Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/Qy9UjOfNJafGUXYPEWndM5GWg-Q.roa
File: Qy9UjOfNJafGUXYPEWndM5GWg-Q.roa (raw, json)
Hash identifier: kpTUacSno6uk67EvOiVJRSlctn638zvFTSfTwjlc2ug=
Subject key identifier: 43:2F:54:8C:E7:CD:25:A7:C6:51:76:0F:11:69:DD:33:91:96:83:E4
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 018A74807D25D23264B420E458E26A573498
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/Qy9UjOfNJafGUXYPEWndM5GWg-Q.roa
Signing time: Fri 08 Sep 2023 11:14:52 +0000
ROA not before: Fri 08 Sep 2023 11:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207144
IP address blocks: 85.11.172.0/24 maxlen: 24
85.11.173.0/24 maxlen: 24
85.11.176.0/24 maxlen: 24
85.11.175.0/24 maxlen: 24
85.11.184.0/24 maxlen: 24
85.11.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:80:7d:25:d2:32:64:b4:20:e4:58:e2:6a:57:34:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Sep 8 11:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=432f548ce7cd25a7c651760f1169dd33919683e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:10:f1:5f:89:52:78:ef:5e:74:c1:c9:51:
9c:ea:f6:98:dc:8f:96:92:64:b7:d6:c9:ac:50:5b:
8e:8e:de:61:99:bb:93:07:61:c1:45:e4:50:97:15:
aa:cb:b9:12:ef:1a:68:0a:42:70:9f:88:81:1b:a5:
d3:65:33:64:08:0d:db:2e:f8:1a:68:1f:48:a9:5d:
b6:f2:c8:9f:9b:6c:ad:8c:a3:5b:83:62:af:a4:d4:
d4:92:14:e2:07:31:67:31:9a:7a:15:5e:8c:72:50:
01:d4:e4:51:23:f7:df:ba:65:fe:b3:fc:f7:4d:62:
bc:80:da:d2:96:d8:b9:24:25:12:41:41:fe:c4:33:
98:e0:77:a3:cf:5f:53:9c:25:e0:a8:94:ce:ef:d7:
d5:0c:ba:79:72:97:7c:b9:04:da:01:71:7f:97:b6:
99:68:57:6c:d7:e4:e9:90:9f:fc:91:dd:b6:5d:7d:
64:f8:7c:69:f9:ef:6b:68:2f:b9:f4:2a:63:5f:65:
26:33:1f:61:d9:59:c5:5b:16:7d:e4:86:b2:8c:84:
5d:00:f5:b5:83:e8:f8:a1:14:b2:29:2e:42:19:2f:
ab:58:65:77:42:8f:95:b4:29:99:11:71:00:e0:59:
ae:27:3d:81:d8:21:45:ae:86:92:93:52:49:2a:80:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:54:8C:E7:CD:25:A7:C6:51:76:0F:11:69:DD:33:91:96:83:E4
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/Qy9UjOfNJafGUXYPEWndM5GWg-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.172.0/23
85.11.175.0-85.11.176.255
85.11.184.0/24
85.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:6b:37:99:fe:37:f0:a0:ad:94:93:f2:dc:80:cd:76:0c:a4:
ab:87:ac:32:72:11:f8:d5:fe:a3:14:ed:6a:ef:ce:a4:09:2c:
ae:5d:97:06:dd:78:8a:71:5c:66:29:45:9d:9b:4e:3a:19:12:
bd:87:6e:dd:1d:d7:7d:8b:8c:92:4f:02:6d:bd:03:07:5f:a9:
94:ee:46:2e:ff:43:79:a1:7f:37:51:ea:58:ca:e5:5e:2e:82:
9a:42:de:f1:12:e3:70:85:9d:7d:28:fc:b9:d3:8e:42:8c:d4:
17:eb:29:e3:9d:c8:05:e7:13:ef:03:be:48:de:12:d6:f8:ed:
cd:29:fa:9b:8a:f5:25:d1:93:ed:e8:0b:d4:2d:50:6c:60:78:
2e:22:07:db:4d:9d:be:c6:7d:89:61:0e:e5:99:6e:40:a1:41:
42:de:5b:35:90:3f:b3:5a:5f:a4:37:6f:9f:6d:73:73:84:c4:
fb:75:6f:7f:38:ff:87:6f:27:f1:d7:6e:42:61:bd:5a:8e:09:
6d:89:91:b2:76:65:db:5c:6b:a5:36:a2:ef:d5:12:6a:88:2c:
74:39:59:36:b1:32:be:cb:6d:6d:9b:38:9a:2e:fe:d3:06:f9:
1e:4d:89:67:ae:68:0e:3b:09:60:32:51:dd:22:f2:5c:b1:e7:
89:9a:f3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 14:15:15 2023 by rpki-client on console-fra.rpki-client.org