Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5wMZnPmIVwuCoYU2Xeupsi3hv0E.roa
File: 5wMZnPmIVwuCoYU2Xeupsi3hv0E.roa (raw, json)
Hash identifier: YTqnO3XKSGeFWbmVpOKRMIn6t6e1ACKMQLX+Q3BreOY=
Subject key identifier: E7:03:19:9C:F9:88:57:0B:82:A1:85:36:5D:EB:A9:B2:2D:E1:BF:41
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CBEE21BFFC27C0582ED88086499433440
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5wMZnPmIVwuCoYU2Xeupsi3hv0E.roa
Signing time: Sun 31 Dec 2023 07:58:58 +0000
ROA not before: Sun 31 Dec 2023 07:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.209.36.0/23 maxlen: 24
185.218.102.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:be:e2:1b:ff:c2:7c:05:82:ed:88:08:64:99:43:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 31 07:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e703199cf988570b82a185365deba9b22de1bf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:fc:bd:0e:38:3b:1d:5c:a6:ab:7c:ec:ab:
0d:c4:8a:cb:ab:f0:7e:eb:b4:2c:bb:5e:e3:a2:40:
67:7d:0d:94:4c:64:57:e5:4f:84:00:c5:c8:89:7c:
cc:61:a2:af:d9:3a:e3:f5:d3:a5:c7:62:a2:f0:f0:
63:0b:54:1c:a7:34:52:48:41:de:57:c9:d0:86:a4:
26:81:72:4a:f8:44:00:bb:21:4c:2e:64:7c:cb:75:
28:96:28:b6:3a:38:b8:94:8c:db:9c:cf:2d:3c:5c:
cf:3f:d5:9d:45:b1:a1:fd:49:5d:ac:5d:e6:6c:58:
53:5f:d1:07:26:ef:79:17:bb:26:05:43:e9:37:ba:
11:16:cd:8a:ae:5d:cb:fd:4a:00:55:73:44:a8:19:
ff:be:66:08:85:b7:5a:89:14:4e:15:47:5d:f9:cc:
1f:b7:aa:8b:4f:cf:ef:13:dd:11:3b:d9:e4:72:5b:
06:54:1f:4e:a1:49:76:db:cb:0a:a1:76:01:66:ff:
1e:da:61:92:3b:bc:c4:d4:47:5f:ba:01:23:57:a1:
fe:fd:89:66:ce:43:cc:ae:6d:d4:f1:a8:f7:9a:8b:
01:00:b5:de:a0:54:c7:28:c4:83:ee:92:0b:60:c9:
b0:c4:72:77:15:13:d1:43:cb:54:d6:b8:a3:f1:5d:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:19:9C:F9:88:57:0B:82:A1:85:36:5D:EB:A9:B2:2D:E1:BF:41
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5wMZnPmIVwuCoYU2Xeupsi3hv0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.12.0/22
185.199.159.0/24
185.206.248.0/23
185.206.251.0/24
185.209.36.0/23
185.209.74.0/24
185.210.152.0/22
185.210.235.0/24
185.218.102.0/24
185.223.76.0/24
185.223.80.0/24
185.225.2.0/24
185.226.105.0/24
185.226.107.0/24
185.227.145.0/24
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
09:bc:b4:1e:4d:0e:1f:34:4c:21:2e:b2:6b:dc:53:0f:f8:88:
48:94:37:45:9c:e7:7c:ab:4e:d2:6a:8f:f7:e7:bb:dd:f8:28:
d5:63:f6:55:ac:51:cb:32:aa:cb:e1:c4:9a:be:86:dd:6f:ff:
b6:05:d3:02:6a:a2:fe:cf:08:88:cc:15:cf:36:bc:7f:42:11:
06:82:7a:bf:b0:40:5c:5e:95:7c:ae:22:b7:ae:75:73:04:10:
8b:32:c5:01:48:0b:f4:1f:a4:bd:f0:96:f0:c6:5e:fe:ce:35:
32:2c:55:64:a4:ec:91:88:35:72:6e:b1:ea:93:5f:f6:fc:9a:
c9:88:8e:e0:0e:15:a1:7a:2e:68:b4:09:a5:87:18:c5:8e:51:
a6:d7:f9:f6:5c:39:88:21:3b:81:7c:8c:39:ab:86:b3:3d:75:
10:7e:12:c3:f6:9b:09:ac:a2:92:22:e8:e0:c4:2c:17:f5:09:
0b:f4:5c:fa:73:32:6c:19:7d:ba:7e:4c:36:0c:f7:aa:b2:d9:
52:38:21:ef:5d:16:32:16:32:02:60:6d:8b:d1:b6:e0:74:32:
8a:7e:85:54:43:e6:b3:12:bc:0c:d3:ed:ba:2d:ae:30:6f:65:
3f:b0:19:38:d8:16:c6:ac:85:81:27:70:5c:1f:d2:be:d8:0e:
43:40:68:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org