Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/RQC-v9BKLhTKiBImkb5NVPJNTWk.roa
File: RQC-v9BKLhTKiBImkb5NVPJNTWk.roa (raw, json)
Hash identifier: pbhiMOl6K4Y1PESAvEICJr4N4m96lKS2ZjTbtw2Xh1Q=
Subject key identifier: 45:00:BE:BF:D0:4A:2E:14:CA:88:12:26:91:BE:4D:54:F2:4D:4D:69
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01959BE9DD19AD6C489006FE82F7D904EB8D
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/RQC-v9BKLhTKiBImkb5NVPJNTWk.roa
Signing time: Sat 15 Mar 2025 22:25:49 +0000
ROA not before: Sat 15 Mar 2025 22:25:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a07:f240::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 20 Mar 2025 12:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9b:e9:dd:19:ad:6c:48:90:06:fe:82:f7:d9:04:eb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 15 22:25:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4500bebfd04a2e14ca88122691be4d54f24d4d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4d:3a:ff:47:4a:0e:23:d2:cc:25:09:71:23:
0b:36:d0:53:d7:2b:37:af:04:ba:83:41:aa:19:af:
6f:b6:f7:07:53:56:6a:c2:3c:56:99:e1:2d:37:fe:
1a:cf:63:98:03:f1:5d:0c:f7:b7:f8:8f:fa:fe:b3:
8a:8f:e9:21:dc:a3:06:b6:df:f1:09:d4:aa:69:08:
6c:6f:26:0d:1a:9f:d4:fb:82:ef:f6:00:4d:f8:35:
46:16:fc:b5:75:a7:73:e3:7f:f8:78:44:c1:0b:80:
67:9e:fc:4f:fa:a7:5e:e0:4c:8e:dd:a4:b7:de:ad:
10:2c:60:50:03:07:3e:b0:ad:7b:b2:bf:21:e7:ed:
95:14:86:45:4e:80:9b:8d:27:a1:32:aa:1c:c8:b8:
2a:ae:14:6d:4e:f2:c9:17:b8:17:37:c1:65:fd:20:
36:7a:cf:e4:68:79:f1:48:46:f9:f6:24:07:b3:25:
49:c2:5a:2b:d1:72:e8:56:a3:1a:c5:f9:cd:4a:ee:
4d:7e:75:d7:07:e2:9f:11:96:6f:77:9f:d8:ce:96:
f8:f8:df:37:c8:75:54:93:0e:c6:5e:0f:bc:a5:32:
56:3c:bd:64:8e:ab:4d:c9:64:ab:5e:b6:c9:1d:2d:
ff:5e:f8:a0:13:67:76:90:11:9e:f1:d8:47:cb:6c:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:00:BE:BF:D0:4A:2E:14:CA:88:12:26:91:BE:4D:54:F2:4D:4D:69
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/RQC-v9BKLhTKiBImkb5NVPJNTWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
Signature Algorithm: sha256WithRSAEncryption
9e:16:fd:68:c9:1c:19:67:14:73:4d:46:dd:00:de:fa:04:49:
a4:d2:04:98:cd:51:79:cd:a4:eb:43:9b:b7:b9:e2:1b:14:13:
00:30:da:2c:b4:58:59:2b:3d:05:ea:27:ec:87:86:67:88:b0:
3c:74:be:2d:03:2f:f5:34:86:bf:7d:77:55:a6:87:a1:1f:89:
41:42:ab:6b:82:3b:39:82:90:a2:a2:47:e0:60:c9:91:c0:c8:
34:bc:e4:bb:8a:9d:01:cf:f9:4d:33:69:b1:ef:c1:1e:56:03:
07:31:21:72:8a:3d:d4:94:09:a5:01:39:22:53:b4:ca:2a:8e:
b2:67:74:e9:3e:44:77:aa:50:38:2c:a7:6b:24:b5:c2:c6:58:
9e:f9:e6:e3:10:b9:59:f4:d2:3d:91:f2:ae:8c:0c:90:2a:62:
b1:8d:8a:0e:d6:6b:a3:4f:7a:9e:8b:c0:a0:0c:0a:c1:0b:fb:
9a:00:f3:c9:8e:54:2e:45:96:df:01:70:49:be:22:6c:fe:a2:
80:e9:0f:26:39:c5:5e:1d:4a:f7:7f:57:ee:e1:ae:9d:ee:04:
41:a6:9e:6c:1f:5b:6b:cd:0b:16:5b:dd:87:d0:e2:93:75:ae:
91:8e:10:67:19:f7:53:db:06:39:c8:ef:b1:15:f7:43:7b:9c:
00:2f:b1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:35:46 2025 by rpki-client