Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QAyW9uGhXrqvMmKAVsTfGPBv0gM.roa
File: QAyW9uGhXrqvMmKAVsTfGPBv0gM.roa (raw, json)
Hash identifier: yw5HlMPzYd6uhJKJwiTa5SGR6bg/MHLXvtuqGW8jyxE=
Subject key identifier: 40:0C:96:F6:E1:A1:5E:BA:AF:32:62:80:56:C4:DF:18:F0:6F:D2:03
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0195A3457A8AED97C62BB0FBC820543ABCBA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QAyW9uGhXrqvMmKAVsTfGPBv0gM.roa
Signing time: Mon 17 Mar 2025 08:43:14 +0000
ROA not before: Mon 17 Mar 2025 08:43:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 185.246.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 09:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:45:7a:8a:ed:97:c6:2b:b0:fb:c8:20:54:3a:bc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 17 08:43:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=400c96f6e1a15ebaaf32628056c4df18f06fd203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2c:93:10:79:0c:88:2c:c5:1c:9f:4f:4e:a5:
e4:ca:79:60:50:90:49:4f:2b:0f:cd:cc:5f:30:be:
b2:3b:d2:7c:27:52:11:ca:41:58:c3:f4:4e:75:16:
7a:bc:3e:dd:b8:41:57:ac:d6:58:55:4a:bb:26:09:
3a:8d:bc:41:0f:28:ef:da:b7:f6:80:c2:15:85:8e:
8a:17:08:00:87:01:b0:bb:e8:57:dc:ce:55:c2:2f:
aa:f1:d7:ac:35:2e:cb:12:91:62:24:b8:3a:6f:d8:
e8:28:6c:a2:03:28:94:bb:20:7f:69:28:4d:09:5a:
0b:02:f3:42:25:93:be:7f:e0:ea:ca:2a:f1:db:5f:
2d:a6:78:2c:e9:d5:b3:fe:07:b3:40:7a:f9:88:a1:
14:33:c4:73:a3:de:2f:65:2b:b5:44:7e:72:d6:ed:
fc:d9:36:af:a2:22:cb:c6:70:55:97:e6:ce:82:a4:
e2:52:9d:f5:bb:47:f3:85:63:65:c4:f7:30:5b:35:
10:cc:3d:ca:fc:f5:02:65:c9:e1:63:bc:3d:4f:bb:
cd:f7:ed:5d:55:8a:0b:6a:32:5b:9c:4f:d3:69:3d:
da:ca:22:b8:67:bd:53:52:78:25:e8:a1:44:3e:e1:
1e:55:62:ec:d5:ba:ae:6b:05:8e:c6:43:00:f9:05:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0C:96:F6:E1:A1:5E:BA:AF:32:62:80:56:C4:DF:18:F0:6F:D2:03
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QAyW9uGhXrqvMmKAVsTfGPBv0gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.112.0/24
193.8.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:6b:71:28:ef:15:09:df:4b:16:1d:72:69:1c:d5:2b:ac:67:
df:4c:e0:1b:c6:9b:39:8c:d7:04:36:b0:e2:60:39:7b:28:80:
d9:dc:26:b2:17:01:14:f3:d4:39:e5:37:be:bc:9b:c3:6a:44:
8a:11:47:d7:e0:31:5f:6c:e6:61:2d:30:32:0b:c4:9f:99:a0:
a7:3c:9c:79:51:6b:93:bf:8d:bd:99:c3:d9:0a:8a:d2:6d:9e:
17:92:fd:d9:ac:82:61:e7:45:29:a7:58:ad:bb:66:f4:c7:3f:
4d:c3:12:f4:99:45:7e:89:1c:23:06:08:59:c6:a9:e1:d3:3a:
d2:33:ae:3d:6b:bd:a3:c8:fc:77:89:64:1e:61:3b:03:41:6d:
c7:7b:70:7d:f6:4a:c6:6f:1c:0a:66:d3:0d:d5:00:de:e4:b4:
a0:8e:5c:7b:31:96:9d:59:d5:19:97:f3:64:15:59:01:d5:46:
e6:cb:c4:5a:bb:94:c8:1c:81:59:f4:48:5f:0d:90:63:a9:4b:
52:27:cc:40:08:16:70:9f:9d:0a:db:80:27:6f:9e:3d:b9:d1:
c1:ee:85:cc:e1:ce:1a:a6:e9:38:6b:fa:97:da:f4:73:2a:dd:
44:63:0d:d9:f8:19:0c:1f:e7:ca:3b:1f:37:70:2c:d4:1f:04:
f1:98:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:46:03 2025 by rpki-client