Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EAxf4DMoN-c-i9El5KugGWSvg5U.roa
File: EAxf4DMoN-c-i9El5KugGWSvg5U.roa (raw, json)
Hash identifier: S6AQRGU0z/hNfCAHyLTqszBdzb3Rq6cYu+37vBSHLbg=
Subject key identifier: 10:0C:5F:E0:33:28:37:E7:3E:8B:D1:25:E4:AB:A0:19:64:AF:83:95
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B64478F880EA1E77C868EA73E39969
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EAxf4DMoN-c-i9El5KugGWSvg5U.roa
Signing time: Mon 02 Jan 2023 09:00:48 +0000
ROA not before: Mon 02 Jan 2023 09:00:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 185.206.250.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 14:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:44:78:f8:80:ea:1e:77:c8:68:ea:73:e3:99:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=100c5fe0332837e73e8bd125e4aba01964af8395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:04:57:71:e7:39:06:2a:7b:34:58:04:9d:
57:36:cc:c3:d6:37:4b:30:7a:3e:a5:6c:e5:6e:80:
a2:ee:4a:89:21:88:be:8e:de:83:ac:02:3f:0a:fc:
35:ac:a4:9d:9f:ec:2c:0d:33:85:a0:85:d8:b5:aa:
ee:32:d8:20:56:5b:85:f1:8b:64:86:d9:92:a3:a6:
ad:3f:89:89:3d:d6:ef:2b:7f:46:b0:44:eb:2c:68:
89:85:77:f8:0c:28:60:51:19:ea:05:72:5a:2d:e4:
5f:71:a7:96:4d:0e:00:68:7a:a8:5e:35:d0:9b:e4:
ea:86:22:32:8c:46:e6:92:b4:7c:eb:98:e9:9a:9d:
b7:28:f1:38:52:ff:2d:ed:29:66:57:20:1e:0b:0f:
0d:c0:e0:64:2e:20:7c:6f:ec:0d:67:6f:f6:97:96:
50:80:11:63:e2:04:67:61:9c:f1:27:a4:79:d9:f4:
67:82:2a:ab:98:be:86:86:c0:e5:a6:62:50:1f:30:
c2:bb:81:ea:44:ad:51:7b:b0:7c:ad:1a:74:f4:60:
55:ae:e2:8b:78:da:89:f8:02:90:b0:a2:6f:76:de:
2c:80:cc:51:68:26:ca:6e:b3:e1:07:0f:ce:39:0f:
1c:c8:f6:9b:10:ae:43:7f:2b:c5:69:8a:16:e7:27:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0C:5F:E0:33:28:37:E7:3E:8B:D1:25:E4:AB:A0:19:64:AF:83:95
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EAxf4DMoN-c-i9El5KugGWSvg5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.131.135.0/24
185.206.250.0/24
185.223.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:34:c3:dd:9a:1e:3d:1c:9e:e0:55:79:e8:14:71:74:ff:af:
2f:91:2b:1a:10:c1:f5:18:d0:a5:30:e9:63:0f:22:c8:7c:c8:
e0:15:d6:ae:7e:40:0c:55:85:54:30:ab:bf:a6:72:4d:62:e7:
76:0a:ea:d4:56:f2:07:83:d4:16:d5:47:66:4d:e5:fb:aa:d1:
18:84:db:29:2a:a5:be:0a:cf:cd:26:2b:e2:46:fc:c4:04:da:
e1:78:c0:64:4f:04:8c:96:a6:7c:ff:51:fa:80:15:7f:5f:eb:
75:d1:68:f3:8a:88:89:2e:ef:19:5d:5b:e4:43:e5:b0:71:57:
71:b9:9e:88:af:03:3c:4d:78:e7:4f:d7:86:fe:00:a2:58:14:
86:c1:3a:4d:68:b6:3a:e7:05:11:07:cf:1b:7f:55:f3:1d:50:
fe:00:d2:2a:6c:6f:14:55:9f:10:0f:80:91:99:20:31:e6:8b:
7b:e5:08:81:fa:f6:ec:28:52:16:1b:83:aa:a3:02:59:5d:09:
56:f7:65:3b:d9:d5:52:f5:0e:fc:0b:2d:da:29:b4:e8:6b:76:
5b:66:cd:e3:f8:27:05:8f:f8:46:04:36:16:cf:ca:a1:4d:6d:
e9:e4:c8:dd:3c:68:55:72:0b:b6:1b:2f:32:93:26:aa:01:a9:
7e:c1:78:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org