Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/qP1ZAUTam6Ce2sGae4xyNJ9rxOw.roa
File: qP1ZAUTam6Ce2sGae4xyNJ9rxOw.roa (raw, json)
Hash identifier: JyRZizPXz6fIayFsHqBBp/0lN4k/4p7nctfYCanLYQw=
Subject key identifier: A8:FD:59:01:44:DA:9B:A0:9E:DA:C1:9A:7B:8C:72:34:9F:6B:C4:EC
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0196C4FC4AA0B26BC4E7F346EA3F8F6B67A7
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/qP1ZAUTam6Ce2sGae4xyNJ9rxOw.roa
Signing time: Mon 12 May 2025 14:53:10 +0000
ROA not before: Mon 12 May 2025 14:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48407
IP address blocks: 81.90.16.0/20 maxlen: 20
81.90.18.0/24 maxlen: 24
81.90.19.0/24 maxlen: 24
81.90.31.0/24 maxlen: 24
93.94.50.0/24 maxlen: 24
93.94.53.0/24 maxlen: 24
93.94.55.0/24 maxlen: 24
178.17.48.0/20 maxlen: 20
2a00:8b20::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 13 May 2025 12:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:fc:4a:a0:b2:6b:c4:e7:f3:46:ea:3f:8f:6b:67:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: May 12 14:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8fd590144da9ba09edac19a7b8c72349f6bc4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:9b:13:44:5c:94:fb:ce:2d:be:e6:d7:ad:
9f:4d:b6:6a:e5:4a:36:cd:fc:be:ec:13:f7:73:23:
3c:77:a0:25:66:97:0c:74:20:5b:cb:fd:63:d3:8d:
f6:ba:26:bd:40:72:d1:b4:9c:04:33:e4:cf:38:f3:
5f:d1:f2:f1:32:33:4c:3b:17:a7:ef:77:21:06:f0:
11:71:3b:e3:18:96:0e:c6:90:d9:5b:52:96:60:83:
c3:31:03:4d:f9:d6:e5:8c:60:a8:34:df:52:b2:95:
6e:f7:8a:df:24:cd:03:21:5a:f9:ab:af:34:94:9b:
8c:62:ae:02:b9:6a:56:4b:b5:91:89:7e:68:e5:86:
9a:59:50:ce:8e:80:83:97:7f:02:7e:9c:10:3a:16:
4e:40:d5:50:a5:28:b6:f0:ad:3c:01:e8:d7:6b:46:
89:4f:51:58:77:9a:64:0f:b7:c6:1a:dc:1c:20:26:
1f:69:b5:16:c2:72:8f:9a:58:41:8f:ab:10:d6:ff:
8c:97:f2:6b:f6:3a:5a:d4:52:61:9c:30:de:fa:42:
bc:30:53:25:1a:42:33:ac:dc:49:f7:61:76:f0:59:
db:01:8d:ff:7e:c9:87:62:97:42:fd:9f:0f:41:2b:
62:c0:35:f4:9f:d7:7e:83:74:6d:24:56:40:e6:0c:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FD:59:01:44:DA:9B:A0:9E:DA:C1:9A:7B:8C:72:34:9F:6B:C4:EC
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/qP1ZAUTam6Ce2sGae4xyNJ9rxOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.16.0/20
93.94.50.0/24
93.94.53.0/24
93.94.55.0/24
178.17.48.0/20
IPv6:
2a00:8b20::/32
Signature Algorithm: sha256WithRSAEncryption
3e:5d:75:33:58:d6:12:d3:c5:0c:a1:0b:af:dc:99:75:60:10:
9b:9b:f0:60:36:0d:81:3e:c7:2c:ee:6a:7e:a8:83:2c:df:a6:
04:f7:d1:a9:de:45:f8:e2:8c:f0:df:02:29:44:4a:90:b0:34:
ab:fd:1b:14:77:38:54:bb:8c:58:07:a6:d3:9c:be:28:54:df:
ab:23:cd:8e:54:04:43:7f:f2:72:60:10:7e:94:ac:34:1d:a6:
4f:05:be:36:a7:68:95:8c:b5:fc:9c:45:b2:85:66:68:c4:c4:
e0:94:ce:f9:7a:93:3b:14:5c:d9:8a:89:4d:ea:20:97:fa:8e:
98:62:c8:5e:a3:2f:13:fc:3d:2e:3c:3c:38:73:ea:de:83:f8:
cf:b8:87:8e:f2:ad:f0:ce:43:eb:8d:10:c5:4f:98:2a:b9:aa:
99:af:e1:97:32:a7:21:9f:0a:99:5e:eb:5b:65:66:e4:dd:a9:
1d:e0:b9:39:25:ae:c4:60:50:44:48:27:0b:f3:96:f0:93:83:
b8:19:05:1a:d0:de:17:36:66:a7:a3:5b:ab:22:96:25:c7:6b:
4b:e2:43:e7:fa:f6:c4:51:92:01:95:4c:b4:f9:83:2b:99:03:
0e:24:57:43:89:64:94:0a:3b:33:f6:60:49:cb:34:b8:06:fe:
fe:14:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:34:30 2025 by rpki-client