Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7rFuA-FfngTTsYsIXF2uy7XoCaI.roa
File: 7rFuA-FfngTTsYsIXF2uy7XoCaI.roa (raw, json)
Hash identifier: LFbV8Ba0S9IiuFBj++sXTy9CQABunZ02h2dBhfqEZuE=
Subject key identifier: EE:B1:6E:03:E1:5F:9E:04:D3:B1:8B:08:5C:5D:AE:CB:B5:E8:09:A2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A980F8BD01EE8209721F96347056AD72E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7rFuA-FfngTTsYsIXF2uy7XoCaI.roa
Signing time: Fri 15 Sep 2023 08:57:50 +0000
ROA not before: Fri 15 Sep 2023 08:57:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.194.177.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
45.90.19.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.23.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.36.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 09:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:0f:8b:d0:1e:e8:20:97:21:f9:63:47:05:6a:d7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 15 08:57:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeb16e03e15f9e04d3b18b085c5daecbb5e809a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:d8:04:24:b8:97:9d:d0:bb:5f:e4:ac:12:
74:64:ef:2b:58:e6:01:17:5a:07:a1:1b:3c:6f:8e:
be:43:4e:31:8a:5c:80:dc:81:9d:4d:88:43:f3:e2:
9b:e9:fe:e8:75:2f:cd:f1:cf:1a:c6:03:c6:53:37:
5b:81:05:cb:52:9a:90:ed:4f:2a:27:47:ab:99:9e:
8d:a4:d9:a3:84:6a:64:8c:3f:cc:8e:19:54:08:60:
5f:7e:cc:90:67:66:43:e1:1b:33:75:46:c2:dd:c9:
08:9b:c4:c4:61:8f:b4:6b:20:71:77:3c:a0:77:e9:
2a:cb:e4:87:53:34:d9:a2:c9:6d:b6:26:d9:fa:cf:
ad:70:38:ee:d2:27:b8:3b:b0:73:b2:52:0c:b8:c4:
34:52:d7:c0:69:6d:02:b1:90:d2:e5:43:23:e1:66:
50:50:bd:47:3a:db:e5:b5:87:85:f0:1c:a8:c6:0d:
17:b1:e0:0f:37:35:f1:25:29:57:60:b5:3a:b9:4e:
89:c5:00:30:d3:52:ad:4c:13:67:35:2d:22:f2:29:
a4:f0:0e:d2:1a:cc:5e:38:7b:aa:87:f3:05:3b:0d:
32:50:8e:24:b4:97:26:54:f2:ed:80:66:bf:b1:ce:
59:95:e0:bc:39:23:ec:b5:b8:47:b0:ed:14:03:b3:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B1:6E:03:E1:5F:9E:04:D3:B1:8B:08:5C:5D:AE:CB:B5:E8:09:A2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7rFuA-FfngTTsYsIXF2uy7XoCaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.8.23.0/24
45.90.19.0/24
45.147.224.0/24
185.36.205.0/24
185.194.177.0/24
185.209.73.0/24
185.210.233.0/24
185.220.249.0/24
185.222.29.0/24
185.223.80.0/24
185.225.0.0/23
185.225.22.0/24
185.246.112.0/24
185.246.115.0/24
185.251.229.0/24
185.251.231.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:56:ad:42:be:9f:9e:4d:61:31:4f:18:f1:a5:24:c0:29:bf:
41:71:21:68:8b:9b:50:62:e0:58:3f:cc:8b:0b:10:23:e4:24:
30:c8:45:51:00:c2:62:32:e4:08:b7:d5:a2:28:21:97:99:39:
b1:64:bb:a6:f6:3a:16:f2:90:99:60:47:a2:71:cc:5b:42:2e:
a8:8b:0b:86:9d:73:04:b2:a4:ca:5a:b7:2a:16:64:90:3a:a5:
ad:f5:6f:77:e1:03:54:4e:2c:7c:19:1b:67:ef:8c:63:fd:49:
2c:49:96:df:7c:d1:ec:9f:4d:99:73:c5:6a:14:ff:80:41:41:
38:cf:2f:3b:2a:09:95:fc:23:f4:a5:a5:ef:55:10:73:bb:ec:
2c:ae:ec:9e:1c:ba:1e:c5:aa:62:1a:44:f3:1c:a0:c4:c6:11:
1e:37:7f:b9:f3:0e:36:f9:26:6c:aa:e3:b1:47:a6:3d:51:16:
26:f7:ea:33:81:90:9c:31:d1:cd:77:e6:9f:58:02:93:6e:5b:
8f:54:20:27:c1:52:98:92:32:91:9c:e5:1d:91:a1:e3:58:17:
03:1e:52:43:3f:4b:3f:61:f8:c1:f5:63:e9:65:2a:c7:5a:83:
f0:fe:ee:74:e6:82:3d:25:5f:93:3b:07:ac:6a:e0:9f:29:5d:
d9:15:8d:1a
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAYqYD4vQHugglyH5Y0cFatcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwOTE1MDg1NzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWIxNmUwM2UxNWY5ZTA0ZDNiMThiMDg1YzVkYWVjYmI1ZTgwOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZrYBCS4l53Qu1/krBJ0ZO8rWOYB
F1oHoRs8b46+Q04xilyA3IGdTYhD8+Kb6f7odS/N8c8axgPGUzdbgQXLUpqQ7U8q
J0ermZ6NpNmjhGpkjD/MjhlUCGBffsyQZ2ZD4RszdUbC3ckIm8TEYY+0ayBxdzyg
d+kqy+SHUzTZoslttibZ+s+tcDju0ie4O7BzslIMuMQ0UtfAaW0CsZDS5UMj4WZQ
UL1HOtvltYeF8Byoxg0XseAPNzXxJSlXYLU6uU6JxQAw01KtTBNnNS0i8imk8A7S
GsxeOHuqh/MFOw0yUI4ktJcmVPLtgGa/sc5ZleC8OSPstbhHsO0UA7M9yQIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFO6xbgPhX54E07GLCFxdrsu16AmiMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvN3JGdUEtRmZuZ1RUc1lzSVhGMnV5N1hvQ2FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAC0IFQME
AC0IFwMEAC1aEwMEAC2T4AMEALkkzQMEALnCsQMEALnRSQMEALnS6QMEALnc+QME
ALneHQMEALnfUAMEAbnhAAMEALnhFgMEALn2cAMEALn2cwMEALn75QMEALn75wME
AcE6kjANBgkqhkiG9w0BAQsFAAOCAQEAPlatQr6fnk1hMU8Y8aUkwCm/QXEhaIub
UGLgWD/MiwsQI+QkMMhFUQDCYjLkCLfVoighl5k5sWS7pvY6FvKQmWBHonHMW0Iu
qIsLhp1zBLKkylq3KhZkkDqlrfVvd+EDVE4sfBkbZ++MY/1JLEmW33zR7J9NmXPF
ahT/gEFBOM8vOyoJlfwj9KWl71UQc7vsLK7snhy6HsWqYhpE8xygxMYRHjd/ufMO
NvkmbKrjsUemPVEWJvfqM4GQnDHRzXfmn1gCk25bj1QgJ8FSmJIykZzlHZGh41gX
Ax5SQz9LP2H4wfVj6WUqx1qD8P7udOaCPSVfkzsHrGrgnyld2RWNGg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org