Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7-mNJXANmEZCh96EjXV7H_OlE34.roa
File: 7-mNJXANmEZCh96EjXV7H_OlE34.roa (raw, json)
Hash identifier: BywVk/Bvh2NCA2qVZALJ97vWXNhYf3TZIeS3A9P9UDI=
Subject key identifier: EF:E9:8D:25:70:0D:98:46:42:87:DE:84:8D:75:7B:1F:F3:A5:13:7E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0185B00188266DDD4BFA13FF952FAD5BA037
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7-mNJXANmEZCh96EjXV7H_OlE34.roa
Signing time: Sat 14 Jan 2023 11:19:28 +0000
ROA not before: Sat 14 Jan 2023 11:19:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.225.20.0/24 maxlen: 24
185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
45.8.20.0/22 maxlen: 24
185.214.108.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jan 2023 09:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b0:01:88:26:6d:dd:4b:fa:13:ff:95:2f:ad:5b:a0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 14 11:19:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efe98d25700d98464287de848d757b1ff3a5137e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bb:d1:e0:58:1a:c8:04:83:55:02:53:6e:b1:
4c:2a:9f:0f:b5:c9:1f:01:2a:43:e3:b6:77:0e:b7:
3a:ee:e2:50:0c:46:5e:6c:ac:12:80:d4:93:36:44:
8d:16:30:b2:11:02:6b:cc:ce:64:54:02:e1:10:4a:
04:32:59:72:d7:51:2f:fe:22:15:2a:72:2a:f9:ea:
91:e3:cb:e1:dc:49:81:04:b3:ab:b5:af:42:cc:ec:
83:9a:54:03:39:ab:2f:be:1c:00:eb:2a:69:f9:dd:
c9:a3:83:cb:98:2c:61:16:86:09:a5:19:33:a5:1c:
53:ce:37:29:5e:f6:f2:fd:db:ad:70:73:83:86:1a:
da:f9:49:b8:9c:c9:96:20:34:ff:d6:17:41:38:ac:
54:bc:29:1e:28:1e:98:88:75:5d:55:45:55:05:35:
53:e8:01:ab:1d:75:fd:dc:25:f6:19:a8:ed:04:8b:
db:c3:db:21:c5:69:c5:c7:91:26:64:f1:67:0e:07:
09:72:8a:7b:15:d4:17:35:b5:4a:fa:6d:17:53:4b:
9c:4b:22:11:74:2d:ef:2b:c5:95:05:95:02:29:ef:
87:20:8d:75:08:72:0d:b1:97:98:09:dd:71:36:b4:
97:39:41:8d:53:d1:65:a8:26:cf:43:cd:fd:87:ff:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E9:8D:25:70:0D:98:46:42:87:DE:84:8D:75:7B:1F:F3:A5:13:7E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7-mNJXANmEZCh96EjXV7H_OlE34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.121.12.0/22
185.206.248.0/24
185.206.251.0/24
185.214.108.0/24
185.223.76.0/24
185.225.20.0/24
185.226.105.0/24
185.226.107.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f2:21:4e:94:69:e4:24:6a:63:52:e2:af:af:84:76:f4:61:
97:04:12:9b:74:16:46:fc:23:be:b6:5e:b9:70:d5:c4:3a:0f:
5a:d9:a2:1d:f9:de:3f:2e:f4:3a:c8:6a:c1:a0:4c:8e:7c:24:
64:c7:f5:ed:f0:15:db:f6:42:f7:89:11:bc:3d:8c:58:47:55:
a5:a4:0c:9a:a7:7a:aa:d7:39:f6:62:7d:50:07:2a:80:27:cd:
ce:80:e0:9e:37:a0:96:26:c1:be:58:5a:9c:65:5f:4f:b4:91:
58:ba:f8:52:85:06:c6:05:ad:f0:e6:f9:6a:cb:1e:ed:f6:83:
45:a0:2e:ab:9c:ef:4c:be:50:51:03:90:c8:2f:1d:35:00:22:
11:d5:64:52:69:7a:b1:57:bb:96:62:e2:c3:bf:1e:4b:9e:db:
02:6e:61:b4:de:40:a7:a0:0d:9a:4e:1d:bf:b0:30:c5:37:a3:
78:83:d8:26:58:4e:99:1b:cb:4e:9a:e1:ba:64:63:c3:b1:be:
63:41:2e:bb:d7:35:d4:1d:a8:bd:32:15:c5:3a:a6:7b:7b:cd:
ea:f6:36:80:a6:a7:b3:3c:2e:99:f1:3f:eb:10:41:14:e1:4a:
8f:14:5e:ad:2f:03:e6:b7:4c:3e:cf:a2:49:0e:e5:27:30:35:
77:59:a2:be
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAYWwAYgmbd1L+hP/lS+tW6A3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTE0MTExOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmU5OGQyNTcwMGQ5ODQ2NDI4N2RlODQ4ZDc1N2IxZmYzYTUxMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrvR4FgayASDVQJTbrFMKp8Ptckf
ASpD47Z3Drc67uJQDEZebKwSgNSTNkSNFjCyEQJrzM5kVALhEEoEMlly11Ev/iIV
KnIq+eqR48vh3EmBBLOrta9CzOyDmlQDOasvvhwA6ypp+d3Jo4PLmCxhFoYJpRkz
pRxTzjcpXvby/dutcHODhhra+Um4nMmWIDT/1hdBOKxUvCkeKB6YiHVdVUVVBTVT
6AGrHXX93CX2GajtBIvbw9shxWnFx5EmZPFnDgcJcop7FdQXNbVK+m0XU0ucSyIR
dC3vK8WVBZUCKe+HII11CHINsZeYCd1xNrSXOUGNU9FlqCbPQ839h//8EwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFO/pjSVwDZhGQofehI11ex/zpRN+MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvNy1tTkpYQU5tRVpDaDk2RWpYVjdIX09sRTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCLQgUAwQC
uXkMAwQAuc74AwQAuc77AwQAudZsAwQAud9MAwQAueEUAwQAueJpAwQAueJrAwQB
ueY0AwQCueoUAwQCue7kAwQBufB4AwQAuf98MA0GCSqGSIb3DQEBCwUAA4IBAQAA
8iFOlGnkJGpjUuKvr4R29GGXBBKbdBZG/CO+tl65cNXEOg9a2aId+d4/LvQ6yGrB
oEyOfCRkx/Xt8BXb9kL3iRG8PYxYR1WlpAyap3qq1zn2Yn1QByqAJ83OgOCeN6CW
JsG+WFqcZV9PtJFYuvhShQbGBa3w5vlqyx7t9oNFoC6rnO9MvlBRA5DILx01ACIR
1WRSaXqxV7uWYuLDvx5LntsCbmG03kCnoA2aTh2/sDDFN6N4g9gmWE6ZG8tOmuG6
ZGPDsb5jQS671zXUHai9MhXFOqZ7e83q9jaApqezPC6Z8T/rEEEU4UqPFF6tLwPm
t0w+z6JJDuUnMDV3WaK+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org