Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2MdlsVkEagAmL9hS_B0zTa5zrl8.roa
File: 2MdlsVkEagAmL9hS_B0zTa5zrl8.roa (raw, json)
Hash identifier: Aue9+Bj7bHAiSUIS0x0lwlI8yEuQmSIBokrbhY5RNVk=
Subject key identifier: D8:C7:65:B1:59:04:6A:00:26:2F:D8:52:FC:1D:33:4D:AE:73:AE:5F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0192422CDC5CEE5EF6007237D8C8A0F9B62F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2MdlsVkEagAmL9hS_B0zTa5zrl8.roa
Signing time: Mon 30 Sep 2024 09:04:49 +0000
ROA not before: Mon 30 Sep 2024 09:04:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.113.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
194.76.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 10:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:2c:dc:5c:ee:5e:f6:00:72:37:d8:c8:a0:f9:b6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 30 09:04:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8c765b159046a00262fd852fc1d334dae73ae5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:f7:a3:a5:f3:2f:83:23:8b:ff:33:41:75:
fe:e5:b9:3a:ab:fc:84:3e:e8:9c:f7:a6:d8:a1:1f:
90:26:a3:22:69:3e:21:2b:0c:e9:5e:d8:dc:ed:20:
af:75:ed:db:b7:52:2e:25:75:06:d1:57:b0:94:20:
7a:f3:9c:11:89:5a:1c:d6:2a:2a:a8:2b:2f:5d:99:
54:99:02:3d:c3:d6:94:52:79:dc:67:d2:62:8f:9a:
3f:16:05:4b:fc:75:f9:43:bb:42:7b:6a:9f:e3:3b:
be:b3:e2:2d:29:7a:d0:44:89:fa:f7:ca:2b:4b:c3:
28:c5:78:1c:1f:f0:f4:29:42:38:b9:bb:15:a6:b0:
ec:44:6c:e4:92:e8:40:c6:6c:0c:c4:f3:02:98:b1:
34:f6:b3:29:d9:57:16:5d:32:53:d7:44:91:0a:62:
f0:07:bd:c3:8b:aa:04:fc:f8:cc:22:a7:d0:72:1b:
ed:17:9c:e9:fe:f2:85:58:81:19:23:dd:2e:d4:6d:
04:49:a9:80:df:ea:43:64:29:b6:18:6e:7f:c7:ec:
1c:cf:b5:4c:f1:2b:41:a8:34:e9:c9:d7:79:9e:81:
cf:ee:09:c7:57:95:2b:9f:ff:f0:b9:2d:4e:38:d4:
3f:fb:a8:87:78:61:b6:3f:fd:91:48:e7:be:56:d5:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C7:65:B1:59:04:6A:00:26:2F:D8:52:FC:1D:33:4D:AE:73:AE:5F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2MdlsVkEagAmL9hS_B0zTa5zrl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.218.101.0/24
185.220.250.0/23
185.223.80.0/24
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
193.8.112.0/23
193.58.146.0/23
194.76.173.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:da:fa:3f:13:9e:44:a6:59:42:4a:9f:bc:1e:69:be:6a:09:
7c:50:02:22:06:63:04:c3:12:d0:d5:c4:ad:4e:9d:f7:c2:35:
dc:40:31:0b:0f:a7:c7:d2:d3:de:c0:bd:96:c8:fb:0d:81:34:
75:4c:7f:91:13:3c:3a:b5:a6:b2:13:da:e1:72:c3:b0:af:b4:
0b:46:2d:cd:c0:c6:11:eb:1a:bc:f8:cf:6a:c8:6a:46:33:a1:
ed:42:4b:fc:af:9f:05:06:b6:2b:83:0d:a6:53:cb:12:e9:c4:
0a:63:3a:62:c8:4c:35:b5:31:70:20:8d:7e:2e:13:25:af:c3:
e6:83:d3:76:7f:e7:81:5c:ff:eb:6c:b2:87:3f:5e:d2:24:77:
3a:27:e6:0a:66:ff:28:aa:92:cc:c7:17:b3:cb:39:d7:ac:c2:
e7:48:37:4f:63:d2:b1:ca:63:a5:d8:51:98:97:bf:33:67:b5:
18:36:ce:1d:af:46:a7:ff:89:60:23:1c:4e:45:bd:8d:4d:21:
64:fc:3c:82:36:60:2f:c4:77:4f:d0:71:9e:3a:c4:bf:9c:28:
5d:a2:2b:c9:0d:e2:44:0e:a2:bb:6f:9a:47:7b:a3:be:53:fa:
1b:33:d5:0c:e7:63:06:23:9f:a3:3f:f4:25:fa:a9:b0:d7:f7:
bd:ed:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 13:17:24 2024 by rpki-client on console-fra.rpki-client.org