Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3bjgASU29f6bAXISOIiZl7UeoVw.roa
File: 3bjgASU29f6bAXISOIiZl7UeoVw.roa (raw, json)
Hash identifier: eMHZ84Y2lCnDf4anvOS0huFvOAgV+vxBSaN+jzhCR7U=
Subject key identifier: DD:B8:E0:01:25:36:F5:FE:9B:01:72:12:38:88:99:97:B5:1E:A1:5C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A6F768B611EBC41AD03F3300DEC71D7C6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3bjgASU29f6bAXISOIiZl7UeoVw.roa
Signing time: Thu 07 Sep 2023 11:45:54 +0000
ROA not before: Thu 07 Sep 2023 11:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.194.177.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.226.106.0/24 maxlen: 24
45.90.19.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.36.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Sep 2023 00:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:76:8b:61:1e:bc:41:ad:03:f3:30:0d:ec:71:d7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 7 11:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddb8e0012536f5fe9b01721238889997b51ea15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2e:bd:a0:76:c8:35:a4:a6:94:fa:d7:5b:d6:
6e:3a:62:5c:8a:fe:69:96:db:53:d7:68:c3:f5:ef:
84:fc:02:a8:ba:12:2b:96:1b:aa:b9:83:00:23:36:
5d:dc:05:b8:f4:f3:c0:0f:bf:e5:9c:f8:c7:28:53:
13:70:66:c9:07:ce:f8:22:f1:b7:d7:5a:3d:b2:87:
17:9f:97:7a:58:44:75:fd:86:21:c6:44:c5:d1:09:
b6:8f:c0:a8:89:1f:d9:0b:c3:a7:8d:90:7a:d0:d2:
aa:f7:17:c1:0e:e5:b0:5c:5f:3f:86:25:83:33:1b:
3a:58:b6:d5:78:44:cf:6c:3d:a1:c0:62:42:0f:d7:
ea:cb:f3:52:c1:33:a7:c0:f2:a4:33:3c:c5:5b:5c:
cc:05:13:38:86:bc:09:06:13:3c:90:5c:76:46:c0:
d2:5c:e6:80:2f:8f:12:69:2a:02:91:b3:45:e0:79:
fa:e2:1c:de:29:c1:64:81:b5:8e:b5:b6:98:e9:44:
88:f1:60:a9:8a:c9:50:ab:32:26:22:ed:b8:10:0f:
f7:cc:14:65:7d:98:43:e0:6f:35:36:ec:e0:4e:60:
91:d1:af:9c:2f:a1:f7:17:9a:2b:57:de:f6:97:8e:
ac:2d:e3:70:37:de:90:35:7f:5c:20:bf:9b:b9:40:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B8:E0:01:25:36:F5:FE:9B:01:72:12:38:88:99:97:B5:1E:A1:5C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3bjgASU29f6bAXISOIiZl7UeoVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.90.19.0/24
45.147.224.0/24
185.36.205.0/24
185.194.177.0/24
185.220.249.0/24
185.222.29.0/24
185.223.80.0/24
185.225.0.0/23
185.225.22.0/24
185.226.106.0/24
185.227.145.0/24
185.228.74.0/24
185.246.112.0/24
185.246.115.0/24
185.251.229.0/24
185.251.231.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:d0:e4:36:c0:c9:e6:83:d6:95:e5:01:50:79:23:aa:e2:4f:
82:62:d5:c1:c0:25:f0:ea:dc:13:c4:00:8b:f5:78:a4:2d:33:
e4:e4:56:86:42:77:06:2b:7b:67:50:a1:9a:33:a5:c4:89:e2:
18:0a:89:cc:8f:22:f8:f6:5d:82:39:f1:ec:77:51:94:0c:9f:
c7:38:8a:c6:a0:5b:e0:d7:78:a7:73:bd:66:49:b8:09:6f:09:
58:b9:7f:6f:2d:00:17:59:a0:bd:22:f5:aa:ed:3d:30:3c:09:
ba:11:8e:05:71:52:db:52:09:2d:3b:54:d4:bd:ef:3b:6e:7c:
a9:a5:03:7c:68:82:c6:45:7a:50:9e:6d:5f:67:1d:3b:53:1d:
8f:8b:1d:9b:15:7b:31:12:0b:ef:35:ba:b4:c0:34:46:f9:92:
cd:a0:f6:c9:b9:54:6b:86:23:3c:c5:ec:ad:7e:e1:59:f5:47:
75:e9:c4:74:fc:1d:86:23:79:7e:79:1b:44:07:fa:38:8c:f0:
eb:c6:bf:a9:46:57:3f:83:8d:4e:05:54:96:ba:2e:ec:7e:67:
07:ce:29:b0:ee:71:c6:70:76:9b:12:71:fd:b1:c8:4a:79:50:
a8:3c:b7:84:99:77:49:51:73:53:1f:0b:c6:2a:23:02:43:41:
a8:12:d1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org