Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Q9h9EVwtmDSVzmMU1lVoIl4gvE8.roa
File: Q9h9EVwtmDSVzmMU1lVoIl4gvE8.roa (raw, json)
Hash identifier: c+5GQUk2TuxfXNNgefHCHjFqDzHo2CbB1pnXNFagwWU=
Subject key identifier: 43:D8:7D:11:5C:2D:98:34:95:CE:63:14:D6:55:68:22:5E:20:BC:4F
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 0189211A7A27392495A10C42EEA78692E805
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Q9h9EVwtmDSVzmMU1lVoIl4gvE8.roa
Signing time: Tue 04 Jul 2023 13:32:10 +0000
ROA not before: Tue 04 Jul 2023 13:32:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47726
IP address blocks: 185.65.201.0/24 maxlen: 24
185.65.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:1a:7a:27:39:24:95:a1:0c:42:ee:a7:86:92:e8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jul 4 13:32:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43d87d115c2d983495ce6314d65568225e20bc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:ed:f0:02:1e:d9:4c:99:14:43:06:0f:8b:
f2:51:38:8d:f6:fc:22:3b:9f:ef:10:17:21:b5:8f:
52:fe:e1:05:57:a1:fd:ab:f0:e7:e5:97:57:68:54:
66:18:52:c9:63:36:0f:f2:9b:05:0a:ce:e6:0d:d8:
9b:b7:e0:fd:ed:05:7c:cb:57:33:e8:86:c5:cf:90:
cf:1e:86:95:14:5e:c8:a7:8c:6a:a7:84:af:25:56:
71:14:12:b5:b9:c6:f6:58:19:1f:09:72:0b:aa:fc:
c0:2b:44:38:14:0a:6b:93:5a:15:76:39:90:b6:58:
cf:b5:75:1c:ff:4b:79:96:44:cf:38:2a:d0:f6:01:
46:ab:60:02:ab:7c:59:8b:4e:b7:99:b0:4c:b4:f9:
8a:f7:d9:b8:ce:a5:7e:79:30:0f:dd:81:65:c7:52:
cc:d5:77:f0:b3:ad:2c:05:44:04:34:19:d0:9d:38:
b6:8e:ef:35:35:e2:a9:23:9b:a1:cf:2a:84:08:40:
e0:0c:f9:2c:54:37:06:e8:8d:37:0d:86:77:aa:de:
82:27:0a:8f:dc:08:7f:64:23:d2:5c:9e:1c:66:a7:
66:4b:72:34:d3:1d:e8:7f:a3:14:be:31:b6:98:ba:
0c:43:f0:df:d6:a8:d1:f5:db:7a:d4:d8:e8:6a:47:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D8:7D:11:5C:2D:98:34:95:CE:63:14:D6:55:68:22:5E:20:BC:4F
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Q9h9EVwtmDSVzmMU1lVoIl4gvE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.201.0/24
185.65.203.0/24
Signature Algorithm: sha256WithRSAEncryption
52:51:6a:a3:13:46:04:f2:07:77:44:bd:3e:98:c5:82:28:3b:
c9:7c:4f:3c:a4:6e:48:56:9c:65:ff:8a:66:85:2a:7d:2a:86:
1c:78:47:6b:e0:1a:3a:81:44:e0:78:f8:a5:2d:89:a4:1b:c8:
07:ef:59:06:14:78:cc:49:02:27:39:b0:e2:6e:df:01:fe:32:
34:a1:f8:58:96:92:e5:2f:c8:f4:97:13:74:5d:49:b9:c7:75:
a9:4a:72:5b:8e:57:74:8a:56:ca:e2:59:85:71:70:d4:d4:39:
69:45:ec:aa:96:1e:8a:69:5b:cb:fb:d4:56:02:62:5e:b7:18:
99:8a:af:f5:07:d7:79:57:ca:88:b1:6f:fa:0d:36:0b:52:46:
aa:4f:d3:49:9a:40:8a:78:9f:d6:6e:67:9c:55:cb:ba:7c:a0:
23:a4:3c:8c:f2:48:15:1e:7c:0d:92:ee:7e:6b:9c:8d:40:c6:
74:ab:71:82:ea:3a:50:4f:98:bd:59:4b:38:67:c7:3a:73:33:
c2:5a:e9:e7:00:98:de:98:c5:46:3f:d0:a0:98:81:dd:b5:df:
f7:b0:72:91:66:75:95:a2:3b:c8:74:37:fd:63:2e:5d:93:c3:
9b:c8:2f:a7:c3:6f:ab:bc:be:1a:51:28:c3:fd:50:04:2e:c5:
fe:dd:a0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 06:56:02 2023 by rpki-client on console-fra.rpki-client.org