Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/Q_Np236Hr_VRFDPCsCAKwVPWA_Q.roa
File: Q_Np236Hr_VRFDPCsCAKwVPWA_Q.roa (raw, json)
Hash identifier: qJ01rqLb5bAUDKDC5uCXKi9z74qazzhjFstygBead7s=
Subject key identifier: 43:F3:69:DB:7E:87:AF:F5:51:14:33:C2:B0:20:0A:C1:53:D6:03:F4
Certificate issuer: /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Certificate serial: 018CC3B6E44D52DBB429958BA51BA55D067C
Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/Q_Np236Hr_VRFDPCsCAKwVPWA_Q.roa
Signing time: Mon 01 Jan 2024 06:29:52 +0000
ROA not before: Mon 01 Jan 2024 06:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205944
IP address blocks: 185.250.96.0/24 maxlen: 24
185.250.98.0/24 maxlen: 24
185.250.97.0/24 maxlen: 24
185.250.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e4:4d:52:db:b4:29:95:8b:a5:1b:a5:5d:06:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Validity
Not Before: Jan 1 06:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43f369db7e87aff5511433c2b0200ac153d603f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:05:b6:46:30:08:81:f7:f7:bd:aa:c9:fa:
7a:33:02:03:b7:2e:c4:4e:f2:5a:03:f9:82:58:af:
54:1e:6a:65:5d:c6:ed:bf:50:19:36:6b:3d:10:62:
04:d8:7f:76:a4:64:e4:85:7e:69:92:f6:54:e6:62:
c3:2a:e2:09:42:58:8f:4a:c9:56:3e:be:d6:1d:a1:
82:55:39:ec:ef:60:bc:95:da:99:08:ea:b4:b8:01:
c4:2e:22:59:85:7c:d5:d3:fd:f8:15:d3:1c:e8:ef:
66:53:fa:27:61:ff:f5:66:5d:12:0b:5d:7c:38:3c:
18:21:2f:ba:c6:0a:fb:0e:28:02:85:f5:33:6a:08:
d4:cd:97:9c:18:29:56:b2:8b:ef:a8:fd:59:5d:8b:
18:dd:01:1b:40:63:35:46:c2:84:56:c3:64:61:6f:
1a:bc:56:6f:99:fc:86:8e:d1:2f:e1:96:f6:fd:9f:
d3:b0:92:4d:ce:f3:68:d6:aa:3a:bc:8a:e4:c6:e5:
68:8e:b1:2a:c6:c2:6f:79:e7:2f:b5:33:0d:03:b3:
99:44:d5:e5:14:14:13:48:62:8e:cf:20:54:29:b9:
d6:ad:51:fb:94:2d:17:45:86:21:4e:02:05:7e:0b:
d5:38:a0:95:5e:97:e5:54:a1:ef:19:06:15:2e:b4:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F3:69:DB:7E:87:AF:F5:51:14:33:C2:B0:20:0A:C1:53:D6:03:F4
X509v3 Authority Key Identifier:
keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/Q_Np236Hr_VRFDPCsCAKwVPWA_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:0b:40:70:08:25:43:aa:50:7f:4d:bf:ae:08:b0:7b:13:1b:
88:3e:7a:a6:f6:05:d6:b3:d0:06:10:f8:2f:e2:70:f0:56:74:
f1:c9:95:9e:c2:8a:22:f8:d7:ee:a4:32:12:d3:da:e9:02:72:
06:80:56:16:42:33:46:d3:ef:03:4b:1c:63:bd:c1:f9:5c:33:
05:18:96:82:7c:3f:32:0c:79:36:70:22:86:9e:ea:4e:76:71:
26:80:cc:9e:9b:37:72:46:7f:64:86:e0:94:10:12:af:ce:33:
b9:ba:80:83:38:29:68:98:fb:d0:b8:91:57:87:3f:b3:1d:94:
7c:51:62:52:cc:cb:0d:aa:16:ca:1c:03:f7:7a:7a:07:b0:ba:
7f:83:ff:d2:3c:10:66:20:7f:04:36:d6:e6:74:bc:62:ae:84:
e3:bd:0f:47:93:bb:0f:51:30:fc:2a:fd:d0:29:12:64:fb:11:
e2:95:84:98:4b:35:32:d0:a5:ee:67:30:0e:a6:73:6f:20:e1:
2d:48:b4:e4:78:9f:d3:bc:e6:36:f6:81:bd:fc:3e:d3:4a:7f:
5f:07:77:06:c1:a4:3c:84:00:4c:66:46:3d:39:05:3b:3b:99:
a2:ce:fc:a7:f8:9c:d6:c2:1c:0f:22:26:08:14:b3:2b:3a:2f:
6f:52:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:32 2025 by rpki-client