Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gkVRJKuh82LkikArwgUFH_nSzgQ.roa
File: gkVRJKuh82LkikArwgUFH_nSzgQ.roa (raw, json)
Hash identifier: trz8l5tqPTMUpCiUHKVd52sZLpce0560y6K98fgUAy4=
Subject key identifier: 82:45:51:24:AB:A1:F3:62:E4:8A:40:2B:C2:05:05:1F:F9:D2:CE:04
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5010E4EC8CC138DD2C1B8F45B310D8E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gkVRJKuh82LkikArwgUFH_nSzgQ.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39351
IP address blocks: 194.242.2.0/24 maxlen: 24
45.85.106.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
185.217.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 15:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0e:4e:c8:cc:13:8d:d2:c1:b8:f4:5b:31:0d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82455124aba1f362e48a402bc205051ff9d2ce04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:f5:96:9e:b4:9a:a0:da:e1:4b:d9:2e:f5:
99:09:f5:7f:b5:a3:c1:7f:04:00:a3:8e:88:e6:19:
67:b0:de:31:00:42:89:0f:38:0f:dd:67:10:d0:e1:
95:cf:7c:4a:9f:9a:72:37:47:6b:72:a0:8a:67:74:
6f:c8:b7:13:af:83:bf:68:df:b9:94:82:7a:d7:07:
4f:22:ef:27:f5:f9:59:5f:de:36:e0:08:34:7b:76:
06:e4:51:52:45:de:32:3f:ff:f2:8b:37:f4:0d:cd:
ce:27:a0:d2:0b:fb:1a:93:da:16:2f:5c:ae:20:c7:
9a:4c:5c:0f:9a:c0:fb:ab:da:bd:8b:d9:59:68:39:
61:14:67:41:2c:67:a8:12:d4:67:1c:37:a9:1f:39:
66:22:89:42:50:83:17:e5:80:ae:7c:a5:68:1d:6c:
72:1d:27:77:a6:95:8b:4c:fd:26:36:96:6b:a6:24:
83:1a:30:53:31:f0:4c:48:88:23:15:06:06:a6:82:
63:0b:e3:70:77:ff:65:b8:b2:0d:05:93:8d:3c:45:
60:f3:f3:2e:23:09:da:1c:00:3b:79:78:a2:75:6a:
33:d0:0f:ab:8a:f9:8e:ee:c1:1c:b3:8a:62:ee:b3:
e0:54:76:81:8e:51:6e:93:4f:3d:e8:33:11:35:29:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:45:51:24:AB:A1:F3:62:E4:8A:40:2B:C2:05:05:1F:F9:D2:CE:04
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gkVRJKuh82LkikArwgUFH_nSzgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.106.0/24
185.217.116.0/24
193.19.108.0/24
194.242.2.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5c:78:59:cf:16:48:b8:70:c8:c8:ab:1d:5a:d3:f9:06:cf:
da:56:76:a7:7c:66:57:e0:d5:bd:65:f8:b8:fd:d4:82:6b:51:
49:a1:f8:96:16:5f:a6:e7:89:ca:56:32:0c:d8:84:f7:b1:cd:
4d:e5:ae:3d:41:e8:b1:c7:ed:7e:99:f9:78:78:bb:d4:01:87:
4e:a6:47:b7:50:60:42:2e:2d:13:4d:ca:d0:d3:1a:49:e8:30:
59:5d:58:6b:9f:1e:7c:99:e0:18:0b:0b:5d:92:e6:2f:8d:fd:
dd:91:c7:5f:f7:28:a6:be:92:a3:99:7d:aa:b3:2e:9e:6d:da:
3d:25:4c:d9:41:bc:33:cf:76:a5:ab:67:16:2f:0e:ac:f8:7d:
d9:fe:92:5b:43:ef:dc:be:b5:1d:74:ef:f9:fb:f6:a6:bc:34:
6f:d7:ba:26:1e:1a:bd:6b:e8:db:96:1b:0e:a2:72:20:2a:6b:
9f:86:e0:ce:5a:44:1c:b5:87:b8:8a:f8:13:f4:13:84:3e:be:
6f:fc:85:6a:ee:91:26:6d:10:a7:73:26:9c:c1:18:83:de:d0:
c6:4f:46:bb:40:9c:95:cf:89:cb:1f:66:97:5b:8f:a8:1c:58:
96:13:43:5b:4a:41:bb:65:65:3b:4d:44:20:ca:8f:68:3c:32:
f1:a0:ae:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 18:42:09 2024 by rpki-client on console-fra.rpki-client.org