Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qe-eeanOau-e7fltgJTIHcHt05Q.roa
File: qe-eeanOau-e7fltgJTIHcHt05Q.roa (raw, json)
Hash identifier: Q41cRFKqCqeiakno3rpv5S/oSMHg9pHJiXYODZiM68o=
Subject key identifier: A9:EF:9E:79:A9:CE:6A:EF:9E:ED:F9:6D:80:94:C8:1D:C1:ED:D3:94
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197A3280DD2CF3FD8D02755C7EE54AFEC8F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qe-eeanOau-e7fltgJTIHcHt05Q.roa
Signing time: Tue 24 Jun 2025 18:16:40 +0000
ROA not before: Tue 24 Jun 2025 18:16:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 2a09:17c0:b19a::/48 maxlen: 48
2a0e:1a83:88::/48 maxlen: 48
2a0f:1206:77::/48 maxlen: 48
2a0f:1540::/29 maxlen: 29
2a0f:1640::/29 maxlen: 29
2a0f:1940::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:2940::/29 maxlen: 29
2a0f:2a40::/29 maxlen: 29
2a0f:2dc0::/29 maxlen: 29
2a0f:2e40::/29 maxlen: 29
2a0f:30c0::/29 maxlen: 29
2a0f:3140::/29 maxlen: 29
2a0f:3540::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a0f:e1c0:3::/48 maxlen: 48
2a0f:e1c7:100::/48 maxlen: 48
2a0f:e200:5::/48 maxlen: 48
2a0f:e202:97::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:ea40:8::/48 maxlen: 48
2a0f:ea44:88::/48 maxlen: 48
2a0f:ea47:ff49::/48 maxlen: 48
2a10:33c0::/29 maxlen: 29
2a10:3440::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a11:3240::/29 maxlen: 29
2a11:4800::/29 maxlen: 29
2a11:8700::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a11:efc0::/29 maxlen: 29
2a12:2c80::/29 maxlen: 29
2a12:3f00::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
2a12:5900::/29 maxlen: 29
2a12:5e00::/29 maxlen: 29
2a12:cd00::/29 maxlen: 29
2a12:dc00::/29 maxlen: 29
2a12:ecc0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jun 2025 19:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a3:28:0d:d2:cf:3f:d8:d0:27:55:c7:ee:54:af:ec:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 24 18:16:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9ef9e79a9ce6aef9eedf96d8094c81dc1edd394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:d3:2b:c8:14:74:f1:28:30:40:0f:c0:25:
a5:57:b6:47:86:c8:a0:6b:c2:9c:52:3b:30:60:fd:
24:3d:e7:7b:bb:f8:ae:1a:19:2b:0c:7f:09:be:e2:
28:94:fe:09:01:e8:b4:d0:cb:dd:6e:8d:2b:1f:f3:
cd:84:96:49:07:45:d4:cc:9a:a2:17:c8:7a:07:52:
86:4d:4a:9c:69:28:f0:78:19:32:fb:62:4d:53:41:
9b:b4:36:d2:69:3e:dc:19:ce:4e:04:e7:b0:54:d7:
a9:2a:c2:e0:d4:39:04:ef:6e:a4:a5:4e:17:29:0d:
17:d3:ca:06:7d:c8:60:6b:24:8c:79:ff:34:29:0d:
fb:b9:d9:ba:50:16:4c:57:6a:a4:4f:91:70:94:f6:
81:26:16:cb:cb:10:1b:cf:8d:6d:e8:96:15:3b:89:
59:1e:d9:64:e6:81:81:17:fb:e7:2c:4b:24:0c:66:
62:40:2c:d1:4c:10:46:c2:0b:50:89:1a:d6:d5:c3:
03:a0:3a:1e:b3:65:e6:2f:8c:2c:4d:e0:e6:58:08:
82:ba:06:67:1b:5b:3b:30:e9:4b:35:ee:80:2b:28:
91:ff:be:f2:78:52:e8:24:8a:4a:ce:70:6d:0d:4d:
aa:5d:50:1e:59:64:ed:c5:92:28:7d:d5:74:20:ad:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EF:9E:79:A9:CE:6A:EF:9E:ED:F9:6D:80:94:C8:1D:C1:ED:D3:94
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qe-eeanOau-e7fltgJTIHcHt05Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:b19a::/48
2a0e:1a83:88::/48
2a0f:1206:77::/48
2a0f:1540::/29
2a0f:1640::/29
2a0f:1940::/29
2a0f:2840::/29
2a0f:2940::/29
2a0f:2a40::/29
2a0f:2dc0::/29
2a0f:2e40::/29
2a0f:30c0::/29
2a0f:3140::/29
2a0f:3540::/29
2a0f:3740::/29
2a0f:e1c0:3::/48
2a0f:e1c7:100::/48
2a0f:e200:5::/48
2a0f:e202:97::/48
2a0f:e440::/29
2a0f:ea40:8::/48
2a0f:ea44:88::/48
2a0f:ea47:ff49::/48
2a10:33c0::/29
2a10:3440::/29
2a10:3840::/29
2a11:3240::/29
2a11:4800::/29
2a11:8700::/29
2a11:e580::/29
2a11:efc0::/29
2a12:2c80::/29
2a12:3f00::/29
2a12:4b00::/29
2a12:5900::/29
2a12:5e00::/29
2a12:cd00::/29
2a12:dc00::/29
2a12:ecc0:3::/48
Signature Algorithm: sha256WithRSAEncryption
34:b2:52:1b:e2:ff:46:41:68:f5:01:93:63:56:14:e8:5c:2a:
d5:fc:01:bb:65:09:58:80:9b:d8:14:95:6b:a7:6e:c4:8d:ad:
ad:34:11:05:5e:8c:d0:10:b5:59:83:c9:cf:f1:ec:07:56:ab:
5f:17:bd:36:29:26:0c:17:21:29:73:cf:43:e4:56:ab:dc:8c:
2f:63:0e:3b:b9:3c:26:60:50:96:2a:77:b8:06:76:e6:71:19:
df:85:bd:46:ae:54:1e:cb:bd:a6:ab:e9:1c:12:4d:e9:fa:f1:
94:35:eb:62:a7:57:24:ac:b1:1d:72:ee:d4:52:78:5e:4b:d7:
82:89:bd:eb:87:77:68:85:bf:be:d2:1b:e0:5e:63:09:ee:f6:
76:01:bf:ac:5f:55:13:1c:d5:55:d9:52:24:92:32:61:69:b6:
7e:7f:8c:7d:fb:27:08:ed:10:1e:34:3e:3f:23:5c:d4:21:04:
29:cc:27:7e:f6:43:eb:97:1a:6a:0e:8e:fa:f5:19:ee:5c:5e:
2d:c8:ce:14:2b:0c:b5:00:73:c6:56:ae:4b:b5:1c:3d:c4:2a:
b2:54:3b:28:ea:75:b6:5b:9a:54:6b:61:97:98:dc:81:30:e9:
ff:e7:02:82:db:6b:48:ac:fc:9d:81:1f:14:e0:ce:40:fd:a1:
24:b0:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:14:22 2025 by rpki-client