Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-Bgjxb-Hav69mk_jccmeROfHH9Y.roa
File: 1-Bgjxb-Hav69mk_jccmeROfHH9Y.roa (raw, json)
Hash identifier: ed6SBk3W6HGCp4NnuYiEKFRUcnkU0VFAkI6wif7rigM=
Subject key identifier: F8:18:23:C5:BF:87:6A:FE:BD:9A:4F:E3:71:C9:9E:44:E7:C7:1F:D6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C8BD42BA8849EB384AF110DCC00C5F10B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-Bgjxb-Hav69mk_jccmeROfHH9Y.roa
Signing time: Thu 21 Dec 2023 10:03:06 +0000
ROA not before: Thu 21 Dec 2023 10:03:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202636
IP address blocks: 185.252.44.0/22 maxlen: 22
185.248.200.0/22 maxlen: 24
37.32.96.0/23 maxlen: 23
185.150.78.0/23 maxlen: 23
185.150.77.0/24 maxlen: 24
93.189.121.0/24 maxlen: 24
185.191.44.0/22 maxlen: 22
93.189.122.0/24 maxlen: 24
185.239.254.0/24 maxlen: 24
194.41.118.0/23 maxlen: 23
194.41.116.0/23 maxlen: 23
194.35.41.0/24 maxlen: 24
185.218.18.0/24 maxlen: 24
185.227.205.0/24 maxlen: 24
45.134.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:d4:2b:a8:84:9e:b3:84:af:11:0d:cc:00:c5:f1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 21 10:03:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f81823c5bf876afebd9a4fe371c99e44e7c71fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:98:c6:9b:1e:81:df:ae:ac:a9:d8:ba:9b:
ff:80:a1:e5:31:e0:3e:70:52:90:82:66:57:e9:a8:
48:27:12:7a:2d:9c:73:a1:af:95:95:c7:8c:5e:42:
5b:a4:ed:e1:8f:3e:0c:9a:4d:a9:fe:a5:a1:98:a3:
3f:2b:54:27:7f:cd:e6:5f:e5:ef:9e:09:e8:c7:3f:
8c:3a:d9:5d:bc:88:0c:2b:f4:e7:56:4b:22:88:cf:
37:7f:cc:8e:d9:fa:24:59:a0:10:3c:01:a5:23:f3:
81:f5:eb:fa:68:9d:4a:43:09:6f:43:eb:94:07:64:
33:38:7b:b2:72:7e:92:62:e2:b2:4f:67:3c:b5:8b:
1f:4a:c4:5c:3d:40:25:06:7f:5f:95:9d:1c:0c:51:
e5:8d:27:44:9a:23:b2:21:b6:e1:c8:3d:2f:83:d6:
65:fb:d2:4e:88:0b:c0:73:92:d9:87:e2:e4:52:cf:
ee:c8:78:68:66:78:98:c4:57:2e:eb:13:a6:b2:82:
2a:4b:33:3a:c0:a2:24:a2:09:3b:cc:10:bc:6f:e0:
1a:76:6b:a6:8f:d1:fb:61:7b:58:f2:77:70:be:3c:
2d:a8:85:ec:b2:94:2e:61:c0:94:27:87:af:c7:f6:
32:fb:75:b1:df:ac:d6:35:ad:4c:27:4d:c5:23:87:
60:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:23:C5:BF:87:6A:FE:BD:9A:4F:E3:71:C9:9E:44:E7:C7:1F:D6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-Bgjxb-Hav69mk_jccmeROfHH9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.96.0/23
45.134.87.0/24
93.189.121.0-93.189.122.255
185.150.77.0-185.150.79.255
185.191.44.0/22
185.218.18.0/24
185.227.205.0/24
185.239.254.0/24
185.248.200.0/22
185.252.44.0/22
194.35.41.0/24
194.41.116.0/22
Signature Algorithm: sha256WithRSAEncryption
58:54:4d:b3:12:30:36:54:56:4a:cb:15:13:d8:f9:01:f9:68:
a9:d9:b2:04:02:5b:d4:cd:8e:df:44:53:3c:3a:20:5a:41:7e:
75:37:25:03:c1:61:1f:66:df:67:32:46:34:b5:1a:06:c9:89:
15:a9:66:59:94:2b:94:aa:59:84:13:04:3f:f7:68:7b:a1:65:
24:81:29:b9:f4:d6:c6:ed:77:ab:10:40:2a:61:7b:8a:12:6c:
25:36:d3:7f:2e:7c:39:a9:43:40:ba:3b:a5:e5:8d:d4:3f:a7:
f9:bc:3f:34:95:11:64:94:59:bd:d0:b1:5b:33:70:39:e8:2f:
c7:5a:8c:a0:ba:c8:a6:06:c6:d4:3c:0a:a6:6c:2e:7a:cd:41:
bb:6b:c5:26:6b:c2:23:4a:f2:74:a6:b9:4f:50:17:84:c9:c7:
d4:37:e3:20:a7:7c:6f:30:30:2c:64:68:fa:c8:5f:b4:d5:06:
fa:5a:ec:3e:7f:a6:0a:4e:40:6c:76:3c:a3:29:ec:cf:61:eb:
9d:f9:4b:c6:b4:d5:7f:2a:e7:cf:35:45:eb:5b:dc:63:9e:bb:
65:21:2b:d9:c2:bc:42:05:83:5d:32:1d:2f:1f:81:2b:c5:c8:
f6:dd:de:7b:6a:3d:f0:37:67:22:bf:21:c3:86:12:a5:f9:45:
37:64:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:19 2024 by rpki-client on console-ams.rpki-client.org