Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9703_lFqK_Hqz-b0zLNseBNZS_8.roa
File: 9703_lFqK_Hqz-b0zLNseBNZS_8.roa (raw, json)
Hash identifier: zFxM2p9UmCU5dWLlsmfYFKD1ZZ393ZIl9wB0GBpwnbY=
Subject key identifier: F7:BD:37:FE:51:6A:2B:F1:EA:CF:E6:F4:CC:B3:6C:78:13:59:4B:FF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0191E58ADE082EF6C4917A4210742CFAC94E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9703_lFqK_Hqz-b0zLNseBNZS_8.roa
Signing time: Thu 12 Sep 2024 09:22:48 +0000
ROA not before: Thu 12 Sep 2024 09:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.113.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 17:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:8a:de:08:2e:f6:c4:91:7a:42:10:74:2c:fa:c9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 12 09:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7bd37fe516a2bf1eacfe6f4ccb36c7813594bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:85:60:0a:83:ac:a0:98:99:f3:3e:63:4f:
de:07:db:e4:52:02:90:a8:91:72:0f:80:8c:d9:af:
7f:99:8c:b3:bf:8e:8b:8d:dc:11:43:85:62:71:02:
dc:24:de:ac:64:e4:78:10:d4:5e:3c:9b:d6:57:ad:
0a:fc:94:bf:d3:fd:97:87:61:47:d9:bd:e2:97:b9:
eb:c9:5a:3b:c6:33:7b:e4:43:24:e9:9f:4d:e0:7a:
f4:33:6c:02:b4:23:b1:83:e0:61:11:d8:eb:a9:e4:
0a:e7:2e:d1:28:d7:5e:ee:af:a9:87:41:01:7b:84:
93:ef:22:29:6a:c9:e8:b7:45:7a:79:c9:c0:bf:94:
b7:81:93:75:32:4b:54:09:6a:1b:f0:05:83:c4:ef:
5e:db:cc:c2:ce:da:b8:31:0f:05:16:84:c2:7a:9c:
12:ac:8b:ef:66:05:9e:b6:f1:8f:ee:f7:da:1c:8b:
65:e5:65:c1:d0:b2:5b:cd:6c:d6:cf:f8:08:09:67:
30:da:b1:86:65:5f:2c:6f:c4:70:96:b3:16:eb:94:
ed:fb:ec:7e:88:a4:a4:27:c6:18:0f:e1:7c:dd:a9:
b7:1a:0b:46:02:f8:87:9b:58:3c:a4:d0:43:d4:25:
0a:37:17:b7:73:ee:3c:7e:f1:a5:b3:ea:9e:f0:62:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BD:37:FE:51:6A:2B:F1:EA:CF:E6:F4:CC:B3:6C:78:13:59:4B:FF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9703_lFqK_Hqz-b0zLNseBNZS_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.218.20.0/24
185.218.101.0/24
185.220.250.0/23
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:cd:b5:ae:b1:e1:06:bd:6d:8d:c8:89:d4:fc:45:ba:d3:94:
0c:a6:c7:39:bc:45:02:6d:a5:dd:6f:75:b3:ec:48:99:10:15:
60:9e:86:6c:5b:04:ad:ea:fc:39:d7:94:fa:46:2e:fb:95:6d:
c6:69:b7:b5:83:89:01:f2:3f:d7:d1:c4:fa:0b:8a:e3:72:33:
85:a0:62:bb:85:b8:27:25:6b:6f:40:60:3c:c1:3d:1d:81:c7:
ce:cc:21:1f:0d:bc:51:eb:df:78:cc:8b:0d:1c:2d:58:f5:b2:
01:a6:de:e7:0f:e9:a2:bc:3e:ef:0e:aa:61:84:f9:31:dc:75:
c0:8e:ef:e0:f4:b9:99:e1:81:34:8a:91:09:66:d9:31:1f:70:
0a:0e:c2:db:9b:60:43:a4:86:cf:8b:9c:79:4f:c7:d5:19:50:
bb:00:29:c0:4e:4f:40:dc:5d:ae:db:df:03:7b:38:6f:6f:22:
17:3f:86:11:27:0f:66:24:d2:e6:42:40:2c:55:ea:a3:fb:79:
df:8b:45:27:27:0e:58:30:87:f7:8c:db:5b:54:ea:9e:b2:57:
4a:20:97:c4:cc:b6:3b:03:3e:9e:ec:c9:3f:8b:41:c3:35:2d:
d9:e0:73:17:2f:02:31:ab:5a:ef:59:61:3b:16:7a:f3:b3:f1:
eb:35:8e:bd
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZHlit4ILvbEkXpCEHQs+slOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwOTEyMDkyMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2JkMzdmZTUxNmEyYmYxZWFjZmU2ZjRjY2IzNmM3ODEzNTk0YmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aOFYAqDrKCYmfM+Y0/eB9vkUgKQ
qJFyD4CM2a9/mYyzv46LjdwRQ4VicQLcJN6sZOR4ENRePJvWV60K/JS/0/2Xh2FH
2b3il7nryVo7xjN75EMk6Z9N4Hr0M2wCtCOxg+BhEdjrqeQK5y7RKNde7q+ph0EB
e4ST7yIpasnot0V6ecnAv5S3gZN1MktUCWob8AWDxO9e28zCztq4MQ8FFoTCepwS
rIvvZgWetvGP7vfaHItl5WXB0LJbzWzWz/gICWcw2rGGZV8sb8RwlrMW65Tt++x+
iKSkJ8YYD+F83am3GgtGAviHm1g8pNBD1CUKNxe3c+48fvGls+qe8GJP3wIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFPe9N/5Raivx6s/m9MyzbHgTWUv/MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvOTcwM19sRnFLX0hxei1iMHpMTnNlQk5aU184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQALQgVAwQA
uX5SAwQAudoUAwQAudplAwQBudz6AwQBueEAAwQAueJoAwQBueOSAwQBwQhwAwQB
wTqSMA0GCSqGSIb3DQEBCwUAA4IBAQCczbWuseEGvW2NyInU/EW605QMpsc5vEUC
baXdb3Wz7EiZEBVgnoZsWwSt6vw515T6Ri77lW3Gabe1g4kB8j/X0cT6C4rjcjOF
oGK7hbgnJWtvQGA8wT0dgcfOzCEfDbxR6994zIsNHC1Y9bIBpt7nD+mivD7vDqph
hPkx3HXAju/g9LmZ4YE0ipEJZtkxH3AKDsLbm2BDpIbPi5x5T8fVGVC7ACnATk9A
3F2u298DezhvbyIXP4YRJw9mJNLmQkAsVeqj+3nfi0UnJw5YMIf3jNtbVOqesldK
IJfEzLY7Az6e7Mk/i0HDNS3Z4HMXLwIxq1rvWWE7Fnrzs/HrNY69
-----END CERTIFICATE-----
Generated at Tue Sep 24 20:21:36 2024 by rpki-client on console-ams.rpki-client.org