Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2lUQk3L0dPh1QRvvbBOBlnwQeG8.roa
File: 2lUQk3L0dPh1QRvvbBOBlnwQeG8.roa (raw, json)
Hash identifier: UyfVuzk+XCh0hGgFGo+K3blwVo5Z/AZt1TutyyFO+2s=
Subject key identifier: DA:55:10:93:72:F4:74:F8:75:41:1B:EF:6C:13:81:96:7C:10:78:6F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0191A453D399988AB577537921AA136CA1EA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2lUQk3L0dPh1QRvvbBOBlnwQeG8.roa
Signing time: Fri 30 Aug 2024 17:27:22 +0000
ROA not before: Fri 30 Aug 2024 17:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 15:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a4:53:d3:99:98:8a:b5:77:53:79:21:aa:13:6c:a1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 30 17:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da55109372f474f875411bef6c1381967c10786f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:38:98:48:61:2d:54:0a:d7:1a:5c:41:14:
3b:0e:2d:9f:2a:0e:12:3c:7f:67:ab:57:27:29:fc:
85:0c:42:9e:4a:b7:43:46:cd:06:de:91:13:07:45:
42:ed:ba:a5:e6:98:bd:21:dd:48:73:e9:ba:d5:58:
e9:7a:fd:64:60:72:a1:4f:76:de:82:ba:03:5f:3b:
6c:22:87:b5:57:5a:53:70:06:76:f2:77:71:35:22:
eb:19:79:9e:6b:bc:97:a9:bc:7a:c2:b2:65:03:aa:
7c:5f:17:80:9d:cf:a5:b1:71:92:02:a9:b7:3a:7d:
a9:06:15:37:ac:c0:35:84:5b:8c:4f:0d:8b:ca:7f:
0f:c5:5c:77:74:1e:fa:ac:e1:cd:1b:8c:58:c6:c7:
ed:0e:6e:da:33:00:d0:1c:90:a7:be:9b:29:6b:4c:
1b:9a:3d:b4:26:e7:29:06:f0:40:c3:50:bc:11:6d:
49:d7:ef:c3:78:b3:c0:57:f2:27:2b:32:5d:c6:e7:
09:c4:f7:15:be:a8:ca:69:c9:a0:a4:8f:19:44:d9:
40:91:fb:99:e6:d8:21:ad:bd:9d:fc:76:de:17:ef:
5e:25:0a:12:21:c5:b5:98:a2:50:4f:e8:61:62:47:
79:6d:27:31:da:11:37:af:b9:65:69:0d:a0:bf:08:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:55:10:93:72:F4:74:F8:75:41:1B:EF:6C:13:81:96:7C:10:78:6F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2lUQk3L0dPh1QRvvbBOBlnwQeG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.131.135.0/24
185.126.82.0/24
185.218.20.0/24
185.220.250.0/23
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:96:3b:37:8e:d7:d7:75:4c:07:65:6d:83:a1:41:9a:dd:5e:
83:1b:8b:3a:f0:07:27:47:64:bb:92:fc:35:77:46:f2:2c:b6:
44:c7:b3:c5:d2:eb:b7:1e:4b:55:72:c0:cd:89:06:d7:b2:71:
b9:cf:cc:0f:dd:69:58:fd:a1:c7:a5:f2:c5:39:a8:cd:ca:fd:
e3:f2:5e:96:49:f6:90:73:ef:b5:5c:04:14:05:bd:72:43:e3:
72:ac:47:b5:e2:21:05:f0:34:a9:02:4e:58:5e:78:ca:05:37:
4a:7c:03:05:ef:b6:07:ab:81:89:ac:89:12:bf:02:97:2b:d1:
e3:45:d4:3d:ce:12:3b:b3:87:57:5e:a3:e0:9e:97:66:24:70:
a2:c4:c9:e1:5a:15:86:c0:14:6c:22:f7:84:bc:7e:57:04:46:
40:b1:37:8b:7c:03:0a:11:c9:4c:cc:0c:b6:89:18:4f:2c:24:
9f:b3:0c:11:11:18:a6:6c:2b:39:8c:29:6f:f6:8b:be:b3:20:
07:aa:b5:8e:e3:a4:5b:c6:05:75:9f:31:a7:6b:18:b4:38:aa:
d3:37:d6:c8:de:da:8f:a6:fe:3b:f5:de:dd:59:91:77:02:f4:
e8:7c:58:80:65:42:bd:67:7d:6a:24:a0:b6:83:62:0e:8b:bc:
1e:5c:5f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 18:31:12 2024 by rpki-client on console-ams.rpki-client.org