Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7NhUaYTeFa0pLYeKM5VtSZNowx8.roa
File: 7NhUaYTeFa0pLYeKM5VtSZNowx8.roa (raw, json)
Hash identifier: Xz2VqLFOoAWLwubs9spPdGPH9bcQfIGqvRa17ZxrRn4=
Subject key identifier: EC:D8:54:69:84:DE:15:AD:29:2D:87:8A:33:95:6D:49:93:68:C3:1F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01859121FE5F0C66AB3CEC8F25ADF72BACB7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7NhUaYTeFa0pLYeKM5VtSZNowx8.roa
Signing time: Sun 08 Jan 2023 11:26:42 +0000
ROA not before: Sun 08 Jan 2023 11:26:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.5.67.0/24 maxlen: 24
185.225.20.0/24 maxlen: 24
185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
45.8.20.0/22 maxlen: 24
185.214.108.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jan 2023 11:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:91:21:fe:5f:0c:66:ab:3c:ec:8f:25:ad:f7:2b:ac:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 8 11:26:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecd8546984de15ad292d878a33956d499368c31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:78:91:12:36:db:51:e7:99:9b:72:43:aa:92:
72:9d:9b:dc:07:33:d6:a5:bf:91:0c:9c:a5:a9:43:
ad:bc:c5:65:57:d7:4a:9f:77:a5:4a:29:06:75:2d:
12:3e:bc:2f:a1:52:d9:83:59:2c:24:3d:a0:f5:35:
1a:02:70:99:7c:f4:1e:13:c0:bd:d3:2a:b6:36:50:
ac:32:6b:fe:0d:9c:4d:49:8f:0f:18:a8:b5:a7:20:
82:11:dd:93:3b:2d:6e:f5:b0:41:f7:59:a9:70:54:
f3:67:84:5a:ea:f2:5a:b7:30:f7:81:da:82:f4:4b:
e4:ee:c5:0a:75:bd:84:1d:ad:19:2b:de:db:56:8d:
c5:d6:85:70:e6:4b:a9:a4:30:93:c5:26:30:4f:ea:
4a:f0:08:c1:d1:2a:67:78:d6:a8:56:66:50:9f:29:
32:7b:c4:0d:50:0c:04:6e:be:da:5f:ad:15:4c:d1:
d4:ff:5b:9a:d5:e0:7d:3c:aa:bf:77:0d:f7:d7:ed:
9f:2b:4a:d1:84:cb:67:e4:2d:c4:2c:93:ce:a2:8f:
5a:14:b5:75:5a:ba:13:fe:66:44:48:45:cf:59:fa:
60:1d:44:ec:33:f2:c8:dc:3b:5c:9e:52:40:ed:be:
f6:e0:83:c1:b6:3d:9f:f2:0c:1a:ea:9d:bf:1d:15:
29:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D8:54:69:84:DE:15:AD:29:2D:87:8A:33:95:6D:49:93:68:C3:1F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7NhUaYTeFa0pLYeKM5VtSZNowx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.121.12.0/22
185.206.248.0/24
185.206.251.0/24
185.214.108.0/24
185.223.76.0/24
185.225.20.0/24
185.226.105.0/24
185.226.107.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.255.124.0/24
194.5.67.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ea:e3:e6:66:e4:ce:b0:36:b9:48:b6:71:93:44:0c:af:ea:
a4:8e:e4:43:38:47:7b:70:cd:15:01:c5:ff:93:e4:05:ab:14:
7d:bf:a1:08:f8:09:9f:f3:6a:62:8b:81:0b:76:4e:f5:38:b3:
93:27:4c:71:68:db:88:5f:e4:38:e1:30:8b:10:80:3d:79:7a:
d9:ee:21:23:9a:c3:93:e8:d5:b4:3e:ce:09:cf:32:71:ab:cf:
c8:b4:9d:82:77:91:58:48:b7:21:13:89:ad:df:2b:b9:13:85:
cf:43:f8:8a:3b:11:89:c8:0e:89:c0:ae:50:58:f1:6d:ed:fc:
e8:c7:74:d8:32:5d:4a:3d:23:08:01:da:a3:be:d7:0a:13:88:
e5:16:a1:0f:d7:34:55:02:43:09:d8:82:26:0c:28:17:b5:22:
a3:3f:0f:a3:a6:13:ef:d3:85:a0:b2:65:07:98:df:69:65:89:
8d:a8:77:01:e0:9f:e5:c9:a3:74:90:2d:92:cc:1e:02:1d:cf:
05:07:06:a2:52:34:a5:d8:d2:fc:c8:d1:5f:23:bb:59:39:2a:
67:8e:c8:6c:db:41:57:a0:50:b2:63:3b:3d:62:6c:9b:2a:24:
46:f9:15:96:a7:e6:24:49:19:b0:c3:51:37:25:33:76:44:92:
7c:d0:c8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org