Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/KwZ0HRx6c8lRAGTWMM_15IhBi3c.roa
File: KwZ0HRx6c8lRAGTWMM_15IhBi3c.roa (raw, json)
Hash identifier: zYuhmw+5zLQYbi7IRD+iZd7ilU5TiQWyDlZe2oozESc=
Subject key identifier: 2B:06:74:1D:1C:7A:73:C9:51:00:64:D6:30:CF:F5:E4:88:41:8B:77
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01918E19D42E3158D2AE07D8BEFF24B99FE8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/KwZ0HRx6c8lRAGTWMM_15IhBi3c.roa
Signing time: Mon 26 Aug 2024 09:52:22 +0000
ROA not before: Mon 26 Aug 2024 09:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 17:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:19:d4:2e:31:58:d2:ae:07:d8:be:ff:24:b9:9f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 26 09:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b06741d1c7a73c9510064d630cff5e488418b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:d5:a6:b5:76:50:66:00:9b:18:91:93:3d:
84:54:fd:93:6f:80:a6:a1:60:74:27:9a:1c:3c:4c:
63:59:30:30:a9:17:06:db:c9:25:7c:4f:6d:1b:68:
52:71:7b:e4:30:70:8d:54:26:1d:b5:b3:5d:45:af:
59:0b:2f:0b:5d:77:28:d8:e4:d3:92:e3:58:a6:4a:
2c:a7:ac:eb:34:c0:76:bf:ca:48:e7:0d:ac:55:17:
71:f6:64:7c:ab:f9:9e:bb:00:84:a6:69:6d:18:d6:
cd:ca:6f:82:18:14:75:ab:e2:dc:68:45:0d:c7:40:
ec:72:3a:d8:8b:02:6f:64:ff:e5:44:c6:b1:93:39:
51:51:57:ad:a8:ce:9c:4f:35:23:9c:15:9a:79:d7:
1b:8c:cc:c8:91:c6:df:5e:1d:f7:31:67:b1:e5:7c:
cf:4a:9a:62:65:41:46:c4:68:13:3f:55:93:2c:65:
f7:71:e3:44:bd:02:50:af:cf:6a:c1:22:fa:d9:db:
5b:2e:50:71:ac:ad:5e:91:85:c4:0f:c4:eb:f2:6d:
b0:f7:30:a5:9a:72:39:ff:15:30:d0:fb:80:4b:62:
e2:74:0a:c3:dc:09:74:ca:e4:cf:d7:4b:2f:d6:ec:
3b:2d:f6:e4:dd:c9:c1:fd:da:11:dd:9e:4d:02:5c:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:06:74:1D:1C:7A:73:C9:51:00:64:D6:30:CF:F5:E4:88:41:8B:77
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/KwZ0HRx6c8lRAGTWMM_15IhBi3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.131.135.0/24
185.126.82.0/24
185.220.250.0/23
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:98:b0:ab:99:ae:61:b8:65:e7:a4:50:61:85:eb:33:22:2c:
ac:45:94:1d:44:ef:e0:8e:ca:8e:a5:b5:07:6c:ab:61:43:6e:
0f:2f:5d:7f:5c:92:03:cc:98:dd:53:5a:63:67:4c:6c:c2:23:
c5:a8:76:8a:be:7c:b9:3f:3c:72:9e:d0:c5:59:82:83:de:da:
38:78:b9:00:bd:b1:88:23:a8:ee:e3:38:f7:7e:43:a4:5a:7b:
c7:7a:b6:18:fd:e5:6e:9e:ef:c2:34:6c:d8:f9:2c:c8:d0:a7:
3a:f8:e2:be:97:98:3c:00:ae:20:2f:96:23:bd:ff:3c:ee:7c:
46:2d:02:de:e6:5a:52:87:ee:c9:9c:0c:eb:2c:64:b0:42:1a:
86:74:83:c3:c4:21:9d:8b:71:74:41:9b:6a:fa:65:4d:05:e0:
08:6d:7a:2b:dc:48:d8:5e:68:dd:b3:51:9d:94:a6:5d:68:6c:
11:50:ee:a5:37:96:d3:c7:bd:10:a9:b0:35:b2:cc:0b:0b:9b:
ab:4c:50:5d:8f:94:73:ac:d8:5e:2e:e3:bd:8f:aa:0a:cb:07:
3a:ed:56:cb:de:8a:d9:4e:72:87:e8:1e:c9:a5:4c:12:43:2b:
ed:a9:77:19:68:73:89:79:d6:1e:53:6b:79:7d:b0:9a:b0:37:
8a:2c:91:39
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZGOGdQuMVjSrgfYvv8kuZ/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwODI2MDk1MjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjA2NzQxZDFjN2E3M2M5NTEwMDY0ZDYzMGNmZjVlNDg4NDE4Yjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5nVprV2UGYAmxiRkz2EVP2Tb4Cm
oWB0J5ocPExjWTAwqRcG28klfE9tG2hScXvkMHCNVCYdtbNdRa9ZCy8LXXco2OTT
kuNYpkosp6zrNMB2v8pI5w2sVRdx9mR8q/meuwCEpmltGNbNym+CGBR1q+LcaEUN
x0DscjrYiwJvZP/lRMaxkzlRUVetqM6cTzUjnBWaedcbjMzIkcbfXh33MWex5XzP
SppiZUFGxGgTP1WTLGX3ceNEvQJQr89qwSL62dtbLlBxrK1ekYXED8Tr8m2w9zCl
mnI5/xUw0PuAS2LidArD3Al0yuTP10sv1uw7Lfbk3cnB/doR3Z5NAlx7wQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFCsGdB0cenPJUQBk1jDP9eSIQYt3MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvS3daMEhSeDZjOGxSQUdUV01NXzE1SWhCaTNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALQgVAwQA
LYOHAwQAuX5SAwQBudz6AwQBueEAAwQAueJoAwQBueOSAwQBwQhwAwQBwTqSMA0G
CSqGSIb3DQEBCwUAA4IBAQC9mLCrma5huGXnpFBhheszIiysRZQdRO/gjsqOpbUH
bKthQ24PL11/XJIDzJjdU1pjZ0xswiPFqHaKvny5PzxyntDFWYKD3to4eLkAvbGI
I6ju4zj3fkOkWnvHerYY/eVunu/CNGzY+SzI0Kc6+OK+l5g8AK4gL5Yjvf887nxG
LQLe5lpSh+7JnAzrLGSwQhqGdIPDxCGdi3F0QZtq+mVNBeAIbXor3EjYXmjds1Gd
lKZdaGwRUO6lN5bTx70QqbA1sswLC5urTFBdj5RzrNheLuO9j6oKywc67VbL3orZ
TnKH6B7JpUwSQyvtqXcZaHOJedYeU2t5fbCasDeKLJE5
-----END CERTIFICATE-----
Generated at Fri Aug 30 19:24:13 2024 by rpki-client on console-fra.rpki-client.org