Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LSvhwUS8pBaZBOme1_qOr6a-_BM.roa
File: LSvhwUS8pBaZBOme1_qOr6a-_BM.roa (raw, json)
Hash identifier: PyFFN7nzNXezwE5Az+D9Xlu/HkP4dQppDJ52I+lHtGo=
Subject key identifier: 2D:2B:E1:C1:44:BC:A4:16:99:04:E9:9E:D7:FA:8E:AF:A6:BE:FC:13
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018774748F8C7AB791F2F4F612B05535D1C0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LSvhwUS8pBaZBOme1_qOr6a-_BM.roa
Signing time: Wed 12 Apr 2023 07:53:28 +0000
ROA not before: Wed 12 Apr 2023 07:53:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.206.250.0/24 maxlen: 24
45.90.16.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.126.83.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
176.125.249.0/24 maxlen: 24
176.125.248.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
45.131.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 11:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:74:8f:8c:7a:b7:91:f2:f4:f6:12:b0:55:35:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 12 07:53:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d2be1c144bca4169904e99ed7fa8eafa6befc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:8c:6b:66:05:b8:08:1a:c8:d8:36:d3:d6:
42:27:4b:8c:32:51:69:0a:de:8d:f5:e4:98:52:f9:
27:b2:3d:96:f2:f9:04:a1:83:f0:bb:38:51:38:db:
4a:15:d1:d4:da:1b:bf:ee:a3:23:f2:a7:4b:38:61:
4e:99:7f:33:67:00:a5:c4:c4:21:11:eb:fe:00:4c:
4e:44:bb:f5:28:10:f1:0c:14:e5:39:99:f4:ca:1b:
cc:9f:52:b4:c5:0b:fe:37:e1:c4:36:72:d1:02:68:
87:03:8b:59:0f:d7:21:fc:26:e5:17:5f:43:15:63:
1f:53:49:8a:1d:38:0e:3f:93:d6:e9:37:02:70:64:
db:d7:e1:a7:9a:49:b1:03:be:56:05:be:f4:59:40:
4a:63:f6:00:48:25:9a:11:98:88:ca:90:fe:c3:3f:
e7:68:80:9a:fb:e3:da:02:3a:ef:eb:4f:0e:aa:0a:
1c:31:aa:36:b3:a6:cf:7d:72:da:0c:61:c7:c9:84:
30:68:0c:2b:7f:18:d7:7b:47:59:2c:7b:46:01:27:
8f:e7:d5:a7:65:30:43:4a:69:45:79:be:ec:3e:40:
3c:04:f3:6b:70:11:a0:d2:ce:54:ce:2a:9f:f0:d4:
aa:23:a0:63:9c:54:ba:80:c1:41:c6:19:1d:c8:23:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2B:E1:C1:44:BC:A4:16:99:04:E9:9E:D7:FA:8E:AF:A6:BE:FC:13
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LSvhwUS8pBaZBOme1_qOr6a-_BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
45.131.134.0/24
45.147.224.0/24
176.125.248.0/23
185.126.83.0/24
185.199.158.0/24
185.206.250.0/24
185.218.20.0/24
185.225.0.0/23
193.58.144.0/24
193.58.146.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a7:33:09:29:21:95:11:6e:c5:9a:11:d6:9a:0c:9c:cd:ca:
35:c2:a0:0b:3b:5e:ad:aa:9b:96:88:3a:c0:54:60:6c:04:2b:
ae:a6:d2:46:08:1e:20:7e:75:d5:12:db:7b:d3:88:67:86:5c:
25:ce:f4:d9:56:f9:c2:47:b1:be:e5:3a:69:64:f7:a1:6f:35:
e7:96:a1:77:00:74:61:d2:97:f8:57:a5:7b:15:53:61:f2:80:
ad:67:8a:a4:8c:5a:3e:16:ce:ee:82:f6:f8:de:23:b8:82:9c:
33:07:48:d7:d7:f2:6f:e3:48:36:88:a1:f2:03:5c:ac:93:e5:
10:4b:6c:43:49:aa:27:16:02:2b:4a:bb:f0:ab:78:0c:1a:ca:
87:2c:81:31:93:b2:59:69:1c:3f:1f:0c:1a:12:eb:c7:93:49:
d0:8c:6e:1c:ec:9f:8f:fb:76:90:8c:a2:40:b9:e7:d6:a8:85:
ec:0b:6e:d1:24:fa:3e:8c:fb:02:4c:92:42:a0:6e:58:1e:5b:
76:e0:d1:2d:38:10:a3:ac:62:fa:17:ce:75:72:31:a6:cd:ec:
80:e6:eb:7f:a8:65:62:ce:06:67:51:21:a5:a2:4f:82:e5:75:
80:b6:73:08:39:2e:9c:1c:34:70:b0:64:6a:44:75:c9:56:e2:
9b:b2:33:86
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYd0dI+MereR8vT2ErBVNdHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNDEyMDc1MzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDJiZTFjMTQ0YmNhNDE2OTkwNGU5OWVkN2ZhOGVhZmE2YmVmYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGuMa2YFuAgayNg209ZCJ0uMMlFp
Ct6N9eSYUvknsj2W8vkEoYPwuzhRONtKFdHU2hu/7qMj8qdLOGFOmX8zZwClxMQh
Eev+AExORLv1KBDxDBTlOZn0yhvMn1K0xQv+N+HENnLRAmiHA4tZD9ch/CblF19D
FWMfU0mKHTgOP5PW6TcCcGTb1+GnmkmxA75WBb70WUBKY/YASCWaEZiIypD+wz/n
aICa++PaAjrv608OqgocMao2s6bPfXLaDGHHyYQwaAwrfxjXe0dZLHtGASeP59Wn
ZTBDSmlFeb7sPkA8BPNrcBGg0s5Uziqf8NSqI6BjnFS6gMFBxhkdyCN/nwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFC0r4cFEvKQWmQTpntf6jq+mvvwTMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvTFN2aHdVUzhwQmFaQk9tZTFfcU9yNmEtX0JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQALVoQAwQA
LYOGAwQALZPgAwQBsH34AwQAuX5TAwQAuceeAwQAuc76AwQAudoUAwQBueEAAwQA
wTqQAwQAwTqSMA0GCSqGSIb3DQEBCwUAA4IBAQAFpzMJKSGVEW7FmhHWmgyczco1
wqALO16tqpuWiDrAVGBsBCuuptJGCB4gfnXVEtt704hnhlwlzvTZVvnCR7G+5Tpp
ZPehbzXnlqF3AHRh0pf4V6V7FVNh8oCtZ4qkjFo+Fs7ugvb43iO4gpwzB0jX1/Jv
40g2iKHyA1ysk+UQS2xDSaonFgIrSrvwq3gMGsqHLIExk7JZaRw/HwwaEuvHk0nQ
jG4c7J+P+3aQjKJAuefWqIXsC27RJPo+jPsCTJJCoG5YHlt24NEtOBCjrGL6F851
cjGmzeyA5ut/qGVizgZnUSGlok+C5XWAtnMIