Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/2LyGUJkiBYEMDlHVqVeVDlbHaT8.roa
File: 2LyGUJkiBYEMDlHVqVeVDlbHaT8.roa (raw, json)
Hash identifier: YYTOFPEakoJJ1OinCnlZ5dKiT++hmT1cR3mFhS+es9c=
Subject key identifier: D8:BC:86:50:99:22:05:81:0C:0E:51:D5:A9:57:95:0E:56:C7:69:3F
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 018B8509887BAB8EEC18A7A054F07787D6B7
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/2LyGUJkiBYEMDlHVqVeVDlbHaT8.roa
Signing time: Tue 31 Oct 2023 09:21:16 +0000
ROA not before: Tue 31 Oct 2023 09:21:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205072
IP address blocks: 185.149.108.0/22 maxlen: 24
109.109.128.0/20 maxlen: 24
45.155.21.0/24 maxlen: 24
45.155.20.0/22 maxlen: 22
195.5.176.0/24 maxlen: 24
45.137.36.0/22 maxlen: 22
87.239.16.0/21 maxlen: 24
194.26.214.0/24 maxlen: 24
45.147.88.0/22 maxlen: 22
193.22.80.0/24 maxlen: 24
195.5.161.0/24 maxlen: 24
195.5.170.0/24 maxlen: 24
195.5.168.0/24 maxlen: 24
2a0d:da00::/29 maxlen: 29
2a0d:da00::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:09:88:7b:ab:8e:ec:18:a7:a0:54:f0:77:87:d6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Oct 31 09:21:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8bc8650992205810c0e51d5a957950e56c7693f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:85:a6:84:60:b2:a5:28:a1:f6:04:b9:67:c4:
54:80:77:d1:89:64:9a:d6:76:ec:20:80:32:f0:ad:
c8:d4:03:64:4a:1c:f6:b8:73:42:a8:8e:87:46:10:
2b:da:c9:be:fb:6a:86:4b:89:57:f1:70:24:e2:16:
33:3b:01:60:22:54:dc:f7:c9:0b:17:25:a4:09:69:
3e:02:26:87:d2:c8:4a:04:05:38:d5:7f:1e:a0:28:
df:9f:9e:9d:96:93:10:97:b3:4f:55:71:c2:2d:78:
51:d7:62:76:78:3b:16:57:d5:61:5e:3e:6b:f9:5f:
3e:2b:64:87:22:63:3b:7b:b4:69:ac:80:ed:b3:34:
14:74:e1:55:0d:57:ac:c7:62:40:3a:8b:77:34:ee:
aa:91:6d:00:61:e1:80:e2:dc:43:a1:e1:f8:72:5a:
b9:6f:7b:82:b9:16:21:75:ed:4e:eb:f1:70:55:c6:
f2:26:72:04:ee:ae:ac:4d:2d:74:fe:38:f2:87:7f:
ba:0b:cf:05:4f:c1:4e:05:52:2b:1e:e8:bb:ee:84:
a6:d6:2e:fa:e0:76:07:78:f2:45:01:b6:7c:01:cb:
cc:c5:91:c5:46:21:4b:8a:d6:47:a3:88:44:a0:5c:
49:23:6d:36:38:4b:4b:54:4d:24:63:af:5c:33:79:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BC:86:50:99:22:05:81:0C:0E:51:D5:A9:57:95:0E:56:C7:69:3F
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/2LyGUJkiBYEMDlHVqVeVDlbHaT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.36.0/22
45.147.88.0/22
45.155.20.0/22
87.239.16.0/21
109.109.128.0/20
185.149.108.0/22
193.22.80.0/24
194.26.214.0/24
195.5.161.0/24
195.5.168.0/24
195.5.170.0/24
195.5.176.0/24
IPv6:
2a0d:da00::/29
Signature Algorithm: sha256WithRSAEncryption
48:54:7f:fd:ed:ac:a2:d6:14:16:1e:b1:bc:4d:0e:49:8a:38:
46:bf:08:50:20:68:72:5c:44:63:dd:f9:92:fe:e3:1c:f6:31:
ae:6b:69:21:d0:9a:c4:68:53:36:ed:7b:81:df:df:39:c6:f6:
4a:e1:79:5b:7f:62:eb:2e:07:e5:4f:5b:93:4f:34:38:15:9a:
5a:ca:3c:39:f5:bf:50:6e:be:9a:19:c5:99:b1:89:a7:34:0a:
1a:a9:14:92:1b:ad:89:65:6d:1c:52:6f:99:40:78:22:fb:22:
46:88:03:4f:c9:fc:13:f5:32:77:c9:5c:3c:5b:00:5b:77:d5:
cf:61:40:38:c0:a9:d2:00:d0:5c:ed:65:10:c0:1e:6a:e2:0d:
65:10:ea:8b:7b:8e:84:28:85:af:70:4e:b6:01:e8:30:9c:42:
79:9b:0a:69:23:b5:d0:3c:8d:af:e9:b6:ac:4c:9e:27:63:b5:
58:4d:82:93:b1:ea:af:9b:05:98:53:03:e3:7e:c7:a2:e7:a7:
7c:d4:ac:f1:a4:3f:ea:25:84:a2:1c:6a:b4:69:4e:d6:fa:d1:
e8:1d:76:26:8c:f9:d4:3e:22:05:56:e0:61:d1:ed:71:94:49:
95:20:d0:b0:fe:82:c8:d9:d0:4f:21:dd:a6:94:8e:59:5a:b9:
01:c0:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-fra.rpki-client.org