Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/QFOBAQLACbuLvNoizSBdRdMwfgo.roa
File: QFOBAQLACbuLvNoizSBdRdMwfgo.roa (raw, json)
Hash identifier: UR8RkJiiHbOJHGa3b5uZcVWn9kCvRKt2t/B88+yUgOA=
Subject key identifier: 40:53:81:01:02:C0:09:BB:8B:BC:DA:22:CD:20:5D:45:D3:30:7E:0A
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0194CB80D8BBB1CFB6AB20885DE2DA883FB3
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/QFOBAQLACbuLvNoizSBdRdMwfgo.roa
Signing time: Mon 03 Feb 2025 11:10:06 +0000
ROA not before: Mon 03 Feb 2025 11:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 91.132.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 11:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:80:d8:bb:b1:cf:b6:ab:20:88:5d:e2:da:88:3f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Feb 3 11:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4053810102c009bb8bbcda22cd205d45d3307e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:84:d9:07:db:f2:35:37:45:c2:ec:cc:66:
7b:9e:b1:76:42:86:4e:5f:9a:ee:d8:82:5a:e0:a1:
48:c0:aa:3d:ee:ba:b0:b6:40:2b:d0:0b:08:e1:d0:
b5:15:ce:4c:e2:4d:37:1b:ea:a3:6b:36:65:28:8d:
f9:01:4d:aa:e7:8c:25:89:aa:41:4b:e8:23:74:42:
99:65:08:b9:63:ca:4a:db:87:dc:48:0c:43:e9:93:
35:c5:01:53:45:0e:1a:3b:65:a1:8c:d2:af:98:90:
9e:06:f1:30:80:0e:88:62:fb:08:23:d5:e3:42:65:
e2:1e:d5:89:6f:23:76:3b:00:fc:50:b7:7f:87:6d:
d6:c7:55:61:07:7d:e4:a9:df:78:2f:88:3c:59:f4:
30:07:c2:cb:c1:fb:40:04:b2:4f:77:be:45:71:90:
2a:f8:6f:f3:9a:43:96:0c:51:12:1e:94:b0:f5:6c:
5a:75:ac:ae:b5:51:9d:32:13:1c:b6:6f:4e:5a:2e:
be:ed:fd:e0:e7:7d:56:39:ec:cd:fb:8f:b0:a1:1f:
b7:d4:c5:4a:f4:fe:91:98:be:67:e4:d3:eb:3d:d7:
1a:b0:9e:13:58:54:c1:9e:e4:79:73:a3:f4:cb:7c:
cb:9a:7d:05:c2:d7:cf:1c:b2:fd:4d:2f:59:c1:6c:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:53:81:01:02:C0:09:BB:8B:BC:DA:22:CD:20:5D:45:D3:30:7E:0A
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/QFOBAQLACbuLvNoizSBdRdMwfgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.160.0/22
Signature Algorithm: sha256WithRSAEncryption
44:e8:d7:64:50:7a:08:83:46:5d:fb:25:78:ee:f9:f7:5b:fd:
d5:46:f1:a9:59:32:7e:cc:12:cd:f1:d5:fb:03:87:71:72:fc:
fc:05:15:de:4a:a2:74:32:0c:3e:e2:6f:a4:11:98:b6:75:51:
3f:db:1f:f0:b5:51:00:7d:f7:ea:d8:37:ee:e4:d1:fb:96:35:
fc:69:d3:d8:22:06:b2:4a:83:fe:a6:12:50:a2:9b:14:8b:60:
0f:97:ba:2a:0a:d6:31:c4:cd:e0:e6:5d:42:d8:5d:60:5e:f0:
f9:19:a7:e5:22:97:6b:f5:5b:2e:5c:f4:ea:35:f4:ac:c4:e2:
a0:8b:33:e1:7c:74:c2:78:ef:90:78:9d:73:09:c4:a8:bb:d8:
c4:0b:a0:58:73:8e:8c:50:bc:ef:74:e0:d0:85:8b:8e:b6:71:
7b:be:25:7f:a6:d4:93:d0:98:b5:d3:41:47:c7:bf:3b:d4:c7:
27:51:e2:99:75:5f:2a:e6:ba:dc:81:75:f0:9f:3b:6b:5f:c0:
3b:e0:85:23:a2:8e:93:9f:c6:7f:ed:f2:7f:68:87:cc:0e:fb:
84:06:24:29:d0:03:64:38:36:01:49:9d:47:74:22:95:8e:55:
e2:c9:91:a4:7f:30:90:68:d2:cb:3e:ff:7a:35:1d:a9:5b:9e:
5a:b0:b1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:24 2025 by rpki-client