Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8eLULJBpfmL7zM8LjkdKzkdUVNo.roa
File: 8eLULJBpfmL7zM8LjkdKzkdUVNo.roa (raw, json)
Hash identifier: EqKs6JTU3j5REwqdc4mB1HTN6/k6GqPOME0MX5ABLJw=
Subject key identifier: F1:E2:D4:2C:90:69:7E:62:FB:CC:CF:0B:8E:47:4A:CE:47:54:54:DA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A4711D15667BB06C7B52EFD674A4BA1C5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8eLULJBpfmL7zM8LjkdKzkdUVNo.roa
Signing time: Wed 30 Aug 2023 15:31:04 +0000
ROA not before: Wed 30 Aug 2023 15:31:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.225.20.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.0.0/24 maxlen: 24
185.194.177.0/24 maxlen: 24
185.223.83.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.226.106.0/24 maxlen: 24
185.221.23.0/24 maxlen: 24
185.221.20.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Aug 2023 17:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:11:d1:56:67:bb:06:c7:b5:2e:fd:67:4a:4b:a1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 30 15:31:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1e2d42c90697e62fbcccf0b8e474ace475454da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:e0:db:1c:f5:ed:86:b5:c8:dc:09:2e:bf:
3f:b8:c9:6d:a6:00:ef:62:2c:48:43:57:51:ca:d5:
aa:15:15:bc:5d:ae:0d:c8:65:84:fc:f3:ec:ce:24:
fe:00:25:f9:9f:12:03:69:11:8a:00:29:29:a2:19:
aa:14:27:76:dc:6b:67:8c:a4:13:68:13:61:73:37:
6f:a7:85:d5:6b:2c:8d:0a:ac:10:da:d0:f0:10:62:
d3:11:97:45:a5:67:b9:b0:39:f0:2e:51:ee:52:39:
01:30:aa:00:8b:7d:6e:57:63:8f:5b:e3:50:d0:a8:
b3:60:4a:d7:94:ef:ee:fd:17:83:f8:5d:d9:0c:a6:
dc:d7:93:e3:37:2e:d6:e0:19:de:58:10:fa:34:b0:
83:fe:1f:7e:53:80:86:01:c7:ba:36:62:21:46:ef:
6b:65:f5:c7:f5:25:59:15:81:dc:e6:4b:f2:00:86:
2c:11:38:4a:d3:af:1c:db:6d:a9:cb:87:11:2c:4d:
b5:d9:a1:87:d4:5a:e4:39:29:d5:de:fa:4d:c5:52:
cc:dc:c5:36:c2:c6:67:bd:1f:d4:8f:8a:d3:3e:16:
c0:e2:86:c8:d7:6f:37:e7:9b:59:24:1e:f9:92:49:
1c:17:85:a9:41:0b:b2:c2:cb:58:6c:9e:4a:b0:29:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E2:D4:2C:90:69:7E:62:FB:CC:CF:0B:8E:47:4A:CE:47:54:54:DA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8eLULJBpfmL7zM8LjkdKzkdUVNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.194.177.0/24
185.209.75.0/24
185.210.232.0/24
185.220.249.0/24
185.221.20.0/24
185.221.22.0/23
185.222.29.0/24
185.223.80.0/24
185.223.83.0/24
185.225.0.0/23
185.225.20.0/24
185.225.22.0/24
185.226.106.0/24
185.227.145.0/24
185.228.75.0/24
185.246.115.0/24
185.251.229.0/24
185.251.231.0/24
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7a:44:96:72:62:dc:40:73:ab:8f:bf:fe:92:bd:62:5d:a4:
db:98:f5:55:b5:2a:d9:47:0e:45:87:16:b1:df:7d:3a:f3:6b:
4a:16:82:eb:71:39:57:05:ac:ec:ae:4c:ab:7a:79:50:21:a0:
f9:76:57:79:27:4c:07:29:2e:f4:52:2a:bf:c1:ad:9a:51:a9:
3e:ef:f8:a2:73:06:aa:49:0f:9e:7a:aa:19:f5:00:cd:81:3d:
c5:6a:b5:a4:47:a3:63:84:fc:fd:d2:39:47:30:70:e3:24:6b:
6e:f6:ca:26:1d:8d:85:31:f5:a2:34:4a:30:c0:00:01:c8:6e:
f7:f4:e4:4b:0f:40:ad:21:20:05:8b:a1:a9:66:42:2d:da:28:
2c:f8:5c:28:f2:05:a5:d4:83:de:f5:0a:a0:6a:32:08:5c:93:
38:20:f6:0e:11:6d:a1:d9:ae:e8:f7:fc:62:d2:30:a1:d5:84:
6a:0d:f9:83:b1:20:c2:f2:de:b5:f6:f9:8a:ad:02:b3:b1:39:
33:b6:10:45:66:cf:ee:20:7e:e3:41:dc:34:5f:0b:b7:23:a6:
b2:e9:2e:35:76:9f:84:1d:01:dc:40:d3:bb:5f:2d:83:4a:f4:
22:86:1d:56:e7:57:35:7c:48:c7:ca:21:fb:35:e9:12:48:81:
00:45:b6:16
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAYpHEdFWZ7sGx7Uu/WdKS6HFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwODMwMTUzMTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWUyZDQyYzkwNjk3ZTYyZmJjY2NmMGI4ZTQ3NGFjZTQ3NTQ1NGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WPg2xz17Ya1yNwJLr8/uMltpgDv
YixIQ1dRytWqFRW8Xa4NyGWE/PPsziT+ACX5nxIDaRGKACkpohmqFCd23GtnjKQT
aBNhczdvp4XVayyNCqwQ2tDwEGLTEZdFpWe5sDnwLlHuUjkBMKoAi31uV2OPW+NQ
0KizYErXlO/u/ReD+F3ZDKbc15PjNy7W4BneWBD6NLCD/h9+U4CGAce6NmIhRu9r
ZfXH9SVZFYHc5kvyAIYsEThK068c222py4cRLE212aGH1FrkOSnV3vpNxVLM3MU2
wsZnvR/Uj4rTPhbA4obI128355tZJB75kkkcF4WpQQuywstYbJ5KsClxowIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFPHi1CyQaX5i+8zPC45HSs5HVFTaMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvOGVMVUxKQnBmbUw3ek04TGprZEt6a2RVVk5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBAAt
CBUDBAAtk+ADBAC5wrEDBAC50UsDBAC50ugDBAC53PkDBAC53RQDBAG53RYDBAC5
3h0DBAC531ADBAC531MDBAG54QADBAC54RQDBAC54RYDBAC54moDBAC545EDBAC5
5EsDBAC59nMDBAC5++UDBAC5++cDBADBOpADBAHBOpIDBADCBUEwDQYJKoZIhvcN
AQELBQADggEBAIZ6RJZyYtxAc6uPv/6SvWJdpNuY9VW1KtlHDkWHFrHffTrza0oW
gutxOVcFrOyuTKt6eVAhoPl2V3knTAcpLvRSKr/BrZpRqT7v+KJzBqpJD556qhn1
AM2BPcVqtaRHo2OE/P3SOUcwcOMka272yiYdjYUx9aI0SjDAAAHIbvf05EsPQK0h
IAWLoalmQi3aKCz4XCjyBaXUg971CqBqMghckzgg9g4RbaHZruj3/GLSMKHVhGoN
+YOxIMLy3rX2+YqtArOxOTO2EEVmz+4gfuNB3DRfC7cjprLpLjV2n4QdAdxA07tf
LYNK9CKGHVbnVzV8SMfKIfs16RJIgQBFthY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org