Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/QJLr_NeXOF64a2Tlxi8C-9R6Jx8.roa
File: QJLr_NeXOF64a2Tlxi8C-9R6Jx8.roa (raw, json)
Hash identifier: cEZay2PdXFbQ0EyC01WFOffwARhmN0jnejTVhPeds5U=
Subject key identifier: 40:92:EB:FC:D7:97:38:5E:B8:6B:64:E5:C6:2F:02:FB:D4:7A:27:1F
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019669AFCA7BC656C5AC690F25E7B60CA4AB
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/QJLr_NeXOF64a2Tlxi8C-9R6Jx8.roa
Signing time: Thu 24 Apr 2025 21:24:10 +0000
ROA not before: Thu 24 Apr 2025 21:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212889
IP address blocks: 185.164.24.0/24 maxlen: 24
185.164.25.0/24 maxlen: 24
185.164.28.0/24 maxlen: 24
185.164.30.0/24 maxlen: 24
185.203.108.0/24 maxlen: 24
185.203.109.0/24 maxlen: 24
185.203.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 22:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:69:af:ca:7b:c6:56:c5:ac:69:0f:25:e7:b6:0c:a4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Apr 24 21:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4092ebfcd797385eb86b64e5c62f02fbd47a271f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:4d:24:df:60:a3:c4:c0:07:b6:5a:2e:92:
89:c8:8a:b2:f3:c4:31:af:50:d3:8f:a5:02:b6:37:
e4:47:af:50:4c:9e:24:11:fd:27:1c:1d:5c:8e:dc:
30:c9:76:aa:a0:c9:da:9c:3a:1c:a0:8c:e8:0b:6b:
ea:54:bd:73:94:3a:71:eb:0b:24:f4:08:94:70:b7:
ae:0d:dc:c0:5c:7d:6c:0c:1f:08:16:6b:08:20:95:
e4:13:77:10:0d:b7:71:67:cc:d2:88:48:66:0d:3a:
b4:b3:27:b6:d4:9e:26:43:9c:ee:ef:53:8c:40:2c:
49:51:83:23:57:1b:fc:0c:75:2c:04:ac:aa:02:50:
eb:c8:41:ba:c6:dd:02:c4:1c:99:f1:ce:cf:de:8e:
71:d0:ec:3f:1e:e4:56:82:17:3c:c0:94:5e:57:8b:
d4:81:5b:f2:b9:32:ba:e9:70:9b:e8:18:fe:7f:d2:
4f:88:d2:5d:74:d5:59:d4:fa:8c:3f:05:35:05:f7:
4b:d4:05:d2:7f:57:33:1c:62:5b:03:1a:3d:5b:81:
b7:82:46:ff:7f:fd:7e:84:56:64:e8:5b:fd:57:25:
37:a2:99:b5:86:53:b2:0b:92:a6:54:3c:c7:60:ff:
c2:0e:68:2e:a0:4a:83:af:84:cb:cf:bd:b4:07:68:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:92:EB:FC:D7:97:38:5E:B8:6B:64:E5:C6:2F:02:FB:D4:7A:27:1F
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/QJLr_NeXOF64a2Tlxi8C-9R6Jx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.24.0/23
185.164.28.0/24
185.164.30.0/24
185.203.108.0/23
185.203.111.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:79:8a:c5:88:79:89:33:55:95:f5:77:00:68:6e:a3:17:4e:
0a:e6:4c:b4:a1:e1:0b:45:fc:05:35:94:62:6c:8c:38:e8:9e:
dc:d3:6d:7c:d7:fd:e4:84:fb:74:e2:a8:73:02:43:2a:fd:04:
4c:0f:7b:5b:4d:93:51:03:f0:f4:1e:17:a8:64:35:9f:e5:15:
d5:15:c2:56:b0:db:ae:79:bd:92:5c:f1:d5:26:be:90:32:1f:
01:f8:90:9d:36:c7:1c:be:04:91:fc:64:88:60:21:17:c9:a2:
0b:57:cd:c5:f0:64:05:36:50:65:0e:0d:5e:d3:64:4b:5a:9e:
52:71:59:66:83:16:ed:eb:b5:b4:cc:75:10:9a:8c:b9:5d:a3:
ea:7d:77:39:36:77:85:5a:63:a3:89:58:24:d8:f2:d0:b5:23:
07:bc:34:9b:1e:08:92:30:85:6f:63:38:e6:09:c3:3f:79:75:
90:71:f0:fa:2c:a1:29:1d:6d:f7:7a:b8:a1:ee:40:a6:7b:f3:
e7:ab:6d:44:1f:bc:06:8a:16:39:2a:b2:c6:61:6a:92:25:81:
b2:c1:77:ed:f7:41:65:43:4e:bc:bd:80:10:6d:d1:95:e0:36:
50:14:a5:62:0c:e8:c3:91:96:7f:5d:90:5b:0c:50:58:e5:42:
92:74:02:0b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZZpr8p7xlbFrGkPJee2DKSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OWVmZTZlZjk3NzI4YTQyODJhZTJjN2IwNWEyNDA1MDY1
NzFmMWMwHhcNMjUwNDI0MjEyNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDkyZWJmY2Q3OTczODVlYjg2YjY0ZTVjNjJmMDJmYmQ0N2EyNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jdNJN9go8TAB7ZaLpKJyIqy88Qx
r1DTj6UCtjfkR69QTJ4kEf0nHB1cjtwwyXaqoMnanDocoIzoC2vqVL1zlDpx6wsk
9AiUcLeuDdzAXH1sDB8IFmsIIJXkE3cQDbdxZ8zSiEhmDTq0sye21J4mQ5zu71OM
QCxJUYMjVxv8DHUsBKyqAlDryEG6xt0CxByZ8c7P3o5x0Ow/HuRWghc8wJReV4vU
gVvyuTK66XCb6Bj+f9JPiNJddNVZ1PqMPwU1BfdL1AXSf1czHGJbAxo9W4G3gkb/
f/1+hFZk6Fv9VyU3opm1hlOyC5KmVDzHYP/CDmguoEqDr4TLz720B2ja3wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFECS6/zXlzheuGtk5cYvAvvUeicfMB8GA1UdIwQY
MBaAFJWe/m75dyikKCrix7BaJAUGVx8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUt
YTA5MjY2YmI0ZDhjLzEvUUpMcl9OZVhPRjY0YTJUbHhpOEMtOVI2Sng4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUtYTA5MjY2YmI0ZDhj
LzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBuaQYAwQA
uaQcAwQAuaQeAwQBuctsAwQAuctvMA0GCSqGSIb3DQEBCwUAA4IBAQAeeYrFiHmJ
M1WV9XcAaG6jF04K5ky0oeELRfwFNZRibIw46J7c02181/3khPt04qhzAkMq/QRM
D3tbTZNRA/D0HheoZDWf5RXVFcJWsNuueb2SXPHVJr6QMh8B+JCdNsccvgSR/GSI
YCEXyaILV83F8GQFNlBlDg1e02RLWp5ScVlmgxbt67W0zHUQmoy5XaPqfXc5NneF
WmOjiVgk2PLQtSMHvDSbHgiSMIVvYzjmCcM/eXWQcfD6LKEpHW33erih7kCme/Pn
q21EH7wGihY5KrLGYWqSJYGywXft90FlQ068vYAQbdGV4DZQFKViDOjDkZZ/XZBb
DFBY5UKSdAIL
-----END CERTIFICATE-----
Generated at Wed May 7 12:42:04 2025 by rpki-client