Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/QIIYlaN-6YvTZ2OTlOMwzprO3pI.roa
File: QIIYlaN-6YvTZ2OTlOMwzprO3pI.roa (raw, json)
Hash identifier: j+VoTf0D2owz9BKA2ZQteUEKYyn6R0a3Ty2Aurgx28c=
Subject key identifier: 40:82:18:95:A3:7E:E9:8B:D3:67:63:93:94:E3:30:CE:9A:CE:DE:92
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018D77DC33FA0C714F6A39628054608F9EF2
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/QIIYlaN-6YvTZ2OTlOMwzprO3pI.roa
Signing time: Mon 05 Feb 2024 06:02:16 +0000
ROA not before: Mon 05 Feb 2024 06:02:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 2a07:3500:1240::/46 maxlen: 46
2a07:3500:12d0::/48 maxlen: 48
2a07:3500:12f8::/48 maxlen: 48
2a07:3500:15a0::/48 maxlen: 48
2a07:3500:15c0::/48 maxlen: 48
2a07:3500:1b90::/48 maxlen: 48
2a07:3501:1340::/48 maxlen: 48
2a07:3502:1050::/48 maxlen: 48
2a07:3502:1060::/48 maxlen: 48
2a07:3502:10a1::/48 maxlen: 48
2a07:3502:10c0::/48 maxlen: 48
2a07:3502:11a0::/46 maxlen: 46
Validation: Failed, certificate revoked on Tue 13 Feb 2024 06:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:dc:33:fa:0c:71:4f:6a:39:62:80:54:60:8f:9e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Feb 5 06:02:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40821895a37ee98bd367639394e330ce9acede92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:20:32:6b:4a:a7:ee:a8:1c:eb:47:4e:e9:
31:c7:b4:8b:31:77:53:cb:4a:9a:ae:e7:56:fe:d8:
a8:4a:0b:d3:f2:cc:75:09:cb:98:7b:92:43:8e:8f:
3a:e4:42:b8:3d:57:44:4e:ff:b6:ed:48:9d:1d:31:
19:31:b3:5a:54:40:0a:11:fe:09:bd:0a:f3:2f:c1:
5d:28:96:1f:81:ea:dc:4d:33:17:e9:99:15:2b:05:
4f:ee:89:82:69:27:e4:87:45:0f:a3:85:d3:67:4f:
87:64:2f:1c:ce:34:e0:54:8d:f1:4c:d9:21:ab:af:
ac:0a:cc:74:fd:ac:19:56:2d:9b:5f:ac:6b:c6:df:
cc:14:76:fc:3d:2e:16:44:80:cf:cd:d4:76:6d:5e:
81:03:4c:12:13:97:dd:f6:53:75:53:58:ac:f3:d6:
41:db:ef:eb:ab:e2:66:97:14:b0:4f:00:23:50:07:
b3:95:c5:37:ae:a4:6e:79:37:62:a6:17:45:1c:5f:
5b:d5:78:c6:a0:31:84:8a:ac:f3:df:76:80:51:5c:
b2:d7:77:62:fe:ba:20:56:8a:2f:f9:ee:ea:bd:66:
84:2a:07:d4:a7:52:db:66:36:58:1d:e6:9a:54:b3:
5b:cf:37:f4:62:25:3f:4c:7c:e9:b1:e9:57:68:38:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:82:18:95:A3:7E:E9:8B:D3:67:63:93:94:E3:30:CE:9A:CE:DE:92
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/QIIYlaN-6YvTZ2OTlOMwzprO3pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1240::/46
2a07:3500:12d0::/48
2a07:3500:12f8::/48
2a07:3500:15a0::/48
2a07:3500:15c0::/48
