Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/QnpHPqmVPPvqKai9d_q4Z2xrxa4.roa
File: QnpHPqmVPPvqKai9d_q4Z2xrxa4.roa (raw, json)
Hash identifier: Qvme4yifN27Hzkd9WdZ0YqQOwFA7xYOJZuH+t4DLveU=
Subject key identifier: 42:7A:47:3E:A9:95:3C:FB:EA:29:A8:BD:77:FA:B8:67:6C:6B:C5:AE
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 0193106086198686F338B4033F4CD77F8E88
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/QnpHPqmVPPvqKai9d_q4Z2xrxa4.roa
Signing time: Sat 09 Nov 2024 10:03:01 +0000
ROA not before: Sat 09 Nov 2024 10:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 188.208.196.0/23 maxlen: 23
2a06:f940::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 09 Nov 2024 11:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:60:86:19:86:86:f3:38:b4:03:3f:4c:d7:7f:8e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Nov 9 10:03:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=427a473ea9953cfbea29a8bd77fab8676c6bc5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:cf:72:2f:48:9b:2f:bb:83:86:d7:f4:a0:
6e:ac:d9:d2:15:49:49:87:54:09:7e:88:08:88:c0:
56:07:b8:77:58:6a:30:9f:c5:0a:22:80:48:fc:e0:
7f:74:a1:fe:c1:51:6c:6a:19:77:00:f9:5d:9c:34:
8c:72:10:ac:c8:58:be:67:43:dc:22:fd:6a:c3:ea:
77:de:c3:4e:e9:fb:7a:9d:0a:0c:e9:a7:00:0d:03:
e1:b2:18:3d:c3:d0:d2:51:3d:79:40:4b:5f:6b:50:
8d:0f:b6:65:95:c2:e7:50:28:2d:58:03:30:27:36:
d2:dd:df:19:b2:d4:3c:e7:fe:2c:8f:9e:a4:eb:e1:
b2:b4:ac:aa:4c:19:75:05:ed:a9:79:ea:bf:4f:99:
78:30:d5:1f:ce:33:c8:8e:1f:0a:1e:dd:80:c7:c4:
29:e1:5e:7a:14:cb:35:df:eb:2c:33:45:4b:48:4b:
12:11:f1:ac:31:94:70:0d:d2:6f:20:8d:e6:c8:fd:
fb:0d:9c:a1:86:02:ea:27:55:23:30:44:d3:33:c7:
4e:2b:e2:56:28:34:62:13:80:61:f6:dc:31:bd:d7:
d8:3e:b1:cf:25:de:a9:08:9c:4e:11:3c:fd:e4:ad:
cc:58:24:f7:1d:9e:2e:ae:81:54:f6:eb:11:e8:54:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7A:47:3E:A9:95:3C:FB:EA:29:A8:BD:77:FA:B8:67:6C:6B:C5:AE
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/QnpHPqmVPPvqKai9d_q4Z2xrxa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.196.0/23
IPv6:
2a06:f940::/48
Signature Algorithm: sha256WithRSAEncryption
c0:c3:39:42:66:b9:7a:df:e2:3e:bf:1b:81:90:73:62:57:a6:
9e:23:c6:62:f8:0b:80:6b:9a:f3:33:d1:b0:d2:ec:c7:ac:39:
77:91:66:98:62:42:c7:a3:b1:1d:b3:7c:e7:ed:81:89:51:54:
98:ea:cd:cf:c4:3a:4d:d4:97:0c:a2:0e:27:c7:eb:ed:f0:69:
fb:f1:b1:24:55:58:ed:ef:a5:2c:b1:13:0b:d1:c1:ac:71:d7:
33:e5:50:e8:ff:ff:a9:9a:09:50:f1:25:13:26:4b:4d:88:8a:
f0:a8:f7:18:dd:27:85:dd:00:ab:4f:a6:c4:58:84:ba:dc:3e:
b6:12:1e:82:ab:1d:58:03:f5:9e:36:dd:4c:a5:2f:f7:f9:71:
35:c6:13:d6:4b:97:3a:54:af:25:39:ff:f9:f3:d6:f2:27:e5:
40:0e:11:33:11:1d:9d:f1:b2:b9:b7:86:4a:67:a1:1d:d2:24:
a7:0d:c2:fd:a8:30:fe:bb:90:f1:74:00:47:fe:2e:bf:90:00:
57:8c:df:6b:d8:36:98:ab:3e:4e:d3:bc:d1:ed:7b:9f:a2:dd:
6e:ff:73:64:d9:9c:c8:ba:09:1b:11:62:a7:89:78:42:17:ea:
14:ae:9d:cf:a4:8b:c1:96:94:cb:2e:b0:e2:dc:d4:2e:70:7c:
c6:f2:07:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:19 2025 by rpki-client