Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/QP7YE6rhGNkXqdMC_9ivO3mUegk.roa
File: QP7YE6rhGNkXqdMC_9ivO3mUegk.roa (raw, json)
Hash identifier: SRdQsAt44OpOt6JNcqyzpDVM/8rOMP9eZQtFMYo2nKA=
Subject key identifier: 40:FE:D8:13:AA:E1:18:D9:17:A9:D3:02:FF:D8:AF:3B:79:94:7A:09
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 018CC424C9AEBA2044EA1C43ADC4E43D584C
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/QP7YE6rhGNkXqdMC_9ivO3mUegk.roa
Signing time: Mon 01 Jan 2024 08:29:54 +0000
ROA not before: Mon 01 Jan 2024 08:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207853
IP address blocks: 91.210.152.0/24 maxlen: 24
2a07:b1c0::/29 maxlen: 48
2001:678:b9c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:c9:ae:ba:20:44:ea:1c:43:ad:c4:e4:3d:58:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Jan 1 08:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40fed813aae118d917a9d302ffd8af3b79947a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:c3:23:6d:63:59:bf:b0:1c:50:fa:2c:98:
4b:25:e7:e5:42:37:0e:6b:d3:61:1a:b0:8f:85:8c:
61:00:e0:db:9e:bd:ae:b0:8c:9f:df:97:9a:ab:66:
08:d5:cf:a7:b0:64:bd:62:15:cc:83:08:87:c4:d0:
0a:9a:9c:61:2f:db:95:5b:ea:61:6c:de:0d:78:92:
4c:73:70:b6:9a:cc:03:7a:1e:70:86:42:f4:ee:70:
8e:5a:e9:6e:0d:52:d9:a0:d3:0a:b7:41:c7:9e:3a:
28:f3:a9:8f:5a:7b:3a:fb:f9:91:3a:02:8c:eb:d2:
d1:e8:9c:a7:06:3b:df:70:12:0c:3e:64:aa:91:73:
8a:de:84:00:ee:76:1c:e7:c2:c8:bd:7b:34:84:4c:
ee:f1:d0:ec:86:dd:07:e2:71:d2:8d:47:6f:8b:66:
59:84:5b:a7:72:7b:d0:82:61:47:ad:9e:08:f5:63:
70:94:4d:83:01:bc:2e:6f:78:81:9f:d8:05:7c:31:
28:f2:38:56:d0:8b:cc:32:2e:af:ea:3f:2a:5f:51:
36:9f:ef:4b:d3:bd:87:8a:9f:cb:fd:e3:88:42:22:
d6:0d:8d:9f:33:3c:21:4f:16:a6:1e:59:e1:0a:84:
1b:6c:c9:d7:24:66:3a:2f:28:bb:c4:bb:d8:b6:4c:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:D8:13:AA:E1:18:D9:17:A9:D3:02:FF:D8:AF:3B:79:94:7A:09
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/QP7YE6rhGNkXqdMC_9ivO3mUegk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.152.0/24
IPv6:
2001:678:b9c::/48
2a07:b1c0::/29
Signature Algorithm: sha256WithRSAEncryption
11:ab:63:ff:be:11:6b:e3:96:83:67:1d:7f:3f:aa:b8:74:d3:
55:44:3c:a6:e8:a8:ee:a8:b4:4d:e1:d9:13:fd:e1:a3:eb:2b:
1f:05:83:46:fd:1c:fa:2c:d4:57:63:7d:c3:a6:29:5f:fc:eb:
4c:79:d3:48:57:f8:65:e9:32:98:e3:60:90:7b:9f:e1:67:42:
bb:9d:23:df:8f:fd:f6:06:30:4b:75:6f:03:ff:1f:c7:96:4f:
97:f1:91:52:5f:54:04:8d:2e:a8:8b:c5:e7:f6:e3:5c:ef:4e:
c2:2a:f1:62:6a:70:1d:a9:12:0c:01:f1:75:3c:23:c3:62:22:
4c:99:40:0c:72:0b:c0:9f:5e:3d:f3:1e:0e:00:56:d8:e3:ea:
1f:d8:18:b0:6a:5f:b8:8f:2a:39:55:c7:cd:6a:a5:41:7e:c2:
78:7f:d4:e5:38:c2:27:3d:15:e2:bd:ff:d7:81:61:09:1e:0a:
5d:75:f8:a1:11:4e:f4:98:34:e8:67:b1:5a:29:dd:dd:e2:49:
f6:b1:68:56:95:08:89:53:cc:49:4f:9f:7e:24:f9:9a:cb:a7:
d9:e1:e3:ce:6a:85:aa:ec:c2:3f:ea:42:ae:32:e5:a7:77:eb:
1f:7f:0c:a4:a5:3a:a1:52:b8:9d:3e:a4:3b:d2:fe:68:1f:69:
0e:13:8e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:07:21 2025 by rpki-client