Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/QTq20Vl8PMLHTtdja1iwp8OZndM.roa
File: QTq20Vl8PMLHTtdja1iwp8OZndM.roa (raw, json)
Hash identifier: Am8GimC0HucQBy9b2NdDbDPNVnTsS5m1CMI9xgL1kOU=
Subject key identifier: 41:3A:B6:D1:59:7C:3C:C2:C7:4E:D7:63:6B:58:B0:A7:C3:99:9D:D3
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0193905D8BEE9282E0B2394AE9C9FC82E3E1
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/QTq20Vl8PMLHTtdja1iwp8OZndM.roa
Signing time: Wed 04 Dec 2024 06:31:09 +0000
ROA not before: Wed 04 Dec 2024 06:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197343
IP address blocks: 5.56.128.0/22 maxlen: 22
5.57.34.0/24 maxlen: 24
5.57.35.0/24 maxlen: 24
37.32.40.0/22 maxlen: 24
37.32.42.0/24 maxlen: 24
185.212.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 05:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:5d:8b:ee:92:82:e0:b2:39:4a:e9:c9:fc:82:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 4 06:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=413ab6d1597c3cc2c74ed7636b58b0a7c3999dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:94:4b:fb:1f:bc:95:cf:8f:1f:31:64:64:
3c:f9:ba:c2:6f:f5:79:50:28:49:84:24:99:30:22:
dd:a6:c2:0d:63:02:c4:cb:87:ee:20:69:13:c5:4a:
36:ae:8b:4e:5f:d6:6c:7c:11:5e:1b:38:9f:dc:ea:
1b:c0:79:d0:c1:01:36:55:4d:72:65:26:47:93:4d:
b9:56:2a:c3:ce:ce:84:19:68:09:2c:56:f1:2c:43:
d9:34:af:05:93:86:96:22:de:c1:2d:cc:1f:12:3a:
d9:2c:f3:59:c6:37:f8:d4:92:c8:9a:4c:66:93:29:
95:00:75:e9:c8:3b:5c:75:74:5a:a0:66:d6:32:99:
9d:ee:12:8a:d0:aa:e9:56:01:d8:2d:f9:a6:24:2a:
c6:1b:be:c7:78:49:a4:70:cf:95:6a:c3:c3:b1:39:
97:c6:46:7b:15:0e:6d:1e:13:78:40:9d:4a:b2:e4:
08:09:3a:e6:ad:d3:1f:5f:32:bc:85:9f:41:4f:d3:
41:2b:fe:45:7d:1c:26:14:d1:9a:00:48:1c:89:14:
1a:ab:ba:12:75:fe:8a:1b:0c:02:42:ee:c1:f9:60:
87:40:22:14:8c:43:d5:13:6b:95:f9:2e:54:f6:cf:
c2:73:72:0d:0d:61:26:0b:ed:10:a1:db:cc:55:6d:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3A:B6:D1:59:7C:3C:C2:C7:4E:D7:63:6B:58:B0:A7:C3:99:9D:D3
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/QTq20Vl8PMLHTtdja1iwp8OZndM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.128.0/22
5.57.34.0/23
37.32.40.0/22
185.212.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5c:4c:1d:02:6c:c5:13:c8:d4:4f:1c:45:99:f1:4c:69:e8:
0b:65:d5:a4:2a:bf:4f:ae:4a:8d:0d:d2:8c:0d:4e:47:00:ee:
23:cf:9d:d3:65:60:31:45:e9:f4:2d:30:5a:e6:b9:b6:1e:5e:
7f:79:9b:e1:d0:05:4d:c7:09:b7:16:99:86:67:90:23:ca:6a:
16:48:7b:89:e1:d8:69:83:25:2c:1b:70:cf:67:2a:fa:fc:b5:
b3:2e:9c:66:7c:33:7b:85:53:60:e3:38:f0:39:b3:2d:3a:d8:
82:bd:48:3d:e7:4d:11:53:94:32:49:c2:77:69:d5:2c:d1:9b:
b1:dd:57:e9:9e:90:1d:31:64:de:3e:14:b8:60:05:88:15:9d:
53:45:e7:bb:9f:8a:3f:9c:0f:74:02:e8:96:30:dc:8c:1b:15:
49:5b:3c:92:c6:ee:4d:79:10:79:8e:c3:40:64:bf:2c:9e:56:
02:51:8c:05:51:ea:d7:2e:ea:50:c8:50:17:74:b2:85:c4:2f:
2e:e7:af:95:07:f5:79:7b:62:75:eb:f7:81:f6:a2:c8:8f:04:
81:03:bb:c0:3a:98:bf:db:37:c8:73:1a:eb:a8:30:04:1e:5f:
a2:9a:b3:d9:3d:8c:ce:d3:55:11:d3:0e:5c:87:c7:90:ee:50:
53:63:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:41:26 2025 by rpki-client