Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3EByPnzfkyZuSCU1mhb7EEvOWUE.roa
File: 3EByPnzfkyZuSCU1mhb7EEvOWUE.roa (raw, json)
Hash identifier: eBwUGBc2kRed8EPwtNdGP17xCSPaRb5WxBczHnJSBKg=
Subject key identifier: DC:40:72:3E:7C:DF:93:26:6E:48:25:35:9A:16:FB:10:4B:CE:59:41
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A3CA634F2A4F051431C50F3D2B66A0F9D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3EByPnzfkyZuSCU1mhb7EEvOWUE.roa
Signing time: Mon 28 Aug 2023 14:57:20 +0000
ROA not before: Mon 28 Aug 2023 14:57:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.209.36.0/23 maxlen: 24
185.230.52.0/23 maxlen: 24
185.199.159.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.238.228.0/22 maxlen: 24
185.36.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 11:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:a6:34:f2:a4:f0:51:43:1c:50:f3:d2:b6:6a:0f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 28 14:57:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc40723e7cdf93266e4825359a16fb104bce5941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:fe:23:bc:df:38:a7:89:fc:3f:c3:91:de:
3e:13:fe:57:ac:17:df:67:61:8c:d9:e5:cd:34:0b:
4e:3e:10:b5:7f:7a:67:a5:4a:8d:2c:1e:fa:72:09:
d6:8a:4e:d0:ee:3d:f7:f8:86:ed:ed:8a:34:f3:08:
92:67:a6:b4:f9:04:48:fa:f0:01:dc:4d:28:c7:70:
c0:9a:8c:de:82:82:4b:06:79:81:53:33:65:7e:96:
d7:46:c6:97:55:a4:9a:e3:58:e5:43:1f:90:b4:13:
3f:6c:6f:1e:bc:25:9a:36:bd:3e:4d:bf:ce:a6:60:
16:84:3a:eb:7e:1d:ef:41:74:ca:c0:11:ca:58:a3:
1b:3e:50:e0:cb:9b:81:f7:34:c8:78:cd:46:41:d1:
a0:98:c3:65:da:74:d5:14:0d:2e:3a:f4:03:b2:46:
9b:e1:fb:eb:ed:19:14:28:57:16:ca:7a:e4:97:85:
81:a8:0f:dc:54:85:88:69:0a:5e:ff:9c:27:ad:80:
e2:8f:c5:f9:96:82:5d:55:f0:61:e0:6d:b1:42:45:
88:43:24:14:df:5c:ef:b1:91:c1:c3:62:bb:b7:d2:
95:a6:48:80:7a:e9:d2:88:1b:2b:e4:aa:e5:88:7d:
99:fd:f5:a4:9c:be:ac:dd:29:95:c2:e0:97:ec:ee:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:40:72:3E:7C:DF:93:26:6E:48:25:35:9A:16:FB:10:4B:CE:59:41
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3EByPnzfkyZuSCU1mhb7EEvOWUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.204.0/24
185.121.12.0/22
185.199.159.0/24
185.206.248.0/23
185.206.251.0/24
185.209.36.0/23
185.210.152.0/22
185.223.76.0/24
185.225.2.0/24
185.226.105.0/24
185.226.107.0/24
185.228.74.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
Signature Algorithm: sha256WithRSAEncryption
08:90:7b:e8:b1:9f:8b:58:f7:24:1f:89:28:d8:4e:8c:cd:95:
1a:65:37:da:03:22:fd:81:a3:d8:91:fa:f4:df:7b:ee:13:13:
f5:5c:e7:ab:d3:4e:dd:8a:a0:26:36:85:6d:7c:53:77:28:1e:
66:5a:aa:8d:67:88:9f:c1:97:6e:0e:a3:e6:22:a3:5b:16:c5:
f3:22:e4:08:78:08:6c:62:52:1f:79:29:98:bd:85:a4:ef:7c:
43:fd:e3:11:4f:dd:d8:e9:59:1f:fd:2b:95:7c:4a:92:92:99:
0e:8f:a0:8e:53:fe:4e:79:8a:41:e3:ed:88:9f:fe:1a:62:40:
af:8c:25:93:0e:75:45:8e:07:7d:91:41:98:b1:e5:3b:4e:08:
64:f7:eb:53:03:ed:ed:6e:1c:d9:4b:92:e2:c2:1e:b7:de:14:
78:bb:a1:c0:a8:cb:35:06:c8:45:4f:56:13:67:95:57:05:f3:
ac:04:41:36:cc:4f:f9:f7:1e:df:c0:c8:0d:bc:7d:60:17:99:
4b:aa:29:a5:16:d7:f6:2e:c6:cc:5e:77:64:bd:bb:b0:93:6a:
85:13:3a:1b:a3:0b:7b:55:21:88:75:17:db:c1:09:8a:a9:d1:
86:ac:c2:b5:74:44:25:d5:37:e1:9c:7a:85:73:89:b5:3d:e7:
58:a5:b8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org