Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GHSBtC4WAm9hw2puNBA98yYHaIQ.roa
File: GHSBtC4WAm9hw2puNBA98yYHaIQ.roa (raw, json)
Hash identifier: Wr6KQdIXKF/AkF3zIQ1PKtq55EPMPTXHV3NS53uJh2o=
Subject key identifier: 18:74:81:B4:2E:16:02:6F:61:C3:6A:6E:34:10:3D:F3:26:07:68:84
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01877B69E67577E1C3D77DD8FC1D75E90375
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GHSBtC4WAm9hw2puNBA98yYHaIQ.roa
Signing time: Thu 13 Apr 2023 16:19:10 +0000
ROA not before: Thu 13 Apr 2023 16:19:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
185.240.123.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
176.125.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 16:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:69:e6:75:77:e1:c3:d7:7d:d8:fc:1d:75:e9:03:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 13 16:19:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=187481b42e16026f61c36a6e34103df326076884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8d:11:cd:13:a6:57:14:50:6c:53:96:55:15:
a6:5a:09:87:5f:1f:95:0c:22:da:88:c3:88:4a:6d:
03:53:f9:c9:1a:ef:24:00:53:7a:88:ac:cf:f5:17:
02:b6:0f:18:b8:42:c7:d7:de:3d:8c:9e:75:8c:bf:
5c:d5:ac:47:6e:7b:bd:e4:1d:ce:4c:d2:6b:d3:00:
0e:cb:8b:bc:72:09:d1:b0:60:b9:65:c2:ba:49:41:
e2:ed:5e:fe:80:08:3a:38:44:f7:24:70:49:af:24:
c2:37:93:fb:1a:b7:77:d2:46:b5:96:bb:cd:c2:ad:
5d:f5:8e:cc:b4:cc:f3:8e:ff:c6:7a:44:38:96:d2:
77:d5:4d:a8:8d:13:c4:d3:90:4d:2b:0f:26:f6:bb:
e1:f1:61:4e:59:0b:0d:c6:52:10:35:07:c6:ae:33:
15:55:de:08:0a:1d:91:bd:93:6c:74:90:51:f5:1b:
55:af:01:d9:eb:14:3f:71:79:2e:10:0e:eb:ba:b1:
34:14:6a:7f:c2:51:5a:b7:a4:85:fd:c0:3d:80:e2:
bb:95:a6:25:c8:b2:5a:69:3b:cc:0a:2f:c4:2f:94:
f5:a9:ce:62:dd:f1:af:7b:9d:fb:27:99:d0:d7:89:
68:6a:3f:04:72:26:3f:de:03:e3:09:05:ca:ee:c1:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:74:81:B4:2E:16:02:6F:61:C3:6A:6E:34:10:3D:F3:26:07:68:84
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GHSBtC4WAm9hw2puNBA98yYHaIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
45.147.224.0/24
176.125.248.0/24
185.108.204.0/23
185.126.82.0/24
185.199.158.0/24
185.206.250.0/24
185.218.20.0/24
185.225.0.0/23
185.240.123.0/24
193.58.144.0/24
193.58.146.0/23
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:cf:4b:90:a6:54:cd:16:25:5f:5e:34:88:f9:ce:99:99:c6:
79:d0:b9:a4:f4:8e:63:65:f5:09:65:1a:1a:5b:17:e7:0c:01:
5c:7f:ec:59:33:76:a9:94:4a:b0:50:ab:b7:21:bb:91:4a:15:
75:12:6a:01:37:a7:3d:f8:27:85:18:05:41:b3:72:58:44:24:
d4:58:3d:b0:36:47:9e:aa:ed:30:e4:fe:99:a7:83:cd:e6:c9:
9d:26:e7:de:22:17:58:ba:3a:3c:27:bb:2d:10:3a:9b:98:1d:
d8:bd:d4:c6:37:bf:78:54:34:eb:c8:ac:0c:3b:fa:2c:ef:4a:
19:3b:5a:3f:90:79:2b:35:f2:20:65:22:b3:ee:9c:e8:c7:99:
b0:1e:64:f5:9a:6c:0f:88:cb:98:1a:73:db:2d:bd:d6:b3:59:
07:cc:bd:be:ea:0b:90:43:86:e5:f0:18:25:5a:c4:11:29:b3:
16:21:f1:65:db:71:71:6d:c7:79:f7:29:7b:66:09:e1:4f:0d:
b6:56:81:51:24:bc:ab:49:31:52:d2:f7:3f:02:a5:c8:28:cc:
07:7e:86:56:dc:d0:b0:fa:e6:5c:74:4b:9c:a1:9d:36:ac:3a:
3f:df:2e:03:c0:c1:f0:da:a9:90:9c:16:0d:9e:cd:64:f8:6a:
20:f1:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org