Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0t5Tj4pl4QFLf2VhchG1lVypBtA.roa
File: 0t5Tj4pl4QFLf2VhchG1lVypBtA.roa (raw, json)
Hash identifier: ek6Zf8HsxYzrDKCcI1InJPf7cmYbCo8bKzexPwgDK4U=
Subject key identifier: D2:DE:53:8F:8A:65:E1:01:4B:7F:65:61:72:11:B5:95:5C:A9:06:D0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018EDE044AFF7DC5D0E164C31FE5816FBFBA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0t5Tj4pl4QFLf2VhchG1lVypBtA.roa
Signing time: Sun 14 Apr 2024 19:10:07 +0000
ROA not before: Sun 14 Apr 2024 19:10:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.81.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.223.82.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.234.20.0/24 maxlen: 24
185.251.230.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 10:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:de:04:4a:ff:7d:c5:d0:e1:64:c3:1f:e5:81:6f:bf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 14 19:10:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2de538f8a65e1014b7f65617211b5955ca906d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:39:cb:92:5f:63:86:5e:a0:cc:f6:bb:1d:
e3:6b:8d:0c:40:52:d9:16:ce:ad:2a:f7:e1:8b:47:
74:91:ee:79:a6:d4:59:ce:bc:a4:b5:5d:97:83:f8:
5b:6c:33:3d:d9:ef:51:9c:99:c9:65:04:96:3d:15:
f5:09:7a:59:6f:7f:60:4a:2f:e9:98:dd:35:1c:9a:
1f:cb:b0:f9:02:5d:56:50:4d:52:bc:89:61:c1:be:
bb:01:31:b0:8d:17:51:0b:51:70:aa:d9:7a:20:45:
8c:c8:37:27:d5:76:11:9a:cf:95:55:d5:cc:eb:78:
42:48:dd:ac:ee:dd:4c:6e:38:b7:b8:14:b2:0c:84:
e4:5c:62:e9:50:3a:cd:83:cb:9c:c1:5c:db:9f:1e:
29:84:55:89:8f:4c:cd:23:4e:e9:5e:b9:6e:1d:3b:
7d:cc:76:2a:63:ab:a0:e3:bd:f8:d5:af:00:85:16:
c8:7e:09:92:7b:11:af:0e:63:ba:75:28:43:86:6d:
e8:e3:3b:34:7d:3d:0a:82:5f:fc:b4:26:6f:2f:ea:
d5:ed:6c:9e:be:0b:ac:ad:84:ea:33:0c:d5:8d:90:
71:fd:08:6d:8a:1f:2a:14:dc:a8:f8:a9:ff:f1:65:
40:78:e6:2e:c7:ae:70:ce:d2:73:4b:bd:ae:68:0c:
58:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DE:53:8F:8A:65:E1:01:4B:7F:65:61:72:11:B5:95:5C:A9:06:D0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0t5Tj4pl4QFLf2VhchG1lVypBtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.81.0/24
185.220.250.0/23
185.223.82.0/24
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
185.234.20.0/24
185.251.230.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:2d:29:fc:22:2c:1d:a1:cb:8d:7b:e4:d5:1f:c0:d0:20:bb:
c7:8e:e1:fa:19:09:96:10:e4:a7:6e:23:f3:52:1b:41:a4:fa:
16:19:c9:e9:5b:6b:61:2b:d0:59:87:76:f4:b5:f0:b9:9a:5e:
95:c3:ce:36:31:5d:e2:47:3a:66:74:5d:7f:45:02:68:dc:a4:
20:42:fa:4a:c7:d2:cc:6d:17:de:48:fe:35:c1:87:15:ab:11:
53:08:e0:88:93:4f:4c:09:55:26:0f:22:a4:37:fe:e7:a7:ae:
2a:46:af:ce:c7:2c:9d:12:84:7a:87:1f:5f:ec:97:6a:35:9f:
46:0c:a4:15:c2:8f:1a:32:0e:fa:ec:95:7e:43:48:91:17:7e:
5c:d1:6c:7b:09:ed:3a:bb:db:d5:cc:69:f3:23:6c:3f:3d:1a:
f1:81:e5:28:55:33:c2:d1:85:86:d4:a0:18:82:d0:bc:46:1d:
1f:63:32:f5:da:f5:33:20:0d:4f:8e:fb:d0:88:c6:4c:51:64:
b0:63:59:f9:55:95:27:53:74:e9:36:17:df:df:e4:93:fd:da:
1e:c6:4f:dd:0f:47:30:b1:d0:a4:37:f6:b3:ff:87:6a:51:2e:
ad:dc:9e:12:58:0b:fa:45:ba:68:42:db:0a:3e:47:12:4a:f6:
2a:6d:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:39 2024 by rpki-client on console-fra.rpki-client.org