Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/QhthEm75FC4UkaDi31_5M0WElBQ.roa
File: QhthEm75FC4UkaDi31_5M0WElBQ.roa (raw, json)
Hash identifier: XDwLKnxo86lvR7Yx8IMQqobBl1uolBJdfTCL4QEAYA0=
Subject key identifier: 42:1B:61:12:6E:F9:14:2E:14:91:A0:E2:DF:5F:F9:33:45:84:94:14
Certificate issuer: /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial: 018CC79580B3AD1AC65AB930E77AF70FDFE3
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/QhthEm75FC4UkaDi31_5M0WElBQ.roa
Signing time: Tue 02 Jan 2024 00:31:52 +0000
ROA not before: Tue 02 Jan 2024 00:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201702
IP address blocks: 185.66.200.0/23 maxlen: 23
2a05:980::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 05 Mar 2024 16:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:80:b3:ad:1a:c6:5a:b9:30:e7:7a:f7:0f:df:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Validity
Not Before: Jan 2 00:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=421b61126ef9142e1491a0e2df5ff93345849414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:95:8b:1b:9b:a7:3a:ea:5b:9e:a4:a0:e0:
2e:dd:cd:a0:44:26:c0:e7:e9:9a:0d:d8:49:c8:cf:
a7:0e:e8:09:99:3f:03:ce:7a:aa:4f:9d:85:ef:a7:
14:b0:08:06:f3:c6:96:0b:c2:34:b9:3e:24:53:52:
f7:73:e2:7a:3e:ec:f0:b3:b7:bb:d3:30:7b:ee:32:
05:bb:58:9a:9c:17:a5:74:e2:f8:c8:a6:f7:b0:3e:
d7:09:f3:58:04:0a:4c:4f:26:c7:a0:a4:52:74:74:
3d:90:d1:7a:d7:22:00:ae:69:53:d1:a7:a2:ca:6b:
e3:11:84:e1:b4:85:a0:45:2f:f3:47:b0:47:96:f1:
8a:35:1b:25:98:71:9b:e0:23:28:48:61:f4:4f:1d:
a1:c6:b8:0e:84:65:c9:b9:1f:57:83:e3:a5:b6:75:
92:b8:ea:79:b1:e2:a9:45:fa:9b:a6:78:87:23:c8:
2c:a3:2a:83:97:35:34:d3:e2:8d:fa:23:74:4d:ed:
3e:45:0a:f5:f8:8c:07:f3:62:c0:c1:fc:59:4e:f4:
ba:50:07:ac:51:ce:49:14:fd:98:35:ec:08:66:e3:
c3:14:75:8d:86:39:29:5f:a4:c0:05:78:bf:f4:ae:
48:9e:6c:f6:2d:8c:d8:3d:67:c8:75:76:6e:8f:e1:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:61:12:6E:F9:14:2E:14:91:A0:E2:DF:5F:F9:33:45:84:94:14
X509v3 Authority Key Identifier:
keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/QhthEm75FC4UkaDi31_5M0WElBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.200.0/23
IPv6:
2a05:980::/29
Signature Algorithm: sha256WithRSAEncryption
85:87:fb:a0:55:01:69:18:ca:39:b7:fa:4a:5c:98:77:ec:f6:
f5:2a:fa:d2:97:a2:07:2a:ab:8f:ad:0e:8a:55:f9:4b:a0:24:
55:24:44:1e:1a:81:1e:67:ab:7a:88:45:e0:7e:b9:67:f2:b1:
4e:4f:32:5e:64:72:7f:b1:c8:af:11:29:de:03:19:04:27:4c:
70:d7:7d:1e:64:5a:b6:fc:c2:fc:ae:ae:66:7e:6d:3b:f9:6f:
69:53:9a:61:bf:f4:51:17:2c:59:28:4c:8f:e0:a0:39:81:d3:
d4:c1:ba:db:f9:ee:ff:fb:42:9a:19:c0:46:1e:fb:03:3a:39:
5a:84:db:4b:72:95:82:81:5a:e7:e8:67:52:55:10:25:b3:46:
1c:8e:50:f4:97:f3:f9:c1:da:f9:fd:24:63:d1:e5:f6:e9:c3:
39:96:40:6c:02:fa:13:21:0d:4b:c3:6c:fc:c5:e5:6f:1a:0d:
02:a4:f3:0e:6c:ec:8c:b1:ea:7a:a1:8d:80:86:1e:e2:f2:fe:
9c:64:c5:b9:ad:f3:49:22:bb:a0:93:cb:1e:87:b1:ee:49:7a:
69:c0:25:c3:6d:6e:6f:6d:04:97:6f:17:5d:9a:d2:8a:82:3e:
89:20:ed:44:1d:13:59:6b:e9:c7:1d:a4:92:48:95:b0:b7:de:
c6:64:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:29 2024 by rpki-client on console-ams.rpki-client.org