Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/knL0J-IPwdHzT-g_rLZ8-Bea7uw.roa
File: knL0J-IPwdHzT-g_rLZ8-Bea7uw.roa (raw, json)
Hash identifier: Ix5lP2d/t20sNUpIJCPOlXV2m0MCJewAxbjWl+fQKaE=
Subject key identifier: 92:72:F4:27:E2:0F:C1:D1:F3:4F:E8:3F:AC:B6:7C:F8:17:9A:EE:EC
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50108387AFD9E9E92AFA4811B9E1819
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/knL0J-IPwdHzT-g_rLZ8-Bea7uw.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 185.192.68.0/24 maxlen: 24
45.85.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 06:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:08:38:7a:fd:9e:9e:92:af:a4:81:1b:9e:18:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9272f427e20fc1d1f34fe83facb67cf8179aeeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ec:a1:e0:d9:80:77:be:0c:d8:76:bf:39:8e:
93:9c:e1:a8:55:0f:a0:e7:4c:c1:67:d1:a9:97:a0:
f6:e3:88:9c:44:e8:71:a0:a0:e1:44:fb:9b:33:3e:
56:1c:8e:a0:66:55:e3:b0:81:0a:8c:9a:ad:88:85:
48:b0:36:c0:7a:83:88:6c:0b:f5:dd:d4:90:9b:57:
b6:be:04:7b:e8:9b:4a:55:92:ba:a6:16:4a:02:b3:
97:f7:ad:bb:23:14:54:93:1f:9d:d3:3d:a6:be:6b:
bc:76:c6:46:e3:6e:a5:ee:cb:64:68:c4:08:a9:ff:
03:0f:47:8c:f1:db:66:1c:d2:d4:b3:77:67:7c:ae:
56:e2:3f:17:a6:7a:f8:49:d7:80:fd:d3:16:91:b7:
91:90:87:dd:4c:b2:25:c0:9d:b0:21:a0:54:30:14:
d6:d5:83:04:a3:b2:c2:78:50:e5:42:08:6e:ec:5d:
83:04:08:7a:ea:9e:65:cd:e2:c5:89:56:a4:31:27:
da:8f:29:3e:a7:43:4d:15:41:21:39:d4:63:5b:bb:
a1:de:0d:dc:65:34:32:de:f5:13:02:cd:c9:28:cb:
ec:d3:00:9b:fc:d7:aa:13:53:2a:83:89:34:d6:62:
76:2a:cf:48:c1:3c:14:3b:4f:e9:58:a0:a3:1b:9c:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:72:F4:27:E2:0F:C1:D1:F3:4F:E8:3F:AC:B6:7C:F8:17:9A:EE:EC
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/knL0J-IPwdHzT-g_rLZ8-Bea7uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.107.0/24
185.192.68.0/24
Signature Algorithm: sha256WithRSAEncryption
49:43:84:5b:34:12:7c:5d:7f:ef:44:16:af:9b:17:67:fb:ed:
e6:ba:1a:75:03:90:ed:ed:11:b9:1e:34:5e:8d:5a:9b:c5:91:
77:78:15:90:5e:e7:b0:cc:de:4a:73:87:f5:ac:5d:fe:5b:f5:
a2:b9:93:a5:e1:50:28:f0:18:1b:8f:64:b8:c4:4d:ba:6a:7d:
7f:16:02:e3:06:3c:3e:54:58:a8:21:23:54:9d:b9:1f:c3:3e:
5a:8b:7b:5d:fb:7e:c5:3e:4d:aa:41:ab:28:58:59:b2:09:25:
17:c5:7c:79:dd:e3:05:f1:22:e6:4e:ce:54:da:06:3a:f3:e6:
94:01:0e:d7:a9:10:fa:90:9f:31:e9:f0:e7:18:f9:0c:75:f6:
c9:64:00:a5:b9:f9:41:d5:90:24:16:d6:40:53:77:23:98:3b:
1a:fc:b1:1d:fb:17:8e:db:88:03:03:b1:8a:90:69:1e:12:e0:
11:a7:99:2d:2c:2a:d1:45:6f:6c:65:73:44:d8:01:20:69:38:
1a:b2:af:8b:7d:3a:d9:c9:63:ac:03:09:b1:3a:0f:63:56:b3:
e3:7b:ef:6a:c0:23:a2:c2:c6:ca:f6:0c:9c:f9:c0:1a:49:c9:
d3:69:e7:95:ff:2f:a8:fd:09:11:04:24:ed:d1:42:05:54:ca:
45:67:88:c6
-----BEGIN CERTIFICATE-----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Generated at Thu Apr 25 07:19:18 2024 by rpki-client on console-fra.rpki-client.org