2a07:3500:1b90::/48
2a07:3501:1340::/48
2a07:3502:1050::/48
2a07:3502:1060::/48
2a07:3502:10a1::/48
2a07:3502:10c0::/48
2a07:3502:11a0::/46
Signature Algorithm: sha256WithRSAEncryption
00:6f:53:e9:3f:c0:a0:23:64:0c:80:4c:78:d5:f0:8c:1c:4e:
a6:63:6b:13:31:20:67:12:aa:07:71:f9:64:f2:83:4c:43:22:
6e:28:d2:1b:33:38:58:e3:c6:6a:f0:6b:30:55:27:4d:81:1e:
0f:da:39:71:01:61:d9:13:70:88:6e:6e:b1:ce:76:d4:3c:f3:
d8:4c:36:45:e6:82:63:ff:78:f9:a1:ed:42:40:b7:72:b8:08:
ee:0d:07:64:c2:37:53:3b:01:b1:e6:c4:81:ca:5b:3f:e1:86:
b9:f7:a5:45:dd:7f:a2:94:0c:81:e5:8e:63:67:9c:7c:05:4a:
8c:88:43:cd:f7:94:92:41:c5:48:d2:54:f1:0e:21:77:3f:c1:
35:48:f4:90:46:f6:54:a4:48:12:d5:ab:af:28:a5:02:6c:32:
b8:6f:4e:3b:b5:2d:86:0e:f5:37:1c:47:c1:80:eb:54:00:a0:
98:b1:84:45:70:88:ae:f4:bd:5f:2a:75:b3:ce:46:53:cd:8e:
93:8b:2c:78:ef:2b:2e:2b:05:a9:9a:c0:ae:ca:7d:a7:ba:73:
43:7e:a8:8b:21:1d:2e:64:36:e7:7c:5d:d7:8a:72:6e:11:42:
87:85:2c:9e:25:45:38:61:d0:af:2d:0d:ae:a9:51:5f:05:72:
0d:f2:ef:4d
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAY133DP6DHFPajligFRgj57yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjQwMjA1MDYwMjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDgyMTg5NWEzN2VlOThiZDM2NzYzOTM5NGUzMzBjZTlhY2VkZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNUgMmtKp+6oHOtHTukxx7SLMXdT
y0qarudW/tioSgvT8sx1CcuYe5JDjo865EK4PVdETv+27UidHTEZMbNaVEAKEf4J
vQrzL8FdKJYfgercTTMX6ZkVKwVP7omCaSfkh0UPo4XTZ0+HZC8czjTgVI3xTNkh
q6+sCsx0/awZVi2bX6xrxt/MFHb8PS4WRIDPzdR2bV6BA0wSE5fd9lN1U1is89ZB
2+/rq+JmlxSwTwAjUAezlcU3rqRueTdiphdFHF9b1XjGoDGEiqzz33aAUVyy13di
/rogVoov+e7qvWaEKgfUp1LbZjZYHeaaVLNbzzf0YiU/THzpselXaDiGrQIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFECCGJWjfumL02djk5TjMM6azt6SMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvUUlJWWxhTi02WXZUWjJPVGxPTXd6cHJPM3BJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAIwbAMHAioHNQAS
QAMHACoHNQAS0AMHACoHNQAS+AMHACoHNQAVoAMHACoHNQAVwAMHACoHNQAbkAMH
ACoHNQETQAMHACoHNQIQUAMHACoHNQIQYAMHACoHNQIQoQMHACoHNQIQwAMHAioH
NQIRoDANBgkqhkiG9w0BAQsFAAOCAQEAAG9T6T/AoCNkDIBMeNXwjBxOpmNrEzEg
ZxKqB3H5ZPKDTEMibijSGzM4WOPGavBrMFUnTYEeD9o5cQFh2RNwiG5usc521Dzz
2Ew2ReaCY/94+aHtQkC3crgI7g0HZMI3UzsBsebEgcpbP+GGufelRd1/opQMgeWO
Y2ecfAVKjIhDzfeUkkHFSNJU8Q4hdz/BNUj0kEb2VKRIEtWrryilAmwyuG9OO7Ut
hg71NxxHwYDrVACgmLGERXCIrvS9Xyp1s85GU82Ok4sseO8rLisFqZrArsp9p7pz
Q36oiyEdLmQ253xd14pybhFCh4UsniVFOGHQry0NrqlRXwVyDfLvTQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:21:44 2025 by rpki-client