Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/Q-yz78GK3I563LIdWtmsKlOqfd4.roa
File: Q-yz78GK3I563LIdWtmsKlOqfd4.roa (raw, json)
Hash identifier: xbyb0VjoW/fd1+vgxgSWbXNWdVum7fIfp4aNylcxk+E=
Subject key identifier: 43:EC:B3:EF:C1:8A:DC:8E:7A:DC:B2:1D:5A:D9:AC:2A:53:AA:7D:DE
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 01954335527EAE5288A662F21B5998DC29FD
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/Q-yz78GK3I563LIdWtmsKlOqfd4.roa
Signing time: Wed 26 Feb 2025 17:02:02 +0000
ROA not before: Wed 26 Feb 2025 17:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47810
IP address blocks: 91.208.144.0/24 maxlen: 24
91.212.213.0/24 maxlen: 24
91.239.206.0/23 maxlen: 23
185.163.201.0/24 maxlen: 24
195.54.178.0/23 maxlen: 23
2a0a:4400::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 27 Feb 2025 08:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:35:52:7e:ae:52:88:a6:62:f2:1b:59:98:dc:29:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Feb 26 17:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43ecb3efc18adc8e7adcb21d5ad9ac2a53aa7dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:69:f2:82:26:fc:bb:3f:47:ed:63:6e:f0:
69:9c:0d:52:de:ac:66:43:50:41:f9:48:df:6d:c3:
54:65:4a:5a:e9:52:13:f9:ea:50:74:f0:0e:69:cd:
4b:2b:41:d6:b2:19:4b:fd:28:9a:8d:4c:d9:46:11:
20:54:cc:61:6f:07:5b:cd:ce:ce:72:96:53:2a:84:
a6:55:9b:28:b4:56:01:bf:5f:f8:8e:a4:2a:8e:3a:
c4:d1:de:ef:fc:79:75:58:24:6e:70:f8:80:b0:46:
13:c0:27:8c:d2:4a:0e:b8:46:e4:1c:c6:6f:5f:1b:
c3:13:de:ec:4f:3b:c8:e5:63:13:12:6b:36:aa:87:
8d:b9:65:9a:4f:f9:53:d8:c0:4c:09:36:b5:fb:c2:
a8:06:d6:6e:cc:a0:58:18:e7:7a:a6:fa:b7:1b:05:
e7:87:07:df:11:fa:0a:d8:53:6f:ec:0e:5b:37:16:
e4:5b:af:0d:17:48:05:ee:1d:6e:e5:e3:33:33:f9:
03:e2:53:8c:4c:c2:34:51:05:fc:17:0f:7c:5c:6d:
a6:91:9b:0b:07:74:9f:a0:24:72:1b:5c:bd:7d:8f:
a9:cf:eb:a2:bb:cc:e6:f4:1f:2e:b8:40:2c:92:58:
b0:a8:69:7a:c5:33:df:2e:9e:cc:c3:d1:cb:86:a7:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EC:B3:EF:C1:8A:DC:8E:7A:DC:B2:1D:5A:D9:AC:2A:53:AA:7D:DE
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/Q-yz78GK3I563LIdWtmsKlOqfd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.144.0/24
91.212.213.0/24
91.239.206.0/23
185.163.201.0/24
195.54.178.0/23
IPv6:
2a0a:4400::/29
Signature Algorithm: sha256WithRSAEncryption
1d:1d:82:8d:41:3a:98:3c:80:ee:ec:95:72:d5:67:f2:33:f6:
d6:32:34:53:33:ab:2f:f6:2c:f9:d3:e7:e4:92:67:d3:c2:c3:
f3:e5:04:12:53:31:18:1e:ba:55:70:6f:1e:4c:82:d4:53:fc:
57:03:d4:33:8c:41:21:f1:e4:bf:db:0b:d2:b0:1c:14:1a:86:
b7:03:bb:a2:69:b4:8c:db:12:0a:29:80:7d:da:17:60:58:8a:
5f:9b:e0:0a:bb:f6:48:33:86:5e:2b:f3:7c:43:23:b1:b6:8b:
0a:45:c5:18:db:76:2b:c4:20:4c:f8:b1:b4:69:17:9a:e1:ee:
44:4b:a1:89:ba:27:c8:e2:ab:7a:57:07:df:5b:b4:b0:cc:65:
80:36:3d:0c:2d:d7:45:ea:90:5e:f3:d4:4c:ea:dc:39:35:13:
a1:65:fc:41:bb:eb:5d:8e:35:3b:b5:91:41:57:05:5e:66:85:
61:17:0f:5e:60:2d:fa:7a:8e:c8:bc:08:2a:69:6f:07:8d:2e:
a1:a2:1a:63:a2:71:0c:7b:f0:d6:28:13:a6:31:46:e6:0b:2b:
d1:e8:38:90:a7:9c:85:ab:4b:af:2a:41:d4:ce:b6:0a:3e:15:
5a:3b:67:63:87:2a:a2:9b:5b:f1:2e:25:fd:6a:23:50:f3:d1:
d2:10:92:2b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZVDNVJ+rlKIpmLyG1mY3Cn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc5NTg5YzFjNDg4OTdkMDliMmQ0ZmVkN2E2NjA0NGE4
NzZlYTMwHhcNMjUwMjI2MTcwMjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2VjYjNlZmMxOGFkYzhlN2FkY2IyMWQ1YWQ5YWMyYTUzYWE3ZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGdp8oIm/Ls/R+1jbvBpnA1S3qxm
Q1BB+UjfbcNUZUpa6VIT+epQdPAOac1LK0HWshlL/SiajUzZRhEgVMxhbwdbzc7O
cpZTKoSmVZsotFYBv1/4jqQqjjrE0d7v/Hl1WCRucPiAsEYTwCeM0koOuEbkHMZv
XxvDE97sTzvI5WMTEms2qoeNuWWaT/lT2MBMCTa1+8KoBtZuzKBYGOd6pvq3GwXn
hwffEfoK2FNv7A5bNxbkW68NF0gF7h1u5eMzM/kD4lOMTMI0UQX8Fw98XG2mkZsL
B3SfoCRyG1y9fY+pz+uiu8zm9B8uuEAskliwqGl6xTPfLp7Mw9HLhqcdAwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFEPss+/BityOetyyHVrZrCpTqn3eMB8GA1UdIwQY
MBaAFKpnlYnBxIiX0JstT+16ZgRKh26jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMt
MTRiNzZiNzZmMmJiLzEvUS15ejc4R0szSTU2M0xJZFd0bXNLbE9xZmQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMtMTRiNzZiNzZmMmJi
LzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAW9CQAwQA
W9TVAwQBW+/OAwQAuaPJAwQBwzayMA0EAgACMAcDBQMqCkQAMA0GCSqGSIb3DQEB
CwUAA4IBAQAdHYKNQTqYPIDu7JVy1WfyM/bWMjRTM6sv9iz50+fkkmfTwsPz5QQS
UzEYHrpVcG8eTILUU/xXA9QzjEEh8eS/2wvSsBwUGoa3A7uiabSM2xIKKYB92hdg
WIpfm+AKu/ZIM4ZeK/N8QyOxtosKRcUY23YrxCBM+LG0aRea4e5ES6GJuifI4qt6
VwffW7SwzGWANj0MLddF6pBe89RM6tw5NROhZfxBu+tdjjU7tZFBVwVeZoVhFw9e
YC36eo7IvAgqaW8HjS6hohpjonEMe/DWKBOmMUbmCyvR6DiQp5yFq0uvKkHUzrYK
PhVaO2djhyqim1vxLiX9aiNQ89HSEJIr
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:43:48 2025 by rpki-client