Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-nzXt4zkTrNAL242DFyMRZ8rJJE.roa
File: 1-nzXt4zkTrNAL242DFyMRZ8rJJE.roa (raw, json)
Hash identifier: yBLsEykv6ZifkimzRimUqwcMb0ZPvS/yhpjMfqwX0ME=
Subject key identifier: FA:7C:D7:B7:8C:E4:4E:B3:40:2F:6E:36:0C:5C:8C:45:9F:2B:24:91
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018D30D88235883C144B0EDC57D8FCCE5546
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-nzXt4zkTrNAL242DFyMRZ8rJJE.roa
Signing time: Mon 22 Jan 2024 11:05:11 +0000
ROA not before: Mon 22 Jan 2024 11:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.223.82.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.22.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.230.65.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 11:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:d8:82:35:88:3c:14:4b:0e:dc:57:d8:fc:ce:55:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 22 11:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa7cd7b78ce44eb3402f6e360c5c8c459f2b2491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:57:6f:2c:89:ab:f4:c4:44:70:b5:cc:5d:
d5:ef:4b:d3:70:80:03:13:f6:77:0f:ab:77:04:07:
e1:62:a8:c8:70:58:f5:de:93:64:74:ee:85:19:9d:
61:cc:75:94:51:92:64:3f:d4:6a:46:67:ce:3d:05:
99:84:32:f2:2e:e6:b5:d8:ab:0f:ba:52:09:6f:40:
a9:2e:c3:25:4d:0b:70:eb:95:59:07:50:da:8a:26:
3d:3f:58:25:58:0d:4d:6e:16:15:cc:f0:aa:7e:44:
00:68:e6:e3:f6:57:5c:48:26:3d:7f:4b:b8:20:03:
2e:ec:e4:4e:cb:23:6f:14:c1:17:33:4e:63:de:e3:
d3:4a:fa:24:f0:16:eb:d6:4e:0a:ae:13:69:34:3e:
97:42:e1:4a:55:08:90:56:4e:e6:72:28:1a:bc:51:
b2:47:8f:18:ce:44:af:51:5f:e9:e8:ee:fa:75:76:
00:46:dc:05:ec:f8:f2:c9:54:75:ed:e8:6e:34:81:
dd:6c:c1:4a:0e:25:ed:71:d4:36:a2:ce:30:a4:9c:
3d:51:52:3d:c3:09:ed:c8:b9:6a:dd:1d:0b:69:4d:
99:27:9a:a5:43:76:69:24:96:9a:81:cf:23:05:d0:
fd:b6:9e:02:95:fb:8d:5f:26:d1:77:0b:c4:a6:24:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7C:D7:B7:8C:E4:4E:B3:40:2F:6E:36:0C:5C:8C:45:9F:2B:24:91
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-nzXt4zkTrNAL242DFyMRZ8rJJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.220.250.0/23
185.223.82.0/24
185.225.0.0/23
185.225.22.0/24
185.227.146.0/23
185.230.65.0/24
185.251.229.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
59:f6:6b:ea:8d:bd:2c:cf:09:fd:b5:8d:72:dd:a7:9a:81:35:
03:66:0f:ac:31:5f:9f:84:08:14:0f:8b:4b:22:ff:86:61:db:
df:2e:50:0c:34:d6:43:80:39:bf:08:f5:d2:18:35:04:46:f7:
f0:c1:25:97:94:3c:13:e8:b3:f2:f6:3f:30:7f:dc:81:48:05:
37:28:b1:51:a9:d5:a1:2c:27:c7:92:60:ca:d5:3d:d9:18:39:
dd:a4:a9:19:76:19:d5:55:a5:72:a8:12:31:fe:bf:08:e6:44:
4d:92:b2:91:0b:35:20:f0:b8:c9:52:c6:10:60:57:b3:aa:a8:
f6:c8:63:f0:0f:36:f6:cb:39:56:3d:e3:50:c5:fa:be:3f:72:
12:09:9d:c5:3d:cc:0f:50:4a:90:88:74:3c:0b:af:89:b7:1a:
ad:6d:88:c1:7d:b1:a3:06:50:df:37:e7:ca:bf:0c:5f:e0:a5:
f1:1e:c0:87:66:7c:16:03:47:ac:3a:16:9c:88:63:44:29:68:
c4:22:7c:1b:a3:58:62:66:f3:94:ff:9b:0c:a3:32:c6:b1:29:
c5:8f:b0:37:fb:28:cd:4d:64:2b:d5:52:50:5e:35:73:a8:da:
e1:bd:7f:08:37:cd:3a:4a:2b:95:1c:07:ca:fa:ee:46:e9:cb:
e9:eb:34:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org