Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/QV9gMaFckrZEW1lE4ZfgWelFP0Y.roa
File: QV9gMaFckrZEW1lE4ZfgWelFP0Y.roa (raw, json)
Hash identifier: hGqqSIRA1f3rBXN2jHyB0DfqJSuRUFxOmv99Mk2c6G0=
Subject key identifier: 41:5F:60:31:A1:5C:92:B6:44:5B:59:44:E1:97:E0:59:E9:45:3F:46
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 01942369C576B178CC05AC918446A7ED34E4
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/QV9gMaFckrZEW1lE4ZfgWelFP0Y.roa
Signing time: Wed 01 Jan 2025 19:48:41 +0000
ROA not before: Wed 01 Jan 2025 19:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41568
IP address blocks: 217.9.9.0/24 maxlen: 24
217.9.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 12:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c5:76:b1:78:cc:05:ac:91:84:46:a7:ed:34:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 1 19:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=415f6031a15c92b6445b5944e197e059e9453f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:ed:44:10:1b:22:30:56:87:8c:67:60:00:
89:46:26:39:16:d8:2c:ac:ed:de:5e:b6:bf:19:dd:
50:dd:d6:ad:17:b2:58:54:ec:d7:68:e6:4f:f2:c1:
88:0b:e5:fa:6d:ce:38:89:32:81:e5:33:fe:09:a0:
4c:85:12:1e:e1:97:1b:94:a8:ed:af:0e:db:e5:13:
7f:85:85:9a:9a:73:a8:c5:72:68:22:20:a0:62:bd:
cd:7b:32:2c:4e:a2:bf:d1:b6:47:d2:cf:17:07:c7:
32:2b:f2:9a:70:5e:17:9f:e5:87:80:2d:09:08:2b:
27:8f:08:1d:d1:b2:9f:f2:c5:12:5a:2c:1f:cf:8a:
2f:ea:72:7f:d7:32:e0:f9:d2:13:70:79:c6:f7:69:
7d:3d:b3:bf:87:cc:b8:49:33:83:e2:cd:a8:ac:58:
8e:e6:1b:a9:a3:43:c6:1e:d6:20:37:02:7d:1d:6d:
e6:83:a9:e7:54:41:d1:68:a3:cd:c9:ce:18:0f:78:
76:85:77:df:4b:da:f4:00:fc:18:a1:54:40:59:84:
38:95:79:8a:f6:7d:64:8e:18:6e:b1:be:bf:1c:83:
3a:82:9c:8e:9e:e4:41:e2:5c:4d:c1:fb:de:45:15:
44:f6:c0:7d:40:57:54:c4:57:6b:84:89:16:01:5b:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:60:31:A1:5C:92:B6:44:5B:59:44:E1:97:E0:59:E9:45:3F:46
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/QV9gMaFckrZEW1lE4ZfgWelFP0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.9.0-217.9.10.255
Signature Algorithm: sha256WithRSAEncryption
00:d2:4d:ed:0a:ed:00:c4:ce:4a:12:8c:40:07:fa:a1:5b:3b:
77:86:fd:f9:2a:0a:51:f3:e8:53:3a:21:b4:29:57:bd:18:63:
b0:fa:80:14:4c:72:f4:fa:cd:5e:f9:e1:17:85:67:f3:b3:35:
fb:73:1a:23:73:d0:a2:b0:80:f0:33:51:9e:7c:4e:83:65:0c:
a1:80:34:c6:da:19:82:af:26:b0:b0:fa:63:53:3d:65:39:df:
29:87:73:0e:ae:18:55:11:7f:13:ad:42:d8:55:c8:bc:51:43:
e7:36:00:2c:15:25:a6:3c:db:29:6a:68:f8:18:57:c8:bd:b6:
cd:8e:ae:d4:f6:a7:b2:a3:de:bb:b5:8d:17:dc:d7:cf:3b:d8:
8c:0b:ae:00:db:e5:01:cf:1c:b3:b7:1c:04:d3:35:10:a6:0a:
14:6f:fe:c6:fc:25:ff:43:a8:0e:15:8d:22:3d:e6:0d:9b:e8:
1e:1d:aa:8b:04:0b:6c:22:1c:47:ea:04:52:d6:55:37:a8:67:
ee:39:e5:61:6d:d1:8f:0f:e4:60:80:98:0c:a1:ea:a9:50:fa:
f8:35:bd:a0:bd:7f:29:7a:34:4e:88:69:71:b1:19:75:2e:03:
7d:78:af:b6:d8:34:38:ab:c7:81:19:eb:9a:d5:2b:44:fe:30:
e4:aa:4f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:22:51 2025 by rpki-client