Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QWDI4vG19nkBc0eBtD_hKV9nNGQ.roa
File: QWDI4vG19nkBc0eBtD_hKV9nNGQ.roa (raw, json)
Hash identifier: FQhW59VGI2BJNSCODUB9U31y5TEk4jumFhJWoSE3UhA=
Subject key identifier: 41:60:C8:E2:F1:B5:F6:79:01:73:47:81:B4:3F:E1:29:5F:67:34:64
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019759C9AA49F7865611DC6A5C1EA77EAD9F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QWDI4vG19nkBc0eBtD_hKV9nNGQ.roa
Signing time: Tue 10 Jun 2025 12:21:17 +0000
ROA not before: Tue 10 Jun 2025 12:21:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44066
IP address blocks: 89.144.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 18:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:c9:aa:49:f7:86:56:11:dc:6a:5c:1e:a7:7e:ad:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 10 12:21:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4160c8e2f1b5f67901734781b43fe1295f673464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:14:ec:56:f8:fd:a4:d6:d9:09:53:a0:33:
32:c7:56:d4:2e:eb:2d:87:7c:be:04:02:da:fa:7b:
23:de:39:16:7b:32:fd:72:6b:9c:70:c8:f5:d7:16:
bc:58:fd:79:5e:75:76:9a:5b:ee:dc:93:2d:40:dc:
e4:ce:4f:1b:7b:bc:79:d2:54:87:18:7a:85:f4:a7:
e8:ac:8f:29:74:f4:75:03:8f:c9:5f:a4:f6:7e:76:
b2:bf:74:9f:93:d6:94:ca:89:0d:54:e7:47:74:04:
3e:57:45:8c:6b:23:8a:ad:b3:03:74:34:69:17:44:
61:0d:26:b4:b9:be:80:4a:0b:18:81:eb:86:d6:39:
25:f4:72:3a:93:89:b7:b3:96:e5:3f:16:c4:bd:06:
e2:b0:58:54:8a:2f:6c:d2:63:fa:53:aa:6a:f4:99:
4d:c7:cd:fc:3f:78:c3:eb:7c:2e:97:21:22:08:11:
63:8e:dc:a2:e0:f6:59:6b:4f:61:8e:a1:ee:12:5c:
ea:4f:5c:54:a7:c2:e0:1c:38:0f:5e:3f:50:eb:2b:
87:66:9d:52:9a:b8:ed:13:3d:d1:f1:ab:d6:8f:53:
ed:5c:19:63:6c:34:67:53:ba:36:a7:02:3b:02:fc:
53:b2:29:b6:ee:17:c0:3f:e8:7c:b8:3b:7e:8b:cd:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:60:C8:E2:F1:B5:F6:79:01:73:47:81:B4:3F:E1:29:5F:67:34:64
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QWDI4vG19nkBc0eBtD_hKV9nNGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:61:19:fb:60:c1:4f:c4:1f:56:27:b4:0c:c4:9f:13:eb:2d:
33:43:8b:e5:3c:0f:31:11:45:e1:38:65:61:52:74:3f:91:83:
ab:6d:7d:e4:9f:7d:be:17:b5:0b:18:79:74:87:2d:ea:b8:c2:
83:a3:64:37:01:9c:e1:71:59:bc:06:5a:90:eb:a9:91:4e:2f:
6c:ab:a3:4c:4f:eb:56:70:ff:47:3b:18:d8:c0:bf:12:65:aa:
94:63:59:75:d8:e6:5f:d2:f3:43:f1:97:52:e4:38:50:c1:af:
14:7f:bc:36:75:76:08:8a:92:6a:20:ee:c8:7f:d1:ae:24:c0:
4c:0c:51:43:e0:63:57:70:c4:56:47:e1:af:76:99:6a:19:87:
83:9f:cf:31:04:d6:5c:c9:64:9e:38:fb:a2:70:a6:34:d7:dc:
72:24:aa:96:f7:96:8b:47:38:31:cb:33:62:53:19:fa:a1:6a:
f2:28:0a:de:60:5e:9e:bf:29:e4:84:63:e6:5d:cd:c3:6c:64:
2a:f0:1c:9d:92:80:ec:75:6c:35:e5:98:a7:61:92:75:05:54:
7f:c9:7b:76:ed:9f:f7:f9:3a:69:5d:2c:21:5c:75:b4:93:fe:
29:59:5d:64:24:11:11:c3:bd:2c:80:02:13:50:77:d4:b1:1c:
f8:b0:2e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:39:08 2025 by rpki-client