Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/QcTibM7S_pYCpKY363ihJRF52_4.roa
File: QcTibM7S_pYCpKY363ihJRF52_4.roa (raw, json)
Hash identifier: C2vGl9GUyEvU+gd0FhVFL1z0sl0IlRvKyNzj/hkbaNQ=
Subject key identifier: 41:C4:E2:6C:CE:D2:FE:96:02:A4:A6:37:EB:78:A1:25:11:79:DB:FE
Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial: 019352846ADCF1834FC145AD4972D97C47B0
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/QcTibM7S_pYCpKY363ihJRF52_4.roa
Signing time: Fri 22 Nov 2024 06:17:09 +0000
ROA not before: Fri 22 Nov 2024 06:17:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31382
IP address blocks: 185.85.65.0/24 maxlen: 24
185.140.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Nov 2024 06:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:84:6a:dc:f1:83:4f:c1:45:ad:49:72:d9:7c:47:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Validity
Not Before: Nov 22 06:17:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41c4e26cced2fe9602a4a637eb78a1251179dbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:82:96:47:b2:f4:98:48:8d:81:15:21:a8:
f5:a3:42:9d:71:74:fa:42:b0:ff:d0:60:32:2e:5f:
e7:f9:aa:66:2f:9e:19:a9:7b:39:06:cc:b1:0c:b7:
92:22:7c:b6:b3:bc:97:84:ce:1c:8a:a2:c8:cb:f1:
1b:ad:cc:4b:53:df:18:ff:ee:43:3c:36:22:96:14:
e2:7a:3c:be:6e:b5:c0:e7:36:e4:ba:75:7f:e9:21:
1a:6b:07:db:5d:99:6b:d2:ad:22:bc:2f:e9:9a:04:
11:bb:6e:ba:5f:0f:98:52:59:f5:fb:a9:16:48:6c:
2d:86:e2:4a:78:e5:56:6c:f8:64:e4:2d:35:07:1c:
2d:d3:4a:f7:ce:c9:99:1f:db:54:f3:74:a9:94:b6:
d9:77:e0:5d:f9:26:b7:68:e2:e7:34:a9:34:33:70:
a2:11:4e:2c:0a:98:3b:c8:50:c7:cb:40:3a:7e:d1:
56:b0:c3:a1:f8:65:04:74:76:90:c0:ac:4e:a0:fb:
6d:83:de:e2:d3:09:cd:95:d1:18:2f:f2:88:07:7a:
be:20:77:9d:48:98:44:5b:69:75:ac:48:b1:f0:0c:
65:4e:3a:32:25:6e:72:0c:68:3b:66:16:f4:b3:a0:
73:7e:81:24:69:73:54:3e:16:3c:18:8b:ac:dd:7e:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C4:E2:6C:CE:D2:FE:96:02:A4:A6:37:EB:78:A1:25:11:79:DB:FE
X509v3 Authority Key Identifier:
keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/QcTibM7S_pYCpKY363ihJRF52_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.65.0/24
185.140.84.0/22
Signature Algorithm: sha256WithRSAEncryption
07:ce:10:3a:45:40:93:57:9f:e8:88:8d:8f:8c:c6:d3:d3:ab:
49:ad:1e:37:87:e1:79:54:a6:72:33:df:ab:53:00:1e:1e:02:
56:39:6d:d0:c2:64:78:96:af:58:f9:59:5b:33:20:6d:98:6e:
82:de:db:64:64:6a:4e:a3:b6:81:47:26:17:f2:2a:37:46:7c:
4b:28:6e:d4:e2:98:51:e8:fc:b2:8f:7e:34:63:57:d7:b2:4f:
54:20:74:f5:b3:86:93:c0:29:a1:f8:fa:90:86:62:62:4c:d8:
c3:77:ac:d2:30:98:03:64:b0:49:63:d8:f1:b1:c9:93:e2:6b:
33:c1:e7:4e:c0:4c:de:d6:a4:4e:43:1c:de:1b:3d:ee:f9:d6:
0e:16:00:c7:71:62:4d:c2:b1:d7:ed:6c:93:58:1e:ce:56:6a:
87:c7:83:35:30:9c:ff:28:36:a4:03:ac:66:4e:6e:f9:73:54:
b0:94:6f:98:31:75:0c:9d:17:96:d1:4a:99:cb:54:b7:61:b2:
09:9e:48:35:b5:12:a4:8a:c3:79:0c:d4:f1:c0:b8:eb:9b:d8:
d4:12:58:36:c2:38:fe:5a:23:ca:fb:92:95:90:ad:55:dd:a7:
7e:7f:d1:d2:8a:5f:cf:00:ce:70:71:4a:75:c7:2d:16:2b:22:
7f:86:29:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:05:54 2025 by rpki-client