Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qcR-0-YA_VV3sUTS8ywECwW7YTQ.roa
File: qcR-0-YA_VV3sUTS8ywECwW7YTQ.roa (raw, json)
Hash identifier: e7D9M9fOJTt7Rxo1Mdw80Hto6Fpn0RwMPTzuZZvxiTQ=
Subject key identifier: A9:C4:7E:D3:E6:00:FD:55:77:B1:44:D2:F3:2C:04:0B:05:BB:61:34
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01967B0AD8E6C43E0C7E84FBF342C791938D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qcR-0-YA_VV3sUTS8ywECwW7YTQ.roa
Signing time: Mon 28 Apr 2025 06:17:10 +0000
ROA not before: Mon 28 Apr 2025 06:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.8.0/22 maxlen: 22
87.229.11.0/24 maxlen: 24
87.229.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 09:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:0a:d8:e6:c4:3e:0c:7e:84:fb:f3:42:c7:91:93:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 28 06:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9c47ed3e600fd5577b144d2f32c040b05bb6134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:85:bf:69:3c:8a:55:dc:5e:05:f2:96:5d:
c1:ef:2f:45:65:b3:ce:51:f5:30:68:95:8c:45:2c:
66:ed:de:6c:c4:63:ab:04:4d:ce:ee:86:15:52:93:
95:e4:3e:a2:de:37:23:b5:83:52:f5:11:c1:06:22:
75:df:68:07:3a:6e:3e:51:0f:76:04:04:5b:1a:dd:
49:2b:ad:9e:67:da:82:a7:6a:dd:16:81:ae:f8:7f:
9b:4d:c5:16:10:69:91:3c:ab:65:1c:5e:2b:0c:16:
05:40:a5:4e:e4:a2:05:4c:97:c7:88:66:f4:bb:40:
2e:94:0f:fd:21:11:2c:d2:1c:27:04:c6:d6:45:6e:
83:0c:aa:82:64:98:9c:cf:d8:af:0d:c7:49:fb:b1:
69:72:03:25:c2:43:c6:4b:6d:7e:88:ee:91:96:64:
5c:55:9e:28:75:df:74:46:24:11:db:3f:2c:d2:ed:
14:b7:5c:f6:c6:6c:68:61:a0:a2:dc:24:1b:34:0d:
49:89:66:48:2b:e3:21:70:23:50:81:59:a7:78:09:
0a:6b:58:f7:95:a0:b3:15:62:12:16:88:05:db:e4:
1c:54:6e:67:69:9c:2d:3f:72:1d:fc:0b:63:b6:6d:
38:d4:00:05:b8:09:de:6c:7b:6e:2a:20:a0:04:2f:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C4:7E:D3:E6:00:FD:55:77:B1:44:D2:F3:2C:04:0B:05:BB:61:34
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qcR-0-YA_VV3sUTS8ywECwW7YTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.8.0/22
87.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:75:0b:eb:b0:ec:58:c2:36:98:8d:f2:8a:95:a6:8d:8d:aa:
ff:6a:da:86:58:1a:b7:91:9e:88:48:86:22:f3:c0:01:41:64:
fe:31:fb:34:9b:dc:d4:1d:c2:54:a0:ed:ce:aa:e8:a8:25:39:
f5:97:17:f0:a9:59:ef:e4:aa:c2:be:0e:d7:33:c4:67:be:39:
2f:10:0d:1c:24:16:af:44:19:44:ff:55:78:6b:7e:73:fa:41:
16:ed:c9:78:3d:8c:78:61:c9:d3:c7:bd:80:ca:36:59:f8:8e:
67:12:02:12:98:0f:f8:86:cd:e0:58:94:a2:66:52:71:1a:42:
6b:22:87:5c:71:d6:b5:28:37:8d:9e:1d:ed:58:56:42:db:7a:
06:dc:3d:99:65:d0:c6:ae:cc:09:8c:bf:a9:6c:13:a6:4f:16:
9c:bc:ad:fb:7e:ff:a1:a4:8e:37:a3:5f:0a:d9:81:11:57:0e:
6d:34:c0:78:a2:77:0d:3f:7a:c7:d3:aa:9e:db:9c:e4:d5:24:
0a:41:0c:34:d7:cc:64:3d:0c:cd:e8:5e:49:1e:14:0e:e6:6b:
fb:3d:b8:ba:ef:0a:f6:3a:64:f7:7c:99:67:09:a4:09:61:51:
3f:7b:9a:d1:d0:87:aa:da:18:fa:14:3a:70:bc:2e:28:59:a4:
0a:a9:64:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:35:23 2025 by rpki-client