Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EeamoHZNQQUQZ2GgesDL_mdu9wQ.roa
File: EeamoHZNQQUQZ2GgesDL_mdu9wQ.roa (raw, json)
Hash identifier: 8cLVRuACtGPvV3ASMGSyEOWIfJCvTZa2KjbPMk1ojV0=
Subject key identifier: 11:E6:A6:A0:76:4D:41:05:10:67:61:A0:7A:C0:CB:FE:67:6E:F7:04
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01912DBBC0E3855E3904FD6469DA47E20649
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EeamoHZNQQUQZ2GgesDL_mdu9wQ.roa
Signing time: Wed 07 Aug 2024 16:46:04 +0000
ROA not before: Wed 07 Aug 2024 16:46:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 07:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2d:bb:c0:e3:85:5e:39:04:fd:64:69:da:47:e2:06:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 7 16:46:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11e6a6a0764d4105106761a07ac0cbfe676ef704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:4d:13:59:4e:25:f7:5d:fb:9d:c1:a2:56:
d9:48:0c:d5:75:4e:13:67:d2:57:ea:cf:f7:c5:a6:
c2:4d:23:86:e6:7a:38:09:43:da:df:17:ab:48:c6:
e5:2f:3b:76:7b:65:01:b3:2f:b2:df:e5:af:de:59:
93:e6:ea:82:1d:d9:9b:99:04:35:ed:9e:00:05:e6:
fd:c1:6d:fc:38:c2:5a:8d:96:2e:cf:7e:e8:57:a9:
f7:9e:b3:3b:d5:ee:13:c4:1c:f5:07:a4:37:ae:aa:
a2:03:f6:f5:9a:10:5b:31:71:c1:b1:2c:ba:e4:5e:
ca:a6:d0:1c:d2:42:b0:c8:db:aa:47:3b:9b:4f:f0:
38:4e:81:c8:5b:7e:5e:5e:70:16:8c:9b:7b:e0:aa:
20:b3:1a:f2:18:51:41:05:44:7e:c9:d3:7c:65:6e:
ac:90:90:c2:7b:3b:95:a7:22:24:a5:2e:68:e2:ab:
b1:3e:8e:5d:ec:c3:74:80:12:42:da:55:04:a3:46:
bd:97:0b:64:9d:a8:dc:a1:e0:3a:a0:19:59:cf:5d:
a9:90:e9:46:57:df:9c:97:b3:03:74:30:01:fd:b4:
9e:54:70:a5:af:99:0d:c7:61:b7:a2:4a:58:a8:b5:
e9:55:f0:2a:29:1f:24:4b:a7:05:8d:d0:df:b9:25:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E6:A6:A0:76:4D:41:05:10:67:61:A0:7A:C0:CB:FE:67:6E:F7:04
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EeamoHZNQQUQZ2GgesDL_mdu9wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.220.250.0/23
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:8c:85:9e:57:89:db:2c:b4:c1:b8:48:c1:78:20:4c:38:c7:
50:6a:12:ac:a6:cc:dd:f6:34:79:ab:1a:51:63:1a:79:52:9d:
84:8c:4e:67:c6:06:9c:51:56:5e:3f:e0:b3:45:3c:6c:80:61:
d4:f5:24:13:b4:2d:1e:46:00:2c:97:5a:11:6e:ac:29:52:91:
0c:72:03:1b:77:4a:22:85:a1:15:49:95:ba:fc:72:b4:fd:b1:
d7:3a:70:2b:b7:51:1e:82:a7:69:42:e2:79:11:10:11:cd:68:
a2:4c:20:67:ba:0a:d8:ca:32:a6:75:5a:31:c5:75:43:d6:19:
09:6e:c1:e9:f6:89:46:59:92:de:4d:92:9a:fb:36:4b:8a:42:
5f:64:dc:e2:98:70:09:80:df:76:d0:07:70:11:b9:70:8d:96:
7f:0f:2d:bf:9f:6d:7e:48:70:0e:82:d1:3d:86:50:dc:2f:86:
6d:c3:66:f4:0e:49:bf:dd:3a:0e:72:b9:5f:74:08:d8:63:55:
a9:44:f5:fb:77:e9:c1:f0:db:f7:32:69:33:fe:e5:86:90:27:
f1:22:c5:f5:91:98:9c:a7:43:f5:50:41:aa:7a:1d:fc:bf:23:
0b:25:d3:f0:5c:8c:55:50:f7:15:19:71:b4:0e:f6:1d:37:7d:
eb:11:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 10:43:37 2024 by rpki-client on console-fra.rpki-client.org