Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/407j3oHY1eRU4Vd3-ZAHvlmgBUk.roa
File: 407j3oHY1eRU4Vd3-ZAHvlmgBUk.roa (raw, json)
Hash identifier: oIirQFJ/Wk5dy3opGqB+wJi7WkixLkHD1dzJ1tq3/ps=
Subject key identifier: E3:4E:E3:DE:81:D8:D5:E4:54:E1:57:77:F9:90:07:BE:59:A0:05:49
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018857C80015B515FEB31C47280FC775077A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/407j3oHY1eRU4Vd3-ZAHvlmgBUk.roa
Signing time: Fri 26 May 2023 11:18:24 +0000
ROA not before: Fri 26 May 2023 11:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.58.146.0/23 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 17:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:c8:00:15:b5:15:fe:b3:1c:47:28:0f:c7:75:07:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 26 11:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e34ee3de81d8d5e454e15777f99007be59a00549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:29:02:79:b5:aa:d5:27:1b:ac:75:68:8d:ca:
c8:65:e8:42:6d:ef:53:f5:23:e0:78:75:1b:b6:a5:
be:a8:34:ba:a1:82:9f:d3:75:34:ea:52:28:1e:79:
da:6e:91:8a:38:6c:81:57:59:a9:e6:c2:b5:6b:62:
21:11:65:a1:f6:1e:51:f8:05:81:89:47:5a:b9:bf:
a3:55:87:eb:97:a7:f9:5d:0d:50:c6:96:8a:ee:c3:
e3:23:d6:02:a7:d9:b4:14:66:84:f8:72:bd:64:6b:
a5:7d:f6:48:68:a6:2b:07:c2:19:36:1e:69:72:19:
2a:60:3a:36:6d:10:47:b4:e5:72:92:9c:75:6f:a2:
f9:8f:99:7c:3b:eb:c2:88:c9:a7:21:d5:a7:08:35:
95:f7:88:13:b4:16:73:a1:6a:79:81:56:2e:ab:d2:
57:ec:be:ed:0f:d0:4e:70:e5:51:55:4f:e4:47:3c:
d4:7e:1d:3d:91:8f:48:5d:3d:ce:d3:db:e3:36:97:
ee:9f:f5:f8:6c:ac:b6:8d:cd:99:0d:8f:7e:95:a6:
35:ed:ee:03:75:a9:66:41:f5:dd:8a:38:d7:06:c3:
3c:b3:be:d5:21:1d:18:25:36:72:2c:a1:8c:6c:93:
a5:01:16:05:90:ad:9b:cd:b5:00:0d:b5:a2:32:17:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4E:E3:DE:81:D8:D5:E4:54:E1:57:77:F9:90:07:BE:59:A0:05:49
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/407j3oHY1eRU4Vd3-ZAHvlmgBUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.225.0.0/23
185.246.115.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
81:27:85:59:5f:ff:ec:ae:fe:9d:c1:44:d9:07:9e:f7:2d:ad:
83:64:b7:0f:bd:8a:90:58:b7:3c:1e:6d:b1:f7:96:cb:67:dd:
e7:16:54:6d:43:0f:f9:80:e5:85:bf:cb:03:0c:10:23:31:3d:
1b:35:4e:7d:1e:a2:ea:01:73:9e:45:54:d9:c9:e1:f7:62:03:
0c:3b:69:1f:8f:0f:64:4b:24:3b:3b:2b:6e:e7:d3:62:16:08:
cd:bf:16:01:d3:ca:9f:8c:6c:06:6b:9e:47:e8:d7:bc:99:c3:
ad:49:07:a8:bd:45:e3:6b:77:be:68:7e:cb:32:a8:1f:67:8e:
b4:eb:ef:c5:93:b3:37:3b:a7:39:f3:26:31:43:8b:aa:24:b0:
4b:27:46:dc:cc:58:2c:74:ee:d7:72:fd:65:eb:be:6a:27:4f:
29:9b:d2:0d:ab:0b:0f:d2:43:31:28:af:dc:64:77:fd:e3:67:
b1:e5:47:2a:a9:18:96:30:9c:fe:76:33:eb:bf:29:e0:cd:ce:
f7:16:8a:ea:49:7b:a7:9e:b8:11:ee:9e:0a:ea:fc:42:cf:5e:
44:4d:6e:d7:70:43:2c:b8:87:f6:31:35:81:49:d8:4b:1d:bc:
f2:01:c4:46:b1:cd:92:b3:77:e6:d4:a3:4a:e5:79:0a:1f:ae:
ed:59:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org