Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7Huznkc-w12DvgpWU1aMWFaSAnE.roa
File: 7Huznkc-w12DvgpWU1aMWFaSAnE.roa (raw, json)
Hash identifier: yxlQ0affhaeLk52DAy7NXExWWZh6JXtXHlv7IrY7UqI=
Subject key identifier: EC:7B:B3:9E:47:3E:C3:5D:83:BE:0A:56:53:56:8C:58:56:92:02:71
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0190E42F34E77DA459FFEDFE79841490EAE7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7Huznkc-w12DvgpWU1aMWFaSAnE.roa
Signing time: Wed 24 Jul 2024 10:00:17 +0000
ROA not before: Wed 24 Jul 2024 10:00:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.240.122.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 07:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:2f:34:e7:7d:a4:59:ff:ed:fe:79:84:14:90:ea:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 24 10:00:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec7bb39e473ec35d83be0a5653568c5856920271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b6:e0:69:62:d3:77:e7:2d:f5:58:eb:e2:89:
78:99:61:a6:69:8e:d0:51:a9:e2:2a:ca:af:a0:f9:
22:83:d1:0e:e5:14:bf:6a:65:3b:61:3a:d8:17:5e:
ac:35:25:78:65:ad:10:aa:46:e8:6a:db:59:70:2a:
70:6b:fb:46:83:0d:ef:b5:21:3e:9d:30:77:18:8c:
bb:04:95:50:5b:ec:7e:03:d0:07:72:e9:d6:a8:80:
0c:b2:71:a4:cd:e0:27:b4:fc:bc:b7:56:56:71:4c:
36:e8:ee:15:f6:69:20:21:a3:01:5a:18:9d:bb:f0:
30:89:d2:f4:77:8d:2d:85:48:3e:ce:6b:82:bd:22:
1f:f1:d0:6f:7f:08:05:d5:7b:08:68:f3:e9:5d:10:
a7:72:85:c3:0b:5d:32:b6:17:ec:08:1f:15:7c:51:
72:d6:ad:9c:94:6a:a6:69:e0:69:9a:35:2b:40:dd:
4d:e7:5d:9c:55:7c:f6:b3:ce:5a:d7:ac:a7:88:39:
1b:49:3d:36:0c:42:6c:74:ca:67:8d:c2:45:7a:8c:
5f:5c:02:46:0d:95:1a:39:b6:5c:bd:18:01:78:e8:
6c:9b:7a:97:3a:2e:41:8d:7d:08:45:96:c9:68:19:
05:34:ee:a2:8c:c9:3f:e3:17:d6:2e:c3:df:84:68:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7B:B3:9E:47:3E:C3:5D:83:BE:0A:56:53:56:8C:58:56:92:02:71
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7Huznkc-w12DvgpWU1aMWFaSAnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.220.250.0/23
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
185.240.122.0/24
193.8.112.0-193.8.114.255
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
09:ed:56:d1:e7:06:18:d0:5a:25:de:25:0f:fc:27:ca:8a:00:
03:82:83:3e:8c:f7:c2:17:c1:a4:13:6c:95:8c:cd:49:a0:62:
06:79:96:87:02:9c:68:57:a0:f2:9a:e4:86:99:c4:e0:fb:2a:
73:8f:2f:5d:13:a7:48:dd:12:81:b7:dc:e4:94:ce:ec:16:c7:
94:5d:94:ba:a3:cc:7d:d6:26:40:7c:d3:6b:70:90:54:5b:5e:
2d:91:86:8c:be:90:18:7c:2d:18:6f:70:cd:b7:ed:cf:7e:bb:
d6:98:f8:40:f4:59:3e:2b:ee:9d:af:db:d7:35:ef:46:40:82:
7c:7b:3c:f0:51:4a:a3:6b:7e:7c:40:de:80:8c:25:2f:61:25:
33:dc:db:43:b8:7b:09:e2:23:49:d9:95:ee:89:46:57:c0:62:
eb:5e:58:48:35:60:e3:c7:44:a8:9e:70:29:1d:2f:75:41:a4:
bf:82:85:a9:54:98:1f:6d:a3:c0:ba:b0:df:2e:ac:2f:d1:6d:
ff:e3:68:3f:90:ec:70:df:f3:ef:64:5b:08:b3:df:12:b2:b9:
a2:8f:53:bc:86:dd:61:04:e0:19:78:ec:28:db:6a:d5:59:6a:
77:84:45:fa:1f:71:3e:eb:54:52:eb:b9:04:05:68:f6:94:0b:
55:d1:c3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:43 2024 by rpki-client on console-fra.rpki-client.org