Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/qnx62FHTwL9HrbafQB24COF4jfE.roa
File: qnx62FHTwL9HrbafQB24COF4jfE.roa (raw, json)
Hash identifier: YBYZxZwx1OMZaISw7Tm1CD88tMwQSlHZqmTNS/IxUjk=
Subject key identifier: AA:7C:7A:D8:51:D3:C0:BF:47:AD:B6:9F:40:1D:B8:08:E1:78:8D:F1
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194282424643970FF610CADF9ACE2F357B2
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/qnx62FHTwL9HrbafQB24COF4jfE.roa
Signing time: Thu 02 Jan 2025 17:50:44 +0000
ROA not before: Thu 02 Jan 2025 17:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48584
IP address blocks: 176.241.178.0/23 maxlen: 24
176.241.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 09:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:24:64:39:70:ff:61:0c:ad:f9:ac:e2:f3:57:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa7c7ad851d3c0bf47adb69f401db808e1788df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:2d:ed:64:4e:8b:10:b6:9c:75:92:a5:e7:
78:2b:f8:c2:72:75:67:51:45:24:cb:da:c2:ae:63:
10:a2:2e:89:c9:dd:8b:bc:93:92:96:20:84:09:7e:
82:ff:09:ae:77:df:05:ec:59:9e:26:43:84:b8:c2:
a2:e9:32:90:d2:b5:4b:d2:d0:9b:57:5a:61:c6:aa:
56:c4:1b:e6:a2:8f:9a:60:6a:d7:e6:81:de:ad:e3:
23:1f:20:7e:9a:d4:00:ac:f1:44:d5:60:2b:c9:67:
4f:d1:80:82:c0:a1:a4:d6:43:32:72:29:1e:27:0d:
aa:00:af:3b:b7:9f:1a:0c:ea:5a:ff:48:3d:45:69:
81:9d:d3:9a:9a:00:28:43:52:3c:9f:21:08:bd:56:
de:e0:05:30:93:2a:c0:82:9a:3c:e8:9f:6c:a4:42:
27:f7:73:de:84:cb:fc:e8:af:81:56:1d:cb:ca:71:
93:4a:d6:7e:1c:55:44:f2:b7:5d:9a:56:ff:b3:fa:
2c:96:63:7c:30:fa:12:8f:34:7e:56:ce:74:e0:0b:
d7:06:f0:2a:9d:6b:34:aa:fc:97:56:5c:d7:ed:75:
4c:53:4c:73:67:ab:0c:6e:95:2d:da:d8:de:bf:d7:
99:11:5e:44:e0:ec:ab:cd:10:d4:06:c0:4f:77:9a:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7C:7A:D8:51:D3:C0:BF:47:AD:B6:9F:40:1D:B8:08:E1:78:8D:F1
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/qnx62FHTwL9HrbafQB24COF4jfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.178.0-176.241.183.255
Signature Algorithm: sha256WithRSAEncryption
40:d4:4d:6e:e0:a4:51:a9:4a:6c:74:48:ee:08:21:aa:b0:53:
f9:0e:51:53:77:3e:ef:86:83:42:6e:62:17:1a:ee:37:4e:88:
0a:76:96:f0:5b:ad:2f:2a:30:5b:a3:ec:82:8c:63:0d:b8:3a:
a2:02:23:e9:af:d4:ec:7f:a0:a7:7e:47:01:27:0e:e1:df:d9:
c4:08:7d:6e:11:4f:b0:30:ea:fd:c0:cc:77:92:6c:0f:77:65:
d7:3a:6d:65:66:34:4e:0d:01:ca:7b:64:be:3e:f5:65:4d:e2:
dd:25:09:32:1c:59:59:69:7c:db:e4:59:52:4b:71:60:e2:61:
92:49:04:ba:42:4b:81:84:5f:af:31:1d:83:ff:45:82:98:37:
47:97:4e:c2:4b:e6:66:eb:8c:3e:0d:c5:04:1a:59:b9:ce:a5:
e1:ba:75:a0:35:81:ba:01:d1:2d:9b:9f:26:cb:31:c6:29:73:
de:a7:77:f1:c6:77:4c:8a:a6:7f:b4:55:47:d3:cb:fe:bf:e6:
93:8e:f9:85:84:cf:c6:77:53:53:ee:02:f4:23:13:3c:81:91:
5c:fe:79:d8:3a:32:0e:50:e5:cd:a1:fd:c9:80:51:b4:2c:a2:
fa:05:ac:46:e9:4e:c7:eb:a9:60:5f:8b:7f:03:25:72:09:59:
29:3c:88:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:26:53 2025 by rpki-client