Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/NHXQoCmd5Uv2_zWbnph1lDtphGk.roa
File: NHXQoCmd5Uv2_zWbnph1lDtphGk.roa (raw, json)
Hash identifier: /JUfAEbUUgL854KU4TVJ6YfeTCyQmEXZUPyJCfBlWtI=
Subject key identifier: 34:75:D0:A0:29:9D:E5:4B:F6:FF:35:9B:9E:98:75:94:3B:69:84:69
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 01856CEF1732D8D8C2178AA75322DF46556D
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/NHXQoCmd5Uv2_zWbnph1lDtphGk.roa
Signing time: Sun 01 Jan 2023 10:44:46 +0000
ROA not before: Sun 01 Jan 2023 10:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20546
IP address blocks: 185.85.0.0/24 maxlen: 24
185.85.1.0/24 maxlen: 24
185.85.2.0/24 maxlen: 24
185.85.3.192/27 maxlen: 27
185.85.3.0/24 maxlen: 24
2a05:a942::/32 maxlen: 32
2a05:a946::/32 maxlen: 32
2a05:a947::/32 maxlen: 32
2a05:a941::/32 maxlen: 32
2a05:a944::/32 maxlen: 32
2a05:a944::/48 maxlen: 48
2a05:a940::/32 maxlen: 32
2a05:a943::/32 maxlen: 32
2a05:a945::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:17:32:d8:d8:c2:17:8a:a7:53:22:df:46:55:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Jan 1 10:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3475d0a0299de54bf6ff359b9e9875943b698469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9e:51:90:77:3b:f7:84:34:4c:65:20:f7:5c:
66:15:c9:3b:96:86:26:42:a9:aa:e3:84:86:e7:d4:
ac:46:66:e3:29:9d:d0:0f:fa:8a:fd:9e:59:6b:cf:
d6:49:f3:33:b9:f5:c8:ca:0d:20:48:93:d5:93:9b:
f8:60:2f:d7:e5:43:7e:a6:0e:64:90:4a:2c:82:1b:
6f:dc:e3:92:14:88:b5:71:d6:71:c9:9d:c8:c1:94:
31:b7:25:a7:d0:f2:11:2d:e8:77:3f:1d:d6:da:44:
33:1a:43:1b:97:4a:7e:f8:21:7b:ae:c0:2a:3f:41:
b5:21:8c:40:d7:bb:36:e8:f9:e3:df:69:a9:f0:1d:
fd:62:97:66:86:c6:78:c5:69:4a:53:7f:c4:35:9e:
8b:92:d6:f8:33:69:6d:df:73:0e:36:03:29:e3:3d:
4f:0e:a6:32:dc:e9:d6:9c:1c:d2:12:48:ed:0b:37:
42:4c:28:7f:1f:aa:0e:95:f5:60:a5:ae:9b:e9:ed:
1d:79:ff:56:93:76:88:8f:ba:b0:cc:15:90:37:81:
7e:42:74:96:ac:b3:14:5e:05:3c:c6:40:54:67:0d:
fd:88:30:c3:bf:74:1c:73:04:d2:19:eb:d0:2c:5b:
65:97:f1:9c:e8:3f:68:58:0b:67:fd:5b:0a:84:ad:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:D0:A0:29:9D:E5:4B:F6:FF:35:9B:9E:98:75:94:3B:69:84:69
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/NHXQoCmd5Uv2_zWbnph1lDtphGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.0.0/22
IPv6:
2a05:a940::/29
Signature Algorithm: sha256WithRSAEncryption
9f:4c:76:ed:a4:59:f1:3f:72:74:e1:95:23:ca:79:e8:db:4a:
8a:30:ab:48:77:be:99:e1:43:74:86:b4:8b:df:75:64:c2:ec:
e5:57:a7:99:33:59:7c:60:3a:38:e7:5d:4f:86:db:5d:c7:02:
97:0d:c6:5e:a5:6b:50:1b:a3:59:9c:2e:b1:63:38:24:0d:80:
1d:d6:dd:70:b4:8f:6e:21:9f:b8:86:a9:e0:43:ae:7f:e1:5c:
c8:be:8f:5c:03:17:30:b9:c5:9a:63:4e:56:6e:0c:1e:b6:3a:
01:2d:d7:67:4f:33:8e:f9:e4:9a:e3:ba:f8:41:0f:8f:db:f4:
8d:e3:b4:c2:57:d7:c9:61:e9:a0:26:ab:e7:af:b3:43:81:33:
08:db:4f:a0:63:27:2e:50:10:2d:b8:39:c8:d8:62:20:f3:17:
52:3c:e4:99:25:96:1f:98:03:fa:7d:ee:d5:7f:07:8f:60:e8:
c2:b7:88:31:0b:ba:fd:e2:24:74:11:69:81:b2:2c:f0:af:5a:
ec:ec:74:a7:9f:9f:50:5b:0b:30:6c:d3:4a:78:00:b1:34:e7:
1f:ee:7a:24:2a:8f:1b:cd:a4:27:d4:57:35:2a:e4:72:7d:4e:
fd:cb:e0:4c:7b:37:a6:52:32:ca:f7:57:ca:30:b5:70:31:63:
f2:6f:66:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:40 2024 by rpki-client on console-ams.rpki-client.org