Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qJ6LsIZs0An65KQ-32ZoqgaYtXA.roa
File: qJ6LsIZs0An65KQ-32ZoqgaYtXA.roa (raw, json)
Hash identifier: +3V1ilXCjlIdTXIYtWbtmFWSKddFgeotaja9u99HXN8=
Subject key identifier: A8:9E:8B:B0:86:6C:D0:09:FA:E4:A4:3E:DF:66:68:AA:06:98:B5:70
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019633088B2A27DF3C1C3BC791184810BF24
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qJ6LsIZs0An65KQ-32ZoqgaYtXA.roa
Signing time: Mon 14 Apr 2025 06:41:59 +0000
ROA not before: Mon 14 Apr 2025 06:41:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51889
IP address blocks: 85.133.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 12:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:08:8b:2a:27:df:3c:1c:3b:c7:91:18:48:10:bf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 14 06:41:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a89e8bb0866cd009fae4a43edf6668aa0698b570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:f5:c1:a9:72:59:0b:b3:eb:7a:98:3f:80:
6c:3b:1a:c6:be:bd:57:9d:07:28:0f:cd:7a:ef:4a:
4c:71:41:18:b3:db:67:81:9c:c7:bf:d6:df:94:23:
16:50:73:6b:8d:23:fc:ef:38:63:9a:eb:1a:7a:79:
90:89:a7:e3:70:bb:94:d1:eb:62:c0:ed:d9:48:e7:
26:41:22:70:53:93:34:6c:e4:ff:86:05:2b:1e:7a:
c0:19:8b:27:78:01:1b:89:99:52:cf:9b:c3:cb:e2:
68:08:1c:01:b7:b2:89:7a:9b:f7:c6:5c:f2:a1:dd:
74:b4:21:78:04:99:dc:44:80:d9:82:20:cf:fd:4e:
64:0c:47:97:f1:ae:3b:90:66:c8:bf:de:b4:01:8a:
de:f0:dc:9d:54:5b:80:3d:01:e2:b8:e4:a5:fd:3d:
ac:a9:de:5f:82:95:fa:50:2b:b1:42:3d:61:b9:61:
f3:a7:e5:6c:1a:2e:07:34:d8:3d:98:74:ce:b0:27:
09:4c:70:2e:ff:99:c4:56:b5:4f:44:9c:be:ba:3a:
53:28:9d:94:56:25:27:ab:58:20:57:26:0e:15:6e:
02:9d:28:ac:65:7b:e2:b3:1f:e5:32:f8:4f:2c:ae:
43:91:0f:25:a0:1b:dc:5b:1c:d3:36:ed:3d:d9:bf:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9E:8B:B0:86:6C:D0:09:FA:E4:A4:3E:DF:66:68:AA:06:98:B5:70
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qJ6LsIZs0An65KQ-32ZoqgaYtXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ea:d0:6d:26:9a:96:3c:bf:d5:09:f9:8d:57:7f:0b:f3:41:
c6:0f:48:47:14:79:ee:38:62:c6:47:33:41:59:87:b7:c8:4b:
44:3f:b9:90:2d:0c:e3:4b:e8:44:8f:67:9c:6b:de:a7:1b:7f:
e4:f8:74:bf:3a:a7:b7:31:a4:6c:f5:59:0a:94:bc:40:02:2f:
21:23:10:0c:b8:42:ea:2b:6e:12:01:32:3a:94:12:2b:0a:b3:
42:54:a1:b4:be:d6:9a:c6:52:82:9f:15:eb:5f:dd:9c:85:8f:
b2:1d:23:17:e2:4a:8a:00:34:09:8e:aa:12:a4:93:9e:c5:d1:
d8:39:fc:44:d2:80:46:5f:b9:cd:a4:b2:67:93:72:03:21:3b:
60:1e:f7:6e:76:9f:0c:7b:32:4d:3e:18:d0:8f:93:f6:20:9c:
e5:e1:48:b4:eb:3a:70:c4:d3:48:23:aa:c7:73:e7:1d:18:5f:
be:3a:d1:d9:c7:ff:f6:b9:38:4c:dc:d8:71:20:b3:42:87:86:
31:f3:4e:b5:f9:e7:6b:67:8b:09:eb:53:f7:dc:c5:b5:9d:33:
fc:2d:8e:07:ac:f9:94:8f:7d:01:30:90:08:db:2f:00:1c:cc:
98:59:41:55:ec:a6:c8:f7:7c:cd:42:6c:94:c2:05:72:ad:f6:
a1:57:e3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:28:08 2025 by rpki-client