Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/I4cjya-W6GRM15mjOsLVDkzKrAY.roa
File: I4cjya-W6GRM15mjOsLVDkzKrAY.roa (raw, json)
Hash identifier: Y28ni3N+Z8rH3zcpqyEcSzy7W4pRiz0w6AjbhpOJQSM=
Subject key identifier: 23:87:23:C9:AF:96:E8:64:4C:D7:99:A3:3A:C2:D5:0E:4C:CA:AC:06
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8028ADB05A61E6B8678EC1046B874D8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/I4cjya-W6GRM15mjOsLVDkzKrAY.roa
Signing time: Tue 02 Jan 2024 02:30:58 +0000
ROA not before: Tue 02 Jan 2024 02:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202636
IP address blocks: 185.252.44.0/22 maxlen: 22
185.248.200.0/22 maxlen: 24
37.32.96.0/23 maxlen: 23
185.150.78.0/23 maxlen: 23
185.150.77.0/24 maxlen: 24
185.191.44.0/22 maxlen: 22
93.189.122.0/24 maxlen: 24
93.189.121.0/24 maxlen: 24
185.239.254.0/24 maxlen: 24
194.41.118.0/23 maxlen: 23
194.41.116.0/23 maxlen: 23
194.35.41.0/24 maxlen: 24
185.218.18.0/24 maxlen: 24
185.227.205.0/24 maxlen: 24
45.134.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Apr 2024 20:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:8a:db:05:a6:1e:6b:86:78:ec:10:46:b8:74:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=238723c9af96e8644cd799a33ac2d50e4ccaac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:93:de:46:bd:a7:6a:43:c8:2c:3e:7e:45:
f5:46:29:70:60:0f:38:76:7b:d5:84:15:26:18:45:
a8:4f:91:dd:d0:3b:79:c6:0d:56:2a:d2:b1:32:44:
c9:d0:d0:91:69:8e:94:12:93:dd:b7:e3:d8:e4:00:
34:bf:b4:f7:66:7a:5e:e5:12:45:54:b9:45:48:df:
13:6e:9f:14:7c:26:7b:0e:74:1d:a0:7b:ee:ff:98:
57:12:92:7b:9d:60:c0:d9:64:2d:0d:cd:29:c7:5d:
17:fc:39:35:00:e6:75:b0:dd:4b:ce:ef:8a:92:27:
19:f2:41:82:cb:65:5e:9b:cf:17:19:e2:e9:51:74:
53:1d:61:32:54:58:40:51:4d:f5:4a:d4:59:7e:5e:
4f:83:fc:70:0c:60:e3:da:c7:4c:06:7c:27:d0:fd:
bc:8e:82:26:70:ca:fc:74:5f:e3:24:30:dc:ad:5b:
76:70:00:a7:e1:13:bf:24:37:f8:3f:bb:6d:f0:fd:
5d:60:f4:52:ab:6f:06:5f:70:08:77:65:4a:0a:ce:
dc:d0:eb:54:a3:ad:f0:0f:bd:4d:70:93:52:80:9f:
6e:69:d4:1e:de:eb:1f:3f:3a:b7:55:8f:cf:40:37:
45:33:5e:7c:aa:c2:21:8a:b1:a4:b3:93:b9:f4:fa:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:87:23:C9:AF:96:E8:64:4C:D7:99:A3:3A:C2:D5:0E:4C:CA:AC:06
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/I4cjya-W6GRM15mjOsLVDkzKrAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.96.0/23
45.134.87.0/24
93.189.121.0-93.189.122.255
185.150.77.0-185.150.79.255
185.191.44.0/22
185.218.18.0/24
185.227.205.0/24
185.239.254.0/24
185.248.200.0/22
185.252.44.0/22
194.35.41.0/24
194.41.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ed:21:17:82:70:56:21:0d:ea:1d:28:cc:ed:99:11:c7:b7:
5e:02:e0:60:3d:85:9e:07:3c:56:a4:3f:5d:4f:eb:45:05:cc:
8a:39:ea:63:ca:cf:08:6c:cb:38:29:65:ae:74:07:43:7b:ba:
75:e0:a3:bc:7b:ec:6a:0c:8d:89:2d:17:ee:75:cd:8c:aa:2f:
dc:25:5d:d7:a7:cc:77:3b:dd:da:15:0d:e6:14:7e:20:c1:52:
2d:3c:9d:9d:b0:b6:c0:48:50:e9:99:c1:33:18:ac:7a:68:09:
eb:98:24:81:2b:31:7f:06:2c:9d:91:f3:c4:50:bc:62:69:54:
09:6d:77:c1:04:1b:33:69:dc:fd:a8:5e:ca:12:43:9f:95:56:
0e:39:08:4d:95:d9:36:3d:cb:15:91:58:3e:f2:bc:2c:22:8a:
18:36:3b:03:e3:da:bd:bd:11:ed:8a:4c:8a:92:ec:50:8e:52:
cb:e0:20:4a:af:63:33:b0:e8:5d:32:5d:75:45:84:ba:85:95:
cf:da:33:bb:03:a7:29:9d:1e:04:06:37:5b:2c:8d:80:27:89:
05:15:be:18:7f:de:85:67:e2:36:e0:d5:09:39:17:de:98:7a:
70:8f:ec:db:bb:19:be:2c:6f:c1:49:97:e4:ad:53:a0:75:77:
a6:f5:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org