Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7AnCJ_iO1aVsoStH1HY-IIPuOZ8.roa
File: 7AnCJ_iO1aVsoStH1HY-IIPuOZ8.roa (raw, json)
Hash identifier: KYqSFD841O3zar+xzLUHLD/A0qveqC9yX8CloE2vqrU=
Subject key identifier: EC:09:C2:27:F8:8E:D5:A5:6C:A1:2B:47:D4:76:3E:20:83:EE:39:9F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B64167DA59F65E29265DAF1C5FF1DA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7AnCJ_iO1aVsoStH1HY-IIPuOZ8.roa
Signing time: Mon 02 Jan 2023 09:00:47 +0000
ROA not before: Mon 02 Jan 2023 09:00:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 45.90.16.0/24 maxlen: 24
185.218.22.0/24 maxlen: 24
45.90.19.0/24 maxlen: 24
185.126.83.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
185.228.73.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
194.147.16.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:41:67:da:59:f6:5e:29:26:5d:af:1c:5f:f1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec09c227f88ed5a56ca12b47d4763e2083ee399f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:f1:f9:44:e9:fb:14:5b:44:a7:e6:1a:c0:
f1:e1:f5:d1:8a:f0:7d:f3:11:80:ab:fc:d1:17:fa:
08:27:7c:1d:5f:53:61:df:49:2e:4b:cd:ee:a5:06:
11:5b:37:44:27:af:f9:c6:ab:75:ce:79:19:82:c4:
2e:e1:34:25:b9:03:6d:ee:87:e6:19:e4:f1:4f:f3:
cb:ca:4b:25:0f:9d:4c:5e:b7:a9:39:07:09:f4:a7:
a0:da:74:e9:bf:f9:24:b6:14:02:13:89:6c:35:fd:
94:63:59:7b:64:34:37:d7:63:13:a3:94:77:1d:21:
97:35:0f:8b:3c:8a:a7:4f:33:b4:65:e9:b0:22:fb:
90:73:1d:27:57:4e:65:3f:18:a0:46:d5:5f:7c:33:
bd:bf:e1:5f:ba:4c:9c:65:d4:b0:ee:6e:b8:df:80:
27:53:a5:ca:d0:6f:5c:0a:10:e7:a4:a6:7d:be:6e:
28:81:61:4e:25:eb:90:75:f4:a6:58:07:cf:d0:a6:
f9:51:ae:63:0f:c8:d9:76:5e:6d:dc:22:2c:95:38:
58:e7:3d:19:98:1e:2f:35:d3:58:70:ae:40:8f:40:
c8:cb:5d:4a:cf:4a:24:f4:b6:21:c0:e2:fc:47:24:
4b:98:fe:85:70:99:30:d6:b2:20:cd:29:95:c0:db:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:09:C2:27:F8:8E:D5:A5:6C:A1:2B:47:D4:76:3E:20:83:EE:39:9F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7AnCJ_iO1aVsoStH1HY-IIPuOZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
45.90.19.0/24
45.131.134.0/24
45.147.224.0/24
185.126.83.0/24
185.218.22.0/24
185.228.73.0/24
193.58.144.0/24
194.147.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e4:8d:a6:92:91:bd:68:50:75:16:67:fb:85:68:f6:b9:eb:
df:ae:17:1c:4b:7c:cd:c7:43:d4:69:52:cd:df:02:0f:9a:23:
ab:47:9b:15:9b:58:ad:ee:6f:85:cc:cb:3b:ae:f2:b1:95:16:
de:c0:9c:8c:2f:5e:fb:75:ec:21:03:64:e3:f6:40:79:8f:e0:
25:5e:3d:5f:51:70:36:2f:be:b3:96:4a:c8:08:91:f0:63:2e:
08:5d:0a:95:9a:32:f1:fb:ba:a8:3d:13:c9:49:ed:e9:b1:fa:
c3:f2:87:83:b7:3a:35:5d:1f:c9:36:2b:8c:8e:3c:a8:38:5a:
3d:c0:5d:db:af:44:e6:54:8c:b3:56:33:d4:68:f0:5b:68:64:
96:d9:23:35:e6:6e:ac:59:a8:68:ae:ff:75:0c:73:48:47:2f:
ea:58:85:87:2c:7d:73:bb:1a:9f:2a:ea:b6:93:d9:88:f1:cc:
c2:73:41:4d:69:7c:be:6b:c7:9f:5e:fc:11:5a:da:d8:8c:f6:
d5:6f:96:ac:f3:94:0c:0b:7c:ad:c1:ba:65:d5:e1:2e:94:f1:
b8:2e:26:a1:a7:83:97:1b:f6:b2:03:c9:2e:cb:19:78:02:55:
ac:c4:6a:1a:a3:20:c2:1e:66:ae:fa:b2:7a:e1:e7:35:99:e1:
9d:55:3d:e3
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYVxtkFn2ln2XikmXa8cX/HaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTAyMDkwMDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzA5YzIyN2Y4OGVkNWE1NmNhMTJiNDdkNDc2M2UyMDgzZWUzOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3zx+UTp+xRbRKfmGsDx4fXRivB9
8xGAq/zRF/oIJ3wdX1Nh30kuS83upQYRWzdEJ6/5xqt1znkZgsQu4TQluQNt7ofm
GeTxT/PLykslD51MXrepOQcJ9Keg2nTpv/kkthQCE4lsNf2UY1l7ZDQ312MTo5R3
HSGXNQ+LPIqnTzO0ZemwIvuQcx0nV05lPxigRtVffDO9v+FfukycZdSw7m6434An
U6XK0G9cChDnpKZ9vm4ogWFOJeuQdfSmWAfP0Kb5Ua5jD8jZdl5t3CIslThY5z0Z
mB4vNdNYcK5Aj0DIy11Kz0ok9LYhwOL8RyRLmP6FcJkw1rIgzSmVwNtgrwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFOwJwif4jtWlbKErR9R2PiCD7jmfMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvN0FuQ0pfaU8xYVZzb1N0SDFIWS1JSVB1T1o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALVoQAwQA
LVoTAwQALYOGAwQALZPgAwQAuX5TAwQAudoWAwQAueRJAwQAwTqQAwQAwpMQMA0G
CSqGSIb3DQEBCwUAA4IBAQCL5I2mkpG9aFB1Fmf7hWj2uevfrhccS3zNx0PUaVLN
3wIPmiOrR5sVm1it7m+FzMs7rvKxlRbewJyML177dewhA2Tj9kB5j+AlXj1fUXA2
L76zlkrICJHwYy4IXQqVmjLx+7qoPRPJSe3psfrD8oeDtzo1XR/JNiuMjjyoOFo9
wF3br0TmVIyzVjPUaPBbaGSW2SM15m6sWahorv91DHNIRy/qWIWHLH1zuxqfKuq2
k9mI8czCc0FNaXy+a8efXvwRWtrYjPbVb5as85QMC3ytwbpl1eEulPG4Liahp4OX
G/ayA8kuyxl4AlWsxGoaoyDCHmau+rJ64ec1meGdVT3j
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org