Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qpwAqk6W6cg9_T2BslNuPf9RYnQ.roa
File: qpwAqk6W6cg9_T2BslNuPf9RYnQ.roa (raw, json)
Hash identifier: WsjmnEpk3XJHe3xlX0dONLxyELftnYYe+yxuRXku1S4=
Subject key identifier: AA:9C:00:AA:4E:96:E9:C8:3D:FD:3D:81:B2:53:6E:3D:FF:51:62:74
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01946153D4EC6B0FEBB2D6A97AAA3E3F8A6C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qpwAqk6W6cg9_T2BslNuPf9RYnQ.roa
Signing time: Mon 13 Jan 2025 20:21:11 +0000
ROA not before: Mon 13 Jan 2025 20:21:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.1.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 13 Jan 2025 21:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:53:d4:ec:6b:0f:eb:b2:d6:a9:7a:aa:3e:3f:8a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 13 20:21:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa9c00aa4e96e9c83dfd3d81b2536e3dff516274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:e3:69:76:b8:7a:ab:e2:8f:57:9c:b5:9c:
c6:59:bc:9b:1a:08:4d:8f:f5:d9:c7:44:e1:ad:1b:
df:0d:85:c7:c0:61:ce:85:51:ca:37:96:64:6f:4e:
63:31:b1:01:fe:fe:d1:74:81:70:4c:c4:87:0b:ea:
32:da:6f:ab:87:67:61:45:ba:e6:5f:eb:01:b7:44:
fc:c0:07:54:8a:48:a5:2a:f9:0e:c4:cd:a5:47:aa:
2e:56:fc:68:44:f9:56:86:d4:f6:9e:da:ed:47:8e:
fb:07:a1:26:28:ee:a0:93:24:f0:85:26:64:0b:6a:
52:d2:c3:97:28:ec:88:09:ec:d6:5f:b4:68:b0:b7:
34:d4:a9:31:cc:35:19:cf:85:80:97:e0:db:da:cf:
a2:08:f6:82:90:37:89:fa:25:b7:8a:f5:99:28:43:
4e:d3:9b:50:49:bf:18:45:2c:5c:b2:a6:38:80:5c:
00:c0:f0:2b:1d:9f:65:96:e4:77:87:39:26:cf:1e:
df:c4:b9:fc:cc:4e:c9:ad:72:b1:ba:d6:72:09:e3:
56:6f:cd:eb:38:a7:f3:6c:c0:a7:df:85:4e:44:b2:
45:3b:1f:3a:09:b3:86:46:e8:83:b4:93:3f:92:1b:
99:5a:d3:02:84:bd:21:43:81:d8:e5:3c:d2:84:9a:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9C:00:AA:4E:96:E9:C8:3D:FD:3D:81:B2:53:6E:3D:FF:51:62:74
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qpwAqk6W6cg9_T2BslNuPf9RYnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
185.211.48.0-185.211.50.255
Signature Algorithm: sha256WithRSAEncryption
38:e9:7e:77:d5:f7:1c:24:a1:ab:39:8d:88:0a:41:6d:2f:83:
f6:20:53:37:4b:d0:e0:13:d2:a7:9c:e6:bf:53:78:6b:70:aa:
a9:5c:5b:c8:a4:e6:9d:4b:f1:dc:24:cd:4a:51:d1:54:03:04:
75:74:39:63:93:8e:d5:6f:6a:08:b3:8c:bf:b9:bc:59:1b:57:
3a:3e:82:21:26:ae:03:05:09:1d:d3:d4:ac:ab:bf:ac:42:51:
89:aa:fb:d8:63:62:8d:25:80:ec:d3:94:b8:38:17:07:dc:83:
e9:f6:a3:63:a1:89:8e:02:a4:fb:b7:54:1e:2b:68:c9:63:7e:
2d:d5:a1:b2:9e:c5:b5:0a:b9:52:9f:46:79:cc:63:83:19:76:
10:11:2c:83:53:bf:4b:66:f4:ee:61:94:3e:e6:23:0a:d8:2f:
0c:0f:b3:3f:13:f3:7c:4b:71:1b:13:53:bd:9b:00:54:53:1f:
a0:73:ae:32:53:fa:c4:59:1f:69:a8:af:38:e2:41:0d:b3:b7:
7c:70:00:a5:dd:88:a7:09:5d:47:be:71:9b:e3:58:47:2e:6f:
11:22:a5:1d:71:61:1e:4a:2b:42:c2:23:da:8e:59:bc:a0:60:
34:06:1e:dc:b9:c1:fc:89:bb:a6:b6:92:7b:c6:ab:25:19:76:
a7:17:69:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 8 07:26:14 2025 by rpki-client