Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qaRZ9RzKGjGK53FzBhRZZtPcndQ.roa
File: qaRZ9RzKGjGK53FzBhRZZtPcndQ.roa (raw, json)
Hash identifier: XWmSvIPztdV/tVjOH1iRrPrU6wri3JMCPjwy8LMOWAI=
Subject key identifier: A9:A4:59:F5:1C:CA:1A:31:8A:E7:71:73:06:14:59:66:D3:DC:9D:D4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222064324016595A0A0C2F837FFD55DC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qaRZ9RzKGjGK53FzBhRZZtPcndQ.roa
Signing time: Wed 01 Jan 2025 13:48:55 +0000
ROA not before: Wed 01 Jan 2025 13:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400992
IP address blocks: 185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 03:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:64:32:40:16:59:5a:0a:0c:2f:83:7f:fd:55:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9a459f51cca1a318ae7717306145966d3dc9dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:b5:45:9c:31:60:a1:c5:8f:d5:99:51:b5:
4f:57:68:e8:54:d6:32:d1:d2:92:df:83:6c:ec:e9:
6f:45:f5:6e:8c:6f:0c:8e:ee:1a:e2:04:ff:23:c2:
4c:60:4c:37:fe:37:83:db:ff:c3:51:54:16:a3:eb:
89:65:64:67:36:4e:aa:a3:4b:1f:77:b0:c0:56:e7:
36:36:91:06:e4:59:fe:b4:71:dc:a2:e7:6a:c9:a2:
54:9b:6e:6d:95:8b:ee:89:61:3e:a9:d6:3f:c6:f5:
f8:e9:8f:e3:c9:c3:6a:42:17:d3:c0:59:a4:bf:4e:
00:ee:70:e1:6a:1b:9c:2c:6d:17:e0:6e:45:37:27:
54:50:1d:9e:cf:6d:19:a5:2e:21:b5:6c:c7:a7:2f:
67:bb:15:19:b7:a1:0e:ae:f4:88:88:9b:19:1b:0c:
1d:09:7b:56:cc:86:c6:98:0b:0d:f2:d1:b7:6e:30:
b6:ac:39:fc:65:45:f9:ee:52:d8:b2:37:af:9b:c4:
ea:5d:29:f9:ee:e2:35:15:4a:52:75:44:51:1b:da:
4c:89:bd:49:40:87:3c:56:bb:fe:56:34:dd:6a:62:
03:7a:52:71:bc:b2:5a:e7:db:d0:df:52:57:a2:97:
35:d1:dd:3d:a9:26:0c:25:5e:86:12:b8:1c:ae:93:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A4:59:F5:1C:CA:1A:31:8A:E7:71:73:06:14:59:66:D3:DC:9D:D4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qaRZ9RzKGjGK53FzBhRZZtPcndQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.12.0/24
185.121.15.0/24
193.17.183.0/24
Signature Algorithm: sha256WithRSAEncryption
46:dc:0b:28:52:26:40:86:01:6f:4a:ac:45:75:a6:85:24:54:
a1:bd:2d:f5:e7:69:ef:c6:de:77:66:b9:60:34:26:4e:18:7f:
3b:ae:e5:fc:5e:f9:d8:11:b6:2f:a7:ad:d5:73:16:82:c1:c0:
eb:f9:ee:32:b3:29:b7:ba:51:29:19:fe:a2:9e:ca:c4:72:0e:
b3:cf:d4:da:c1:3e:ba:16:75:4a:23:7a:ac:4a:20:dd:a1:36:
61:0b:5b:f6:5d:52:41:2e:03:78:67:2b:35:dd:21:35:20:ac:
47:3d:71:f8:f8:bb:c4:c7:5d:c5:57:76:9c:c1:09:7b:10:4c:
00:4b:7e:5d:e7:49:83:ad:78:28:ab:b5:9d:2e:04:2f:dc:07:
3e:c0:36:32:15:31:9b:fa:d6:50:01:70:61:29:93:eb:5c:74:
6f:89:ae:a0:cc:55:47:64:9b:1e:d1:18:9a:e3:0f:ef:5c:9a:
e3:57:28:7e:2c:d3:4e:56:8d:8f:ed:a8:72:ed:f4:dc:2c:54:
8e:0e:44:26:54:8b:9f:b6:07:57:39:e4:36:3c:93:04:5f:cd:
a1:db:32:76:41:dd:2b:8b:8b:ef:63:03:58:ba:29:ff:4d:9c:
85:75:d1:bb:32:1f:8f:45:d2:41:a6:7d:c5:f1:89:d4:ed:00:
44:f0:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:40 2025 by rpki-client