Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3hFpixIfRE9xm7OOlRXeSZ1Meow.roa
File: 3hFpixIfRE9xm7OOlRXeSZ1Meow.roa (raw, json)
Hash identifier: 3kxEh+E80jqNcHOsQ77zb+WbO8WpKCnVdPWCbi2rq/w=
Subject key identifier: DE:11:69:8B:12:1F:44:4F:71:9B:B3:8E:95:15:DE:49:9D:4C:7A:8C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A6C18FDCBA1C4F94348395222CF699390
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3hFpixIfRE9xm7OOlRXeSZ1Meow.roa
Signing time: Wed 06 Sep 2023 20:04:51 +0000
ROA not before: Wed 06 Sep 2023 20:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.194.177.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.226.106.0/24 maxlen: 24
45.90.19.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.246.114.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.36.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 11:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6c:18:fd:cb:a1:c4:f9:43:48:39:52:22:cf:69:93:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 6 20:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de11698b121f444f719bb38e9515de499d4c7a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:3b:3c:94:d0:22:51:05:49:77:00:b0:be:
33:c2:cf:bf:aa:b9:0f:24:3e:d4:b4:af:44:08:9d:
35:19:9e:49:12:44:e8:be:b8:1a:40:e7:1d:3c:ca:
6a:3e:04:7f:9a:d1:6c:e0:75:a6:53:fd:fa:c8:a1:
bf:46:39:7a:8b:e3:a9:98:a1:d3:d9:71:82:fa:a3:
84:e7:f1:48:be:92:c0:ee:2f:9b:46:e4:ea:b1:58:
31:12:99:6a:df:81:4a:1e:c8:3f:bf:0b:26:bc:a3:
83:74:0e:51:08:03:99:cb:c4:a0:ac:91:4f:d3:ab:
4b:f3:6f:6a:a2:2e:ab:65:62:10:02:40:5e:ef:1d:
bd:fb:38:1e:15:19:7a:73:39:aa:0d:5a:63:f6:33:
d5:d4:4b:c5:d1:48:a4:b8:86:b4:df:ed:0a:10:f6:
d2:02:10:2c:b3:b9:0f:c5:4c:14:e7:c1:f3:d1:83:
20:9d:78:ed:2c:17:15:f6:d4:08:50:a3:44:fa:e8:
a0:97:fc:00:7b:bf:5b:15:d0:c5:e3:40:3c:95:46:
06:8f:06:6e:08:7c:22:23:a1:86:6a:6b:c9:47:34:
88:a9:1f:1a:87:61:08:63:e3:9c:57:60:6c:b2:84:
12:72:8b:e8:c5:43:f8:81:36:3f:b1:aa:4a:59:07:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:11:69:8B:12:1F:44:4F:71:9B:B3:8E:95:15:DE:49:9D:4C:7A:8C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3hFpixIfRE9xm7OOlRXeSZ1Meow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.90.19.0/24
45.147.224.0/24
185.36.205.0/24
185.194.177.0/24
185.220.249.0/24
185.222.29.0/24
185.223.80.0/24
185.225.0.0/23
185.225.22.0/24
185.226.106.0/24
185.227.145.0/24
185.228.74.0/24
185.246.112.0/24
185.246.114.0/23
185.251.229.0/24
185.251.231.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
03:37:12:a0:81:55:1e:7d:2e:aa:3f:66:99:4e:c6:65:b4:5e:
08:3d:18:02:25:2d:5f:82:d2:9f:af:94:ac:10:fa:a5:07:a9:
9b:f6:3a:0f:c4:e5:60:42:13:d2:20:e9:3a:c5:3c:e2:de:39:
9b:01:4e:c1:57:6f:a9:47:21:ad:db:0a:52:e3:10:e5:5f:82:
7c:f1:da:4d:d4:1b:87:65:e2:71:a7:c3:4d:7d:38:c4:16:c5:
8c:b1:7e:86:82:b3:83:12:42:f6:a5:7f:2f:70:90:a0:c9:52:
c5:59:2b:5c:c4:50:87:ce:03:cb:8c:14:8e:97:15:dc:ea:6d:
46:fa:5f:11:8d:f8:23:8e:c1:53:ec:ad:f7:9f:38:a9:ad:c5:
de:6a:a0:85:73:92:ad:3b:fc:ab:6d:3b:de:9e:d1:83:f4:da:
50:83:96:17:01:1e:20:f2:8d:1c:73:15:a7:21:84:44:8f:8e:
ee:9f:9d:cd:14:54:16:9a:3a:2b:69:f6:87:0b:3c:d5:06:66:
4b:fb:18:92:ed:8b:47:1b:24:60:3b:d4:05:6b:28:a0:d4:69:
45:5c:56:60:71:6f:d8:e9:d1:a5:a8:db:9c:8d:aa:93:82:60:
99:e0:e2:9b:b1:6b:a1:a5:38:57:c5:d8:60:fd:41:9d:25:37:
a8:41:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org