Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4O9lnlogE1pyavQITILmoaS-bNY.roa
File: 4O9lnlogE1pyavQITILmoaS-bNY.roa (raw, json)
Hash identifier: TbhYkrC2VfFIPJf7JzypigXj1bPeIOhdm88f/ZdHL5E=
Subject key identifier: E0:EF:65:9E:5A:20:13:5A:72:6A:F4:08:4C:82:E6:A1:A4:BE:6C:D6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01881496D687A0BD58CEE353B3BA7067339B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4O9lnlogE1pyavQITILmoaS-bNY.roa
Signing time: Sat 13 May 2023 10:10:09 +0000
ROA not before: Sat 13 May 2023 10:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
45.131.134.0/24 maxlen: 24
185.225.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:96:d6:87:a0:bd:58:ce:e3:53:b3:ba:70:67:33:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 13 10:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0ef659e5a20135a726af4084c82e6a1a4be6cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:56:31:6a:e2:db:2d:7a:2a:30:f8:e5:aa:cc:
2f:a6:cc:9c:bf:89:03:bd:d0:57:e0:e0:b9:c7:64:
24:18:51:a0:de:c4:a6:5c:79:3f:a6:bd:8e:ae:6c:
a0:f3:19:86:a5:31:02:49:81:1d:96:03:76:65:32:
62:b9:23:81:da:f8:a2:a3:8f:cd:b1:fe:6e:f7:3e:
a0:b8:07:6c:00:89:c9:89:c1:33:a4:03:34:f7:9f:
23:70:5a:50:54:60:e0:16:fd:f1:84:5a:e5:ac:33:
32:76:f8:62:a2:f1:f7:45:ef:b0:e0:39:9e:ff:92:
3d:e8:64:2f:2f:9b:30:02:f1:25:20:78:96:5f:70:
14:65:30:d4:f8:90:c9:a3:04:00:9f:2e:d4:07:08:
c0:d7:a5:68:e1:c7:ed:31:89:cf:2e:01:33:ff:5c:
c3:dd:e7:62:56:68:26:bb:8d:58:45:b1:2b:50:6a:
94:d6:f5:58:68:32:14:5f:3b:da:15:d2:99:94:fb:
a7:88:81:bb:5d:7e:20:09:df:3e:5e:56:09:a2:cf:
f9:04:c7:2a:98:0c:4d:cc:8a:e7:ad:49:8b:f1:ef:
51:db:51:b6:4a:1b:3d:34:ec:3b:0e:5c:8c:61:08:
22:e1:5b:37:79:a3:88:eb:b5:d7:d2:70:fe:3d:82:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EF:65:9E:5A:20:13:5A:72:6A:F4:08:4C:82:E6:A1:A4:BE:6C:D6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4O9lnlogE1pyavQITILmoaS-bNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.131.134.0/24
45.147.224.0/24
185.225.0.0/23
185.246.112.0/24
185.246.115.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ee:65:0f:02:07:7a:1c:0d:ad:08:06:53:62:3d:bf:22:4a:
48:9e:99:07:20:6b:2b:8f:f5:d5:59:fc:bf:5a:2a:77:f0:84:
3e:36:bc:ce:b1:24:b0:05:8e:ed:db:00:74:7b:6a:23:03:93:
3c:96:ea:9b:7f:b3:6e:be:a9:5c:82:e9:4c:8b:73:b2:18:3f:
94:94:66:f6:e7:8a:a6:72:a1:04:c5:4c:d7:11:88:15:fc:5a:
58:cd:af:6c:1a:82:2c:ff:4b:63:7c:55:a3:49:fb:e7:0e:19:
cf:f6:03:1c:67:da:c7:a9:31:94:aa:0f:41:f2:f1:85:81:4b:
a3:b8:08:62:5b:c1:a4:fd:f9:12:8e:3e:20:52:ae:ca:6e:96:
58:57:f0:53:37:11:18:21:9e:42:68:51:6c:4e:55:80:5f:3e:
03:dc:55:a6:89:97:1d:7b:9a:f8:19:c0:e9:50:c1:c8:e3:63:
66:8a:6e:09:d1:b4:1a:95:f9:0e:f3:9c:14:98:25:a0:5d:8c:
a8:0a:bf:bf:5a:3e:4e:10:12:5d:d3:73:83:fe:ac:98:df:1a:
1f:f8:3d:fd:bf:af:2c:91:33:65:80:20:81:28:76:ac:d0:e5:
7a:e1:c0:4b:a3:9a:ad:df:a3:0d:a4:d6:e8:6c:db:56:51:8f:
a5:2c:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org