Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/V68WROEMnOoSsAfHr_kTqACcl8k.roa
File: V68WROEMnOoSsAfHr_kTqACcl8k.roa (raw, json)
Hash identifier: Vad2+oSpHtYehIjmRUGXy2bSZBYjm+80MeMxX4fYmE8=
Subject key identifier: 57:AF:16:44:E1:0C:9C:EA:12:B0:07:C7:AF:F9:13:A8:00:9C:97:C9
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 019169E506BFFCF79582019EC339AA0F4D7F
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/V68WROEMnOoSsAfHr_kTqACcl8k.roa
Signing time: Mon 19 Aug 2024 09:08:22 +0000
ROA not before: Mon 19 Aug 2024 09:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47164
IP address blocks: 212.231.82.0/24 maxlen: 24
212.231.83.0/24 maxlen: 24
212.231.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 08:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:e5:06:bf:fc:f7:95:82:01:9e:c3:39:aa:0f:4d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Aug 19 09:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57af1644e10c9cea12b007c7aff913a8009c97c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:e1:14:78:69:d1:f4:1c:45:9e:b7:9c:76:
88:d8:74:14:9a:a7:9e:f5:95:35:1d:93:fe:39:ba:
e9:39:e7:bd:90:99:fa:b2:e3:ae:5e:50:3a:c7:49:
73:3f:a4:b4:70:a2:4b:23:4d:9e:c1:56:a3:79:b4:
0d:c2:d6:ad:c5:32:51:b6:61:04:16:fb:d9:d7:98:
ba:07:23:75:b4:e0:09:64:1e:08:38:3e:17:38:f3:
55:30:e4:15:30:8b:13:1f:b5:74:6a:0d:4e:9b:11:
6d:73:87:68:2b:fd:60:67:45:a1:b6:78:51:f6:c4:
d3:dd:d6:4c:ca:d9:51:64:91:9e:e9:3e:54:ce:39:
7d:d1:eb:88:30:d9:f1:74:c1:ed:a9:2e:bc:57:c2:
25:04:c0:62:97:1a:10:e5:25:5e:06:46:57:9f:d5:
b4:09:d0:42:66:5f:6d:81:46:0d:6c:a7:12:4d:61:
b6:76:ab:8b:26:fb:35:5c:1c:fd:8b:88:65:b0:30:
d1:41:b0:4e:ca:89:2f:ac:dc:d1:18:19:21:82:dd:
28:9a:b4:10:ed:38:b5:dd:90:08:86:87:29:62:92:
99:6f:d0:ac:85:f7:f1:41:0c:2b:12:79:40:8d:f4:
a3:af:e6:50:f7:94:0b:28:a9:6c:ae:dc:cf:ed:94:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AF:16:44:E1:0C:9C:EA:12:B0:07:C7:AF:F9:13:A8:00:9C:97:C9
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/V68WROEMnOoSsAfHr_kTqACcl8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.231.82.0/23
212.231.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:96:24:d6:ef:38:a7:d7:6b:d3:f1:ba:4a:ad:8d:92:c8:de:
2a:b4:82:0f:8f:5b:e2:67:11:37:89:cb:e1:70:e8:26:5a:98:
d5:d3:9d:e0:78:10:da:90:bc:86:91:ac:32:57:d5:eb:42:82:
a4:fa:9b:96:7c:c2:07:ee:3d:80:9e:89:98:33:f3:33:25:70:
e4:2a:ab:3f:f2:86:ca:d1:d4:39:78:35:8f:c6:be:08:15:04:
ad:47:4e:2a:49:28:6d:e8:f7:c5:3d:3d:7e:cd:a5:16:41:a9:
4d:a7:9f:f2:01:f5:ed:cf:8a:f0:3b:61:f7:1c:c0:70:dc:a4:
a8:13:83:92:b0:19:79:34:a3:09:c6:f1:57:8e:72:89:2f:c6:
71:71:15:8a:2d:23:fc:83:83:f4:61:97:ac:58:a6:c8:3e:20:
b4:8f:2f:17:ad:04:34:2a:55:17:a1:fd:0d:73:7f:ee:0e:37:
d9:15:f0:85:c0:b1:83:bf:03:ac:47:fc:75:d4:3d:5b:f8:49:
44:da:51:01:f2:d0:40:13:2b:de:d3:81:a3:c2:0b:41:2c:11:
ab:f3:3d:66:47:7e:58:af:ff:36:c1:88:2e:fb:58:da:0b:a4:
99:57:b7:e6:36:72:19:f2:f6:0a:84:37:1a:0f:cc:9e:68:e8:
7c:a1:d2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 09:20:38 2024 by rpki-client on console-fra.rpki-client.org