce:74:9d:4c:7d:89:0a:e7:10:ed:3c:b4:a3:6f:3c:
aa:52:83:67:a9:9e:d0:10:15:0d:2f:ec:34:8f:04:cc:49:2e:
a6:0e:f4:d6:b9:da:27:4c:e5:ea:64:33:10:f2:eb:2c:3d:a3:
85:8f:9f:25:96:1a:7e:a6:e3:a1:51:fa:d6:fd:03:15:6b:3c:
e1:9c:54:71:b6:e1:6b:d2:c6:71:94:53:19:91:5e:1a:35:05:
df:34:57:19:2a:dc:d5:64:3a:13:9a:fe:32:78:20:e8:df:0c:
0a:85:79:a5:9f:8b:9b:c6:4a:5c:e8:8b:17:ef:25:a1:fc:62:
78:8e:78:f9:2c:ef:b2:82:2e:e6:e5:e7:2b:0c:21:24:00:04:
aa:93:fd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:47 2025 by rpki-client