Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Bin_jo4mAvLpWlxwxrexDEfjPV4.roa
File: Bin_jo4mAvLpWlxwxrexDEfjPV4.roa (raw, json)
Hash identifier: cquXWKLAkZd+US3ZH7KFgQxf+piBL9ap/7qjwzSkh7E=
Subject key identifier: 06:29:FF:8E:8E:26:02:F2:E9:5A:5C:70:C6:B7:B1:0C:47:E3:3D:5E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194A2964D1697E5933659314473995CECA4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Bin_jo4mAvLpWlxwxrexDEfjPV4.roa
Signing time: Sun 26 Jan 2025 12:29:06 +0000
ROA not before: Sun 26 Jan 2025 12:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 17:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:96:4d:16:97:e5:93:36:59:31:44:73:99:5c:ec:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 26 12:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0629ff8e8e2602f2e95a5c70c6b7b10c47e33d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ba:73:c6:e1:a0:51:2d:38:7a:be:35:c4:21:
43:ce:73:5f:37:f4:5e:fe:75:25:b7:2f:a1:5f:d4:
12:6e:35:37:e5:95:af:d0:da:7a:90:a2:63:e1:b0:
31:12:90:6f:6d:90:5f:3b:b8:86:73:f0:07:41:ef:
f8:83:43:8a:2a:f9:ec:c4:4a:cd:00:b3:5b:ff:14:
e0:d2:1d:17:8f:71:a1:75:98:16:3b:b6:0b:55:ac:
37:33:d2:94:c0:cf:1d:ea:ea:9b:cb:a6:fc:b9:1b:
1c:ee:d9:10:80:2b:63:a1:c6:6a:cf:75:72:6f:4a:
86:4b:0d:61:52:ec:cb:32:89:26:07:dc:97:8e:21:
94:58:f1:40:8d:e7:bd:cc:5f:56:ca:be:13:fc:c5:
09:12:d4:d2:45:fa:ec:48:9b:4c:b8:f6:53:1d:fe:
a8:74:ad:42:54:a0:15:6b:ed:67:50:db:77:ab:15:
57:35:cb:a6:aa:a0:99:bc:60:82:ee:50:dd:cd:29:
f3:4c:99:1a:5a:1f:f7:7f:b4:05:28:43:6e:61:f4:
14:17:aa:22:a2:59:c3:80:08:f3:56:15:0c:18:ec:
a3:eb:3b:38:e8:68:12:a9:41:e4:08:d3:dc:af:99:
99:c5:bd:08:90:fe:87:ba:f6:42:79:fe:0a:80:70:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:29:FF:8E:8E:26:02:F2:E9:5A:5C:70:C6:B7:B1:0C:47:E3:3D:5E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Bin_jo4mAvLpWlxwxrexDEfjPV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.209.75.0/24
185.218.20.0/24
185.220.250.0/23
185.225.0.0/23
185.227.146.0/23
193.8.112.0-193.8.114.255
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:c3:31:f7:13:4e:d7:30:d7:37:bc:e7:fd:85:1c:e9:5c:05:
f7:a9:58:f6:d4:22:71:16:38:a1:cd:ac:95:aa:19:81:05:04:
1c:40:59:f1:99:58:14:4e:65:64:58:ac:a0:12:d7:4d:74:b5:
57:5e:0e:d0:42:88:4a:df:67:07:fc:89:bd:be:87:65:f9:f8:
14:d7:05:89:8a:38:c4:18:50:29:61:19:35:0d:7b:61:5c:0d:
0e:f1:20:be:df:dd:80:41:dc:81:e0:9c:b6:ce:9a:8d:3e:33:
fd:1c:65:26:ba:0b:39:2b:ad:4e:c5:0c:9d:84:c5:86:cb:d5:
e0:d7:b7:3a:a4:39:63:35:88:09:b7:7a:1c:9d:d9:60:8a:ba:
65:fc:c6:91:29:81:40:2c:e4:3a:d2:e5:47:84:dc:fe:ee:f2:
77:8e:c9:d4:b0:b9:06:5c:be:66:56:03:50:5d:81:a5:6e:2c:
da:5b:e9:14:e0:65:94:c5:9c:28:b6:23:ee:a9:34:e8:71:b9:
32:c3:be:60:8a:e9:17:bf:da:e2:fc:70:86:58:32:dc:f1:0a:
81:4c:a3:09:eb:02:41:a8:21:e2:c6:74:07:9b:74:eb:7d:eb:
0c:05:8f:75:8d:c7:a4:e5:59:df:9b:f4:46:aa:fa:d4:a4:53:
8b:00:dd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:29 2025 by rpki-client