Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/qwX6nOrWDCdJ2ChcYo_FlUo9358.roa
File: qwX6nOrWDCdJ2ChcYo_FlUo9358.roa (raw, json)
Hash identifier: 6/DNhjHhr5UMjHSyj4Zm9KTo/594qOQNI4iGYnKpGJU=
Subject key identifier: AB:05:FA:9C:EA:D6:0C:27:49:D8:28:5C:62:8F:C5:95:4A:3D:DF:9F
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0198BE712B04A237C45D4645217EECC1AB85
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/qwX6nOrWDCdJ2ChcYo_FlUo9358.roa
Signing time: Mon 18 Aug 2025 18:29:04 +0000
ROA not before: Mon 18 Aug 2025 18:29:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 185.65.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Aug 2025 11:32:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:be:71:2b:04:a2:37:c4:5d:46:45:21:7e:ec:c1:ab:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 18 18:29:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab05fa9cead60c2749d8285c628fc5954a3ddf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:2e:f7:7c:5f:9b:9a:e9:bd:3c:e8:22:71:
4e:20:45:80:15:32:9f:d7:b8:ea:54:56:3f:e5:be:
f9:0c:ab:52:74:3b:30:ce:1c:68:3b:c3:8a:c6:49:
2d:d5:ab:d2:ea:db:b0:31:b5:49:83:b2:e7:2f:2f:
68:9b:48:25:a2:95:ad:fc:73:27:a2:7e:5a:11:38:
45:99:da:1f:42:65:68:d1:08:b5:a3:1c:e7:06:b0:
a6:ce:20:f5:aa:0c:21:88:2d:b8:ec:82:38:39:34:
b7:61:d5:d4:c7:70:45:17:a2:d1:8f:38:42:34:47:
2d:bb:cb:26:14:c1:eb:76:09:9c:bd:d6:5d:55:9f:
f0:3b:81:d8:16:88:2b:a8:bb:b9:6c:9b:4a:79:c4:
c3:69:e9:0b:1e:e2:69:02:38:cb:49:ea:bf:82:c8:
a1:a3:ef:ff:3a:b3:73:f4:c4:7a:68:92:aa:c0:1a:
75:b5:b6:3a:af:6e:a7:5b:95:bb:db:6c:42:9d:c8:
6c:b4:91:fa:de:4e:97:1f:6d:68:d3:04:47:6e:7e:
50:60:8e:82:bd:ae:88:96:25:3b:59:6f:05:ce:9a:
c8:82:e7:ab:45:71:ad:f0:a0:e6:8b:7b:d8:1e:08:
29:ed:8f:f3:9e:d1:7d:ab:d9:95:02:a3:f5:9f:cb:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:05:FA:9C:EA:D6:0C:27:49:D8:28:5C:62:8F:C5:95:4A:3D:DF:9F
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/qwX6nOrWDCdJ2ChcYo_FlUo9358.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:20:90:7f:9d:54:52:32:a4:5c:cc:9f:3d:a2:1a:47:59:33:
52:cc:59:7c:03:ce:f5:5c:3b:1c:fd:7a:e2:2e:0d:d6:69:47:
5f:0d:1b:e7:94:c2:a0:cc:f7:49:88:9f:47:e1:ef:f6:17:78:
72:2f:7f:14:c7:4f:2b:df:12:4d:96:b6:eb:0e:3d:23:1d:fb:
ae:6b:60:70:58:9d:b0:f6:18:a6:f3:89:9b:f5:68:95:a6:0a:
42:f1:2b:ab:2a:c1:54:14:85:49:df:7f:cd:3d:d9:1a:35:cb:
55:6d:bb:9a:f3:65:65:33:0d:67:dc:00:df:11:eb:a1:d6:5a:
b6:14:e9:6d:c4:8d:4b:44:df:41:c5:9f:ff:ce:a2:74:e0:4a:
ed:af:a7:ca:62:da:2c:73:b3:2f:e9:50:cd:83:77:68:b0:69:
14:13:d8:c4:e0:51:e2:50:a0:f1:d8:18:fe:b9:d8:94:f9:66:
99:f9:08:e7:66:81:fc:96:c5:32:58:8c:c1:07:00:b8:65:ef:
7b:8d:b7:69:4d:be:ae:42:6d:44:d5:53:de:0c:34:07:78:0c:
70:a8:cb:9a:48:d4:ae:9a:62:47:e5:ab:b7:39:3b:77:8e:00:
14:5e:f2:32:6a:f9:dc:de:1f:43:c9:37:f4:71:c8:d7:36:aa:
9d:31:aa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:29 2025 by rpki-client