Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/If3SDjUQvN66VU5Wx4b5Ph3UMJw.roa
File: If3SDjUQvN66VU5Wx4b5Ph3UMJw.roa (raw, json)
Hash identifier: 9i7xrHAGZeuP76khZx7NiYh84GhLsmQnrO/HDJ4C4Gk=
Subject key identifier: 21:FD:D2:0E:35:10:BC:DE:BA:55:4E:56:C7:86:F9:3E:1D:D4:30:9C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01857D34ADEDB555CBFE990DDE09D7C14554
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/If3SDjUQvN66VU5Wx4b5Ph3UMJw.roa
Signing time: Wed 04 Jan 2023 14:34:42 +0000
ROA not before: Wed 04 Jan 2023 14:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 185.206.250.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jan 2023 15:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:34:ad:ed:b5:55:cb:fe:99:0d:de:09:d7:c1:45:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 4 14:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21fdd20e3510bcdeba554e56c786f93e1dd4309c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:8f:6d:86:07:fa:6b:dd:50:85:95:62:d3:
2e:ea:41:e4:d8:b0:71:1b:d0:83:cb:48:69:fd:ec:
9c:6d:ca:0f:fb:29:37:16:49:62:9e:1e:5b:c2:ec:
c1:6d:c4:16:d8:85:8e:b8:e5:8c:26:4d:a1:3d:fd:
e6:12:27:63:1b:03:9c:a3:51:fd:47:56:2a:2c:7e:
26:5c:b9:da:6a:6b:17:1e:9a:ff:13:7f:e5:c9:ee:
63:b0:48:26:1c:f3:9e:09:da:5a:54:e4:13:31:c6:
a4:5f:71:44:2a:b9:3e:e5:24:c5:7a:9e:63:26:98:
93:34:45:85:89:f7:d0:cd:de:dc:45:fb:5a:88:1b:
ff:50:9e:df:eb:b6:15:61:24:14:cd:f4:ea:70:05:
ed:c4:af:60:ec:c4:c3:0d:07:ce:c4:e0:d9:a1:4c:
fc:4c:e0:7c:9b:f3:7b:a2:2b:f6:d5:93:e8:7c:a5:
47:bb:de:5d:91:0f:9b:d2:f7:5c:ec:a1:5d:08:42:
3d:d9:09:d9:ec:70:38:dd:26:2b:73:f7:ba:1b:bd:
0b:04:7d:4f:a9:a1:04:ba:c1:95:08:71:1d:34:ce:
d7:63:6e:38:9c:41:8f:3c:2b:a6:8c:93:73:e8:e4:
ce:42:0b:ba:69:dd:eb:6b:bf:3c:7b:3a:66:47:43:
a7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FD:D2:0E:35:10:BC:DE:BA:55:4E:56:C7:86:F9:3E:1D:D4:30:9C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/If3SDjUQvN66VU5Wx4b5Ph3UMJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.131.135.0/24
185.206.250.0/24
185.223.78.0/24
185.223.155.0/24
185.246.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:16:ea:14:d5:76:12:0c:49:92:2f:da:de:03:21:00:f9:83:
88:5f:92:ae:06:23:f3:6d:3c:1a:45:94:9e:10:5a:75:6b:ea:
4c:c6:bd:78:a9:e8:b9:9b:9e:a8:63:d9:2b:84:d4:18:5f:e9:
f0:1c:64:4c:8d:94:de:3d:70:b5:c1:89:41:e2:09:d0:30:04:
ce:83:37:56:52:44:a5:a1:8e:88:67:b6:0a:fb:52:97:b1:82:
7b:c7:51:ca:dd:89:f8:96:91:79:72:fb:e1:c8:1c:29:86:6d:
58:29:8f:ea:61:02:1d:39:97:23:d2:1d:10:64:8d:2a:ca:c7:
83:d0:23:25:ed:97:6b:e0:65:8a:46:fc:25:c1:ff:21:a0:55:
e1:6b:56:34:62:bc:e1:60:22:82:fa:ad:3d:6b:52:05:52:8f:
a8:8a:b3:79:3e:ef:df:24:71:2c:4d:03:85:3b:65:fb:5e:2d:
50:5c:e1:6b:42:9b:d3:42:d8:f7:84:16:13:42:67:be:ea:9d:
09:3d:5a:31:f2:59:d9:2e:d6:62:42:00:1a:a6:f2:da:52:0c:
18:8b:7f:41:f8:6f:3a:4b:e1:87:bd:2e:16:88:e9:e6:1e:76:
20:ff:42:10:59:c0:c6:2b:cd:70:9b:10:20:61:19:53:ff:57:
f4:c6:68:ea
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYV9NK3ttVXL/pkN3gnXwUVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTA0MTQzNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWZkZDIwZTM1MTBiY2RlYmE1NTRlNTZjNzg2ZjkzZTFkZDQzMDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/GPbYYH+mvdUIWVYtMu6kHk2LBx
G9CDy0hp/eycbcoP+yk3Fklinh5bwuzBbcQW2IWOuOWMJk2hPf3mEidjGwOco1H9
R1YqLH4mXLnaamsXHpr/E3/lye5jsEgmHPOeCdpaVOQTMcakX3FEKrk+5STFep5j
JpiTNEWFiffQzd7cRftaiBv/UJ7f67YVYSQUzfTqcAXtxK9g7MTDDQfOxODZoUz8
TOB8m/N7oiv21ZPofKVHu95dkQ+b0vdc7KFdCEI92QnZ7HA43SYrc/e6G70LBH1P
qaEEusGVCHEdNM7XY244nEGPPCumjJNz6OTOQgu6ad3ra788ezpmR0OnbwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFCH90g41ELzeulVOVseG+T4d1DCcMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvSWYzU0RqVVF2TjY2VlU1V3g0YjVQaDNVTUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALQgVAwQA
LYOHAwQAuc76AwQAud9OAwQAud+bAwQAufZwMA0GCSqGSIb3DQEBCwUAA4IBAQBc
FuoU1XYSDEmSL9reAyEA+YOIX5KuBiPzbTwaRZSeEFp1a+pMxr14qei5m56oY9kr
hNQYX+nwHGRMjZTePXC1wYlB4gnQMATOgzdWUkSloY6IZ7YK+1KXsYJ7x1HK3Yn4
lpF5cvvhyBwphm1YKY/qYQIdOZcj0h0QZI0qyseD0CMl7Zdr4GWKRvwlwf8hoFXh
a1Y0YrzhYCKC+q09a1IFUo+oirN5Pu/fJHEsTQOFO2X7Xi1QXOFrQpvTQtj3hBYT
Qme+6p0JPVox8lnZLtZiQgAapvLaUgwYi39B+G86S+GHvS4WiOnmHnYg/0IQWcDG
K81wmxAgYRlT/1f0xmjq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org