Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8jDIZu2vmu9rVy4fIFdd3IJKUlw.roa
File: 8jDIZu2vmu9rVy4fIFdd3IJKUlw.roa (raw, json)
Hash identifier: rChzIJTFO58u4dWqWOb2J/C+pI0Iehcdaip+OzBaqZA=
Subject key identifier: F2:30:C8:66:ED:AF:9A:EF:6B:57:2E:1F:20:57:5D:DC:82:4A:52:5C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188053F39AB6D4C3B7C0C1B9774727104E6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8jDIZu2vmu9rVy4fIFdd3IJKUlw.roa
Signing time: Wed 10 May 2023 10:40:09 +0000
ROA not before: Wed 10 May 2023 10:40:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 12 May 2023 09:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:3f:39:ab:6d:4c:3b:7c:0c:1b:97:74:72:71:04:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 10 10:40:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f230c866edaf9aef6b572e1f20575ddc824a525c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:db:d4:4d:d3:d1:f0:07:46:3f:ea:95:dc:
b3:a0:97:38:2e:87:8e:57:de:cd:68:c8:b4:ac:0d:
e2:a6:65:f2:d3:4c:98:20:df:29:95:da:80:c2:6c:
6c:70:43:d2:4d:f0:28:3d:ea:d5:0a:4b:07:23:b4:
a9:be:b8:83:e1:63:78:2a:be:51:d5:17:10:b0:81:
02:6e:0a:91:13:73:56:ed:2b:8b:b4:ed:6c:94:2e:
9c:ad:73:92:5f:0d:02:83:2f:34:c7:c7:f1:e0:11:
15:de:da:20:7a:bb:7b:2b:d8:02:e1:34:96:6f:47:
b1:c9:e8:e5:72:56:42:33:0a:7b:0d:e9:1d:14:88:
90:6e:45:b0:5c:af:1c:dd:bc:3f:23:36:f2:f9:8b:
3a:19:f7:31:aa:ef:19:d2:8d:34:fa:23:79:ca:32:
83:a0:f3:f5:04:c2:52:36:dc:ac:9a:7a:85:e6:80:
08:c6:4c:50:37:23:22:5f:f7:39:cb:fb:f6:ec:22:
07:75:bf:8f:b3:d6:91:cd:01:41:19:c7:1d:11:cb:
34:2e:33:d2:d3:d1:ba:89:76:b4:ee:4e:40:37:26:
50:dd:05:6e:30:8b:29:aa:16:88:6d:a9:0f:57:32:
84:90:93:38:6f:c5:7e:91:57:0e:94:3e:c9:7e:dd:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:30:C8:66:ED:AF:9A:EF:6B:57:2E:1F:20:57:5D:DC:82:4A:52:5C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8jDIZu2vmu9rVy4fIFdd3IJKUlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.225.0.0/23
185.246.112.0/24
185.246.115.0/24
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5e:a7:2f:48:b8:79:9a:2f:77:3d:5a:29:46:d3:d1:81:01:
8c:c5:15:31:82:12:04:90:7b:57:62:94:e8:d4:4d:47:af:2f:
42:6e:ae:ff:10:48:37:b3:33:53:9c:56:ac:e5:2d:29:52:4a:
80:5c:ff:48:2b:be:d1:2d:f3:37:ac:98:ba:90:20:3e:92:a2:
5f:23:e3:f5:dd:cd:72:92:5f:7c:ce:49:7d:b3:15:50:a9:fa:
e8:59:20:a4:6e:63:91:39:1f:63:e0:da:4a:fe:72:21:39:ee:
6c:56:56:ae:95:b6:34:fb:a5:48:6a:49:a8:0e:a1:50:d7:88:
18:a1:b6:ee:70:69:6d:64:1a:dd:57:e4:73:e8:cd:90:d6:92:
c8:e9:33:a7:e1:01:d0:7c:ad:27:70:79:23:ce:21:af:86:80:
fd:43:9a:8f:49:96:90:ba:bf:1b:64:62:6d:9d:a3:4b:0b:0c:
18:ad:90:e4:87:67:db:97:cd:b0:13:69:59:3e:c7:dd:7b:25:
6d:05:8e:af:eb:dd:3a:e6:a5:28:ee:e0:c1:78:d1:05:be:8a:
2a:7e:5b:93:d3:99:8d:a3:45:31:f3:31:2e:57:3e:66:db:9c:
eb:89:2e:3e:da:4f:11:ef:43:82:f9:58:a1:67:69:57:a9:d0:
b9:f1:af:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org