Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1BMUprctrWWHtQrOPIRS5vyD7OY.roa
File: 1BMUprctrWWHtQrOPIRS5vyD7OY.roa (raw, json)
Hash identifier: oVOli2pXifSFQYI1bPF6sAYysWdSgkh15k6TgdXzLds=
Subject key identifier: D4:13:14:A6:B7:2D:AD:65:87:B5:0A:CE:3C:84:52:E6:FC:83:EC:E6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AE176E4F5A6DE0DF3E5D4A297E017A824
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1BMUprctrWWHtQrOPIRS5vyD7OY.roa
Signing time: Fri 29 Sep 2023 15:03:00 +0000
ROA not before: Fri 29 Sep 2023 15:03:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.223.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 15:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e1:76:e4:f5:a6:de:0d:f3:e5:d4:a2:97:e0:17:a8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 29 15:03:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d41314a6b72dad6587b50ace3c8452e6fc83ece6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:f7:16:d5:71:fa:fd:c8:27:18:b3:fc:d9:
95:7f:76:66:b7:9d:03:50:5e:f6:d9:46:06:d1:db:
ad:3d:53:38:6b:73:ae:63:49:3b:86:f1:ea:39:0c:
3c:67:da:14:5b:bc:22:f7:b7:f2:c7:11:ec:23:f8:
50:6f:48:2f:6a:96:6a:d1:e1:3c:ab:02:5a:7d:be:
2a:ee:d3:ed:20:17:bc:c2:45:0a:84:8a:dd:f7:31:
09:df:4e:b5:62:c0:7a:46:65:71:f3:fa:54:b0:ef:
07:b9:44:73:0c:57:f1:74:40:33:f6:3e:c9:02:d6:
13:bf:6a:8e:b5:99:93:a8:cb:2e:72:4e:da:f4:2b:
fa:81:e6:2b:45:85:1e:5b:9a:32:df:4c:55:0f:0d:
4b:59:96:52:70:68:6d:f1:47:d5:bf:bd:ae:b6:df:
96:dd:12:18:ff:ef:ef:a3:6f:03:ed:b6:17:5f:ef:
48:8b:44:2d:e4:30:e6:1c:92:43:7c:ac:ee:50:96:
99:95:3e:d7:53:5b:0c:6e:e8:59:d7:38:f4:de:4d:
c0:20:f0:9f:9b:af:7d:28:e7:b2:4e:2d:b0:9b:7a:
22:68:ab:b1:04:f8:83:1e:8c:53:b1:5d:63:7d:f9:
56:c4:e0:71:21:bf:0e:91:63:08:84:7c:9d:ea:85:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:14:A6:B7:2D:AD:65:87:B5:0A:CE:3C:84:52:E6:FC:83:EC:E6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1BMUprctrWWHtQrOPIRS5vyD7OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.220.250.0/23
185.223.80.0/24
185.225.0.0/23
185.225.22.0/24
185.251.229.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:10:4b:b0:8b:f1:b9:ee:f2:4f:6f:62:96:8e:ed:05:5d:8a:
f4:f8:f6:95:1a:94:2e:98:4b:a8:c2:b0:a8:c6:e2:02:fa:00:
03:64:ed:87:c2:1c:dc:69:cc:08:8a:06:54:20:90:c8:d8:e3:
b1:4b:e7:ad:ea:be:17:ef:ac:65:89:d9:16:9d:40:1b:0b:fb:
82:9a:c0:4e:72:0f:52:a6:fc:4e:37:ec:98:96:4c:18:d8:82:
48:d5:81:02:60:44:c3:d8:03:6c:2b:38:bb:90:95:8f:6d:c3:
c1:20:2c:5c:bf:94:57:17:16:ae:b2:0a:fb:cb:cf:a0:5e:87:
ea:10:2b:29:24:39:08:ae:b6:9a:84:61:fa:29:9a:99:59:fa:
67:7b:ab:8a:b2:35:54:70:a9:74:f2:71:7e:ee:c5:27:01:aa:
55:5e:89:05:de:27:1e:4e:47:66:57:b5:f0:58:c3:9f:8b:d9:
fc:89:18:b2:12:2b:d7:d7:25:5e:05:98:41:1a:a7:51:42:24:
12:3c:24:56:5c:20:b0:70:d0:a1:2d:78:21:38:a8:18:bc:dc:
0c:47:6c:34:3d:36:05:c7:d5:b7:98:91:ba:37:3e:c8:a1:51:
c3:28:c7:2e:db:6a:2a:b6:5b:c0:02:6e:1a:63:4f:9a:5b:53:
b6:7b:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org