Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/U0JIRw839TpHhvSmFDHYEu0DqhE.roa
File: U0JIRw839TpHhvSmFDHYEu0DqhE.roa (raw, json)
Hash identifier: oPjRYkpVO/icJek6Sqiii5g+jhLvEhVaP+sfS0TtvRU=
Subject key identifier: 53:42:48:47:0F:37:F5:3A:47:86:F4:A6:14:31:D8:12:ED:03:AA:11
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185710303C4488CF90C312C5DBEE476DD53
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/U0JIRw839TpHhvSmFDHYEu0DqhE.roa
Signing time: Mon 02 Jan 2023 05:45:01 +0000
ROA not before: Mon 02 Jan 2023 05:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32181
IP address blocks: 45.85.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:03:c4:48:8c:f9:0c:31:2c:5d:be:e4:76:dd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=534248470f37f53a4786f4a61431d812ed03aa11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:e4:e4:75:68:c6:43:c3:e7:4d:b0:c0:f9:
35:a2:7c:7a:ef:27:a8:9a:75:09:7a:58:bc:b1:7b:
f6:a3:f4:2d:9f:30:b7:4b:99:68:b3:6b:30:af:9c:
ad:37:02:52:91:de:a7:3f:93:cd:7e:26:14:a1:56:
a7:78:fb:54:fc:fc:9d:4c:d7:3e:a3:cb:df:4b:35:
67:35:0c:84:e2:ce:d5:f8:9c:09:16:7b:50:74:46:
a9:3d:9b:b7:68:7b:29:34:49:1b:e1:0d:c5:61:94:
7f:d6:82:36:8a:15:a5:91:1f:9f:7f:a6:75:99:22:
05:08:31:55:cd:a8:67:b0:cf:d2:69:29:27:a2:ab:
33:df:5e:57:a5:ae:6f:d6:29:e4:00:b2:82:93:c0:
c2:d0:76:f7:6f:c0:e6:1f:42:12:03:12:25:96:23:
d3:da:44:b8:19:44:4d:5e:7f:e5:69:9b:2d:bb:ca:
30:b9:50:ba:ba:cd:13:3e:29:66:6f:fa:03:de:6b:
8a:b1:44:88:65:20:f3:bf:f3:39:68:8d:5a:d7:86:
c3:41:90:2c:6b:5e:0d:19:fd:88:04:a2:a0:fc:95:
68:7d:c6:64:d6:f1:de:f0:58:0d:c6:fd:c4:e2:3d:
fe:83:49:5b:e9:3e:7e:75:e8:72:bc:87:01:27:32:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:42:48:47:0F:37:F5:3A:47:86:F4:A6:14:31:D8:12:ED:03:AA:11
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/U0JIRw839TpHhvSmFDHYEu0DqhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e2:3b:3a:47:31:56:0b:8c:b9:10:fd:45:67:ab:58:41:5a:
27:f9:7d:91:81:12:ca:ba:ee:22:31:e2:6b:14:82:23:5c:cf:
3b:2f:59:e9:df:f1:7a:f7:69:36:d7:78:d6:5b:2b:85:fa:1f:
fe:e5:58:b8:2e:80:2d:18:ad:7d:79:5f:f1:19:49:0c:d6:7e:
79:40:95:e7:c5:ce:b0:8b:93:37:66:8c:96:40:f6:52:79:41:
d5:14:c2:43:40:34:1c:ae:b1:63:d9:b2:97:13:fa:11:bd:f4:
0a:3e:b3:33:73:87:d5:54:33:1a:4e:1a:45:38:37:e5:9e:42:
31:ec:ef:83:d1:1b:f3:9a:4e:72:29:ad:00:fb:d3:8f:25:51:
c2:d9:30:fc:34:04:54:d0:73:95:5e:25:55:10:59:9c:08:fb:
08:5e:57:78:7b:19:5b:91:34:f2:58:53:85:46:fc:24:35:55:
56:08:24:02:b3:c6:6c:f7:b5:28:cc:3c:e7:d3:6d:cd:c1:9a:
e6:17:89:13:b2:56:64:82:fb:01:1e:97:e1:5f:7e:4d:5c:ac:
5a:1a:93:25:58:75:8e:e2:7b:46:46:60:bc:36:48:99:fe:53:
c0:69:0a:f1:ff:fa:a6:58:fa:9c:5b:a2:c4:40:6a:81:b2:98:
dc:e6:5e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org