Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/RkN_J0LNNpdIEtBMdSJkSfmia6o.roa
File: RkN_J0LNNpdIEtBMdSJkSfmia6o.roa (raw, json)
Hash identifier: p5lz2LDnb2ncWZupE/cEr+9xI7ck1jQIQnjrgNcWjeI=
Subject key identifier: 46:43:7F:27:42:CD:36:97:48:12:D0:4C:75:22:64:49:F9:A2:6B:AA
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018CE8E83382EA38E5B9AB512EB73E9AED1B
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/RkN_J0LNNpdIEtBMdSJkSfmia6o.roa
Signing time: Mon 08 Jan 2024 11:49:40 +0000
ROA not before: Mon 08 Jan 2024 11:49:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 109.107.155.0/24 maxlen: 24
45.89.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 14:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:e8:33:82:ea:38:e5:b9:ab:51:2e:b7:3e:9a:ed:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 8 11:49:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46437f2742cd36974812d04c75226449f9a26baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:d2:c2:d0:62:19:56:ae:4f:7d:70:94:5a:
2b:e6:ca:f1:b0:b3:84:5a:b9:1e:62:e6:f0:86:c7:
98:d3:04:6b:06:fe:33:52:8d:41:c9:37:a9:f2:7b:
64:ea:9b:e1:77:e2:f9:94:2f:4d:e5:73:93:c3:8a:
45:55:e4:95:d4:5a:ab:1b:5f:27:e8:88:04:af:b9:
2a:20:c4:6c:7e:e5:8f:52:e5:76:1a:d7:e6:e6:50:
1f:79:ac:33:0d:f7:c9:84:cb:40:32:72:a0:45:68:
1d:5f:b6:c2:b6:36:3a:3f:69:db:a5:4e:ae:ee:ff:
47:1b:9b:62:85:52:94:2e:a8:48:99:33:aa:6f:66:
93:ec:5c:c7:e8:36:22:fe:92:29:9b:ab:46:4d:de:
6b:92:11:8c:1a:28:80:66:8d:09:9a:91:e7:aa:dd:
71:44:2a:8b:3b:db:81:30:62:c5:e7:bd:09:a7:c8:
85:11:21:c5:98:e7:78:53:fb:31:10:69:69:a3:ee:
10:75:76:4f:e2:0b:f4:f9:e2:83:01:60:e0:c4:5c:
3d:98:e7:56:98:c4:0a:33:6e:d1:15:69:7f:56:ca:
12:49:46:a9:26:23:40:93:aa:81:43:c2:ac:91:e1:
f8:8d:92:a7:fa:dc:97:f3:0b:3a:fa:14:15:46:89:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:43:7F:27:42:CD:36:97:48:12:D0:4C:75:22:64:49:F9:A2:6B:AA
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/RkN_J0LNNpdIEtBMdSJkSfmia6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.62.0/24
109.107.155.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:91:c2:8f:bf:89:1c:8e:c6:79:50:fd:43:ee:a5:cf:1e:cc:
72:68:8e:77:a9:eb:ef:9d:9b:4d:03:a0:b1:4e:a9:fc:2a:76:
f0:52:34:02:88:5f:c9:86:8a:3c:ad:56:8e:84:e8:26:9a:18:
ac:dc:a0:14:1b:ba:09:7a:d9:55:45:80:28:70:a6:45:10:cc:
20:64:83:47:84:f3:29:0b:7a:7b:07:4b:b9:e8:e5:bb:ee:5b:
c0:cf:3d:05:88:33:0c:04:35:37:57:e4:9e:5f:de:ed:8b:41:
ab:c9:aa:ef:e0:9b:35:24:e9:c8:b6:a9:1e:2a:68:d3:2d:f5:
c3:28:8d:89:b5:db:17:b1:09:f8:26:a9:2b:f8:ba:b5:59:14:
93:27:bf:f6:da:7d:03:61:5d:7c:2b:fd:d2:fd:f1:fa:4e:9d:
0e:bd:9e:3b:6b:e5:73:05:0d:d1:e8:30:62:9c:44:6b:09:aa:
bc:32:f3:9a:9a:87:72:c9:cc:e2:0c:a5:f4:d2:0f:e1:d1:c4:
5e:61:c1:f6:ed:60:9b:93:5d:a4:93:ef:cf:30:a1:5d:b8:73:
3a:39:63:1a:d3:99:0c:7a:59:96:76:69:5e:5f:68:eb:2d:1d:
74:3f:06:82:82:9a:1f:7d:63:c4:54:45:da:7e:ab:dc:44:bc:
c7:61:b1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 18:34:35 2024 by rpki-client on console-fra.rpki-client.org