Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AdeJnxmkbXn_dz0DNaVyK2ubEDE.roa
File: AdeJnxmkbXn_dz0DNaVyK2ubEDE.roa (raw, json)
Hash identifier: eMOPjQPWzFid3q7s1OXitz15ojlloiO+aaFoB8sttUg=
Subject key identifier: 01:D7:89:9F:19:A4:6D:79:FF:77:3D:03:35:A5:72:2B:6B:9B:10:31
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01926C181B94DFB143E4A5E9E4BFB1DE526E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AdeJnxmkbXn_dz0DNaVyK2ubEDE.roa
Signing time: Tue 08 Oct 2024 12:26:12 +0000
ROA not before: Tue 08 Oct 2024 12:26:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.113.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
194.76.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 14:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:18:1b:94:df:b1:43:e4:a5:e9:e4:bf:b1:de:52:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 8 12:26:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01d7899f19a46d79ff773d0335a5722b6b9b1031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:05:e4:46:27:9d:60:d8:d2:25:5d:0c:09:
2b:0e:c1:96:84:39:27:7e:b2:20:f3:9b:71:18:41:
47:a5:e6:17:df:49:37:89:7f:e0:9e:74:ee:0f:5d:
2d:36:cc:40:25:f7:96:cf:c2:3f:05:7c:e7:1d:b8:
38:fa:20:55:72:86:4b:41:6c:37:42:20:cf:fc:5e:
cd:95:ed:8f:ee:d5:a6:18:66:fc:57:b6:b2:16:ad:
5d:36:ae:c1:31:a4:f2:83:a7:c0:57:d3:01:d3:34:
f4:b2:c1:f9:02:46:ef:65:84:06:ab:38:81:a5:56:
1c:bf:64:7a:b6:35:68:08:f3:31:1b:3b:a3:27:74:
79:78:b4:27:d1:5a:2f:39:53:72:6c:3b:e9:d1:fb:
ea:4f:73:3b:44:24:0a:b7:24:7c:6c:1f:d7:2c:22:
f0:c8:21:c9:96:e3:d2:50:17:37:c5:7e:a2:a7:c0:
78:d8:75:38:6e:4c:d6:ef:c8:40:8e:17:5a:63:f3:
b0:15:97:a7:09:c0:ad:36:dc:0b:5e:19:33:c9:c8:
5b:bd:38:24:31:e3:33:c0:ed:cf:24:4b:07:68:f0:
98:7f:ed:5f:70:51:88:13:ea:84:f4:29:a2:a3:94:
7d:93:6c:43:0c:be:2f:ed:8f:13:2d:a0:b3:ff:bc:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D7:89:9F:19:A4:6D:79:FF:77:3D:03:35:A5:72:2B:6B:9B:10:31
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AdeJnxmkbXn_dz0DNaVyK2ubEDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.218.101.0/24
185.220.250.0/23
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
193.8.112.0/23
193.58.146.0/23
194.76.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:57:13:9a:4b:8e:f8:3e:37:56:03:c9:21:1a:5b:30:70:6f:
67:b0:a2:ac:47:32:09:8e:f4:c7:68:ff:94:42:de:94:45:0c:
e9:57:03:b6:fd:2a:77:f2:57:49:c0:13:a8:4b:cb:1a:24:c3:
e7:b4:58:58:ba:39:1a:d3:a0:a7:e4:38:fe:2d:e0:fd:29:9e:
3f:cb:ab:71:35:26:0e:db:62:73:02:af:53:09:56:48:02:42:
92:4a:65:b3:b5:bd:4e:c5:94:10:63:60:f3:00:ed:35:6d:db:
86:cb:68:b6:7e:8d:ba:d7:7f:98:c8:a5:61:03:10:a1:b4:fd:
af:d8:90:e8:5d:dd:41:94:b0:55:6c:c7:8f:11:47:b0:80:7d:
19:3f:4d:14:9c:ac:d9:d7:59:1a:b2:c8:c6:06:25:e4:e9:18:
7a:a1:6a:35:37:93:eb:3a:33:29:53:f8:6e:6c:7d:39:fa:5b:
56:dc:6b:83:de:dc:34:e2:39:4c:84:e3:b4:92:bc:14:01:26:
84:7b:5c:b5:c7:55:59:cb:72:08:3d:3a:16:88:59:b9:ad:c5:
9c:34:f0:6f:b9:5a:ec:64:ed:9b:23:d3:65:eb:38:97:8a:2a:
06:55:26:f2:43:0b:d3:c0:d9:09:7b:5b:74:1f:40:29:a3:80:
45:e2:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 19:11:15 2024 by rpki-client on console-ams.rpki-client.org