Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8uz4D2F7b0UdJf0DU8BMD6KjB_I.roa
File: 8uz4D2F7b0UdJf0DU8BMD6KjB_I.roa (raw, json)
Hash identifier: u7e1qVAyepfLOcTGdYv1xVV2L2fHyplY/NQtM3YkjFM=
Subject key identifier: F2:EC:F8:0F:61:7B:6F:45:1D:25:FD:03:53:C0:4C:0F:A2:A3:07:F2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186E456A00DBCA7158758869C2067A45057
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8uz4D2F7b0UdJf0DU8BMD6KjB_I.roa
Signing time: Wed 15 Mar 2023 08:15:27 +0000
ROA not before: Wed 15 Mar 2023 08:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 45.90.16.0/24 maxlen: 24
185.126.83.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
185.240.123.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Apr 2023 14:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:56:a0:0d:bc:a7:15:87:58:86:9c:20:67:a4:50:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 15 08:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2ecf80f617b6f451d25fd0353c04c0fa2a307f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:a6:ac:a6:2b:dc:4f:a1:39:69:3c:ae:49:
5d:d2:74:a2:a5:f0:0e:21:d5:89:c4:cc:cb:80:9e:
bf:b3:c8:6f:6c:ef:f1:83:89:e7:be:b1:a8:d9:49:
3d:4c:1d:6a:c1:a5:93:99:9f:11:36:8c:99:13:93:
70:69:8c:94:04:12:0d:55:98:b7:14:85:fd:5e:2b:
3a:90:35:80:91:39:33:dd:3c:60:d1:e9:94:0d:11:
f8:81:54:15:9a:e0:a3:f6:b5:40:53:b5:f8:b9:5a:
86:e2:54:1c:8e:d3:51:32:66:46:ef:91:99:ad:45:
04:fd:aa:f2:0c:a5:e6:90:d3:de:46:93:ee:6a:0b:
4c:e1:e0:cd:da:19:9f:a4:6f:1a:7a:eb:a5:40:6f:
bd:b9:5d:42:e2:ab:35:0d:48:73:db:0a:ab:d9:6f:
01:b4:25:b9:6a:1c:8e:a6:a1:42:78:80:83:1e:3c:
45:17:ef:dd:46:f4:d8:9f:02:8d:b1:14:24:48:57:
1e:4e:c6:1f:87:2c:df:c5:89:10:45:98:0d:1a:18:
48:60:d7:6a:54:05:0f:6b:e0:3e:27:bf:d1:80:a8:
c4:d5:d1:b0:54:b2:94:88:e3:fb:cd:bd:64:a3:e9:
93:1e:41:d2:ab:75:aa:87:75:08:bb:7a:c2:52:6f:
bd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EC:F8:0F:61:7B:6F:45:1D:25:FD:03:53:C0:4C:0F:A2:A3:07:F2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8uz4D2F7b0UdJf0DU8BMD6KjB_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
45.131.134.0/24
185.126.83.0/24
185.240.123.0/24
193.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:90:f1:ea:b2:e8:d1:e4:e6:62:9a:2b:20:10:28:76:f8:68:
64:4b:cf:02:29:64:c8:5b:97:8e:2d:19:39:c6:6c:19:68:a9:
04:03:17:1b:78:b7:c8:58:00:77:98:50:2e:2d:3e:91:58:f5:
b7:3b:3f:0d:56:4e:6e:02:68:fa:00:76:c3:2b:04:07:2e:cc:
31:ba:7c:6b:ca:90:d8:7a:25:23:a7:67:75:d0:2d:5a:54:7d:
5a:0c:89:4c:59:4c:05:a4:11:9d:cc:27:19:be:5a:dc:27:78:
dd:a7:42:97:af:f8:5a:bf:df:3c:62:43:16:f3:57:2f:44:f6:
a5:a1:d9:21:89:31:37:0d:96:3d:fd:cf:da:c4:a4:cd:03:79:
67:b4:81:7e:4e:49:eb:e5:54:2f:d4:04:77:7c:07:40:6d:e9:
93:0f:55:ad:ac:48:2e:36:f6:c4:b9:aa:23:10:c6:34:7e:7d:
a0:50:06:e9:29:e7:2f:3c:4d:69:a9:75:d2:cc:82:58:24:8f:
e7:14:27:bd:d4:10:a5:ef:dc:a5:15:0c:30:4b:71:b0:ba:87:
50:cc:3c:4a:d5:7b:05:bf:dc:62:64:a8:f8:4e:c9:e3:dc:3c:
f3:37:03:9b:41:29:e6:ad:b1:82:f1:59:11:d7:f5:28:5f:af:
da:39:6c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org