Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4_i34G_aitkc_gWQqj-3mlMUNGo.roa
File: 4_i34G_aitkc_gWQqj-3mlMUNGo.roa (raw, json)
Hash identifier: 2C0z48GZr2Su8ELtgNTbPV8s5QMI9vGyDMQq8yKwwdM=
Subject key identifier: E3:F8:B7:E0:6F:DA:8A:D9:1C:FE:05:90:AA:3F:B7:9A:53:14:34:6A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0187A9DFFEC566D56434659D5D2E40944FEE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4_i34G_aitkc_gWQqj-3mlMUNGo.roa
Signing time: Sat 22 Apr 2023 16:50:41 +0000
ROA not before: Sat 22 Apr 2023 16:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.218.20.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
194.5.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 09:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a9:df:fe:c5:66:d5:64:34:65:9d:5d:2e:40:94:4f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 22 16:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3f8b7e06fda8ad91cfe0590aa3fb79a5314346a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:e4:df:8c:91:3e:50:c8:1b:83:43:70:57:
a5:b7:9b:d6:7d:d9:44:33:db:c2:03:d3:66:cf:c5:
3f:b5:c2:ed:97:db:65:23:50:a1:11:6a:70:1d:f5:
9f:3b:41:37:f7:5c:fb:a8:9b:63:ad:b1:e5:4e:b6:
cc:9c:f8:7b:e6:c6:70:64:da:5c:ce:85:3e:26:8a:
13:e5:8a:fd:f9:99:a5:67:08:ef:16:00:a0:1f:34:
4e:d9:ca:05:6e:43:d4:ba:ba:b7:6c:3a:3c:92:39:
96:c2:d2:15:b6:e2:d4:3b:99:13:20:bb:33:d9:0f:
10:aa:0c:a8:b0:47:ba:39:14:65:7a:41:92:b2:6d:
3d:6c:e5:13:2a:bd:93:0e:57:e6:4f:f8:42:6d:6f:
d5:76:cf:f6:a1:27:11:a2:42:18:e4:b0:71:1c:21:
ff:b7:ee:79:e6:00:6e:2f:12:94:22:2b:57:4a:7a:
71:cb:78:e8:38:96:a2:90:59:3d:ac:a9:9d:e1:61:
2a:1b:a8:a2:ff:24:61:4c:d4:e1:3d:4d:84:ee:bc:
22:ab:21:96:60:06:ce:bc:ac:bb:5c:0e:4e:c8:6c:
11:0b:3b:dd:5b:00:57:ed:b2:c8:9b:24:10:43:a9:
77:ee:3d:47:b4:2e:ef:e5:37:1b:8a:6b:08:fb:f0:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F8:B7:E0:6F:DA:8A:D9:1C:FE:05:90:AA:3F:B7:9A:53:14:34:6A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4_i34G_aitkc_gWQqj-3mlMUNGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.218.20.0/24
185.225.0.0/23
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d9:9b:0a:fe:47:b7:27:83:4f:1e:74:30:30:6f:dd:ba:a1:
6e:aa:e0:1d:c7:a6:e9:04:e0:4d:15:6d:8f:e1:54:0e:9f:41:
f2:21:b8:5d:ef:0c:bc:14:0f:c9:ba:04:f0:d6:48:27:04:aa:
d8:b7:fe:37:60:66:de:d5:45:29:a0:57:fc:6e:db:98:f8:c1:
75:8d:31:2c:e2:b0:21:5d:7c:b5:00:c4:77:5d:58:ce:7e:28:
ab:89:15:30:2a:77:a9:04:b1:b3:c4:88:46:3a:da:8e:af:0e:
dc:d6:fd:0a:33:48:fb:fa:2b:d6:c6:75:2f:72:c7:5f:72:ac:
a3:64:ba:45:b7:f0:4f:14:50:cb:5c:a7:87:33:8d:75:ce:17:
6a:e1:d6:64:4c:d3:cc:56:23:1d:b4:15:9a:89:6f:a3:9d:0d:
07:88:f0:58:2c:b7:e0:b5:2d:59:41:6e:a8:7b:4e:5d:35:f8:
16:0c:2d:42:1b:e3:c2:ed:55:4b:37:b3:8a:6d:88:f4:a3:29:
cc:75:23:d5:92:bc:1f:be:8f:2c:26:ad:9a:3b:1c:5f:ed:97:
be:11:c2:3a:81:6b:e6:c5:f1:75:f5:cf:4e:7c:20:59:e7:6e:
30:1e:f2:f5:81:f8:8c:e4:a3:13:68:eb:09:6e:21:74:d6:1e:
54:93:64:e0
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYep3/7FZtVkNGWdXS5AlE/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNDIyMTY1MDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2Y4YjdlMDZmZGE4YWQ5MWNmZTA1OTBhYTNmYjc5YTUzMTQzNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzPk34yRPlDIG4NDcFelt5vWfdlE
M9vCA9Nmz8U/tcLtl9tlI1ChEWpwHfWfO0E391z7qJtjrbHlTrbMnPh75sZwZNpc
zoU+JooT5Yr9+ZmlZwjvFgCgHzRO2coFbkPUurq3bDo8kjmWwtIVtuLUO5kTILsz
2Q8QqgyosEe6ORRlekGSsm09bOUTKr2TDlfmT/hCbW/Vds/2oScRokIY5LBxHCH/
t+555gBuLxKUIitXSnpxy3joOJaikFk9rKmd4WEqG6ii/yRhTNThPU2E7rwiqyGW
YAbOvKy7XA5OyGwRCzvdWwBX7bLImyQQQ6l37j1HtC7v5TcbimsI+/CnGQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOP4t+Bv2orZHP4FkKo/t5pTFDRqMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvNF9pMzRHX2FpdGtjX2dXUXFqLTNtbE1VTkdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALQgVAwQA
LZPgAwQAudoUAwQBueEAAwQAwgVAMA0GCSqGSIb3DQEBCwUAA4IBAQCL2ZsK/ke3
J4NPHnQwMG/duqFuquAdx6bpBOBNFW2P4VQOn0HyIbhd7wy8FA/JugTw1kgnBKrY
t/43YGbe1UUpoFf8btuY+MF1jTEs4rAhXXy1AMR3XVjOfiiriRUwKnepBLGzxIhG
OtqOrw7c1v0KM0j7+ivWxnUvcsdfcqyjZLpFt/BPFFDLXKeHM411zhdq4dZkTNPM
ViMdtBWaiW+jnQ0HiPBYLLfgtS1ZQW6oe05dNfgWDC1CG+PC7VVLN7OKbYj0oynM
dSPVkrwfvo8sJq2aOxxf7Ze+EcI6gWvmxfF19c9OfCBZ524wHvL1gfiM5KMTaOsJ
biF01h5Uk2Tg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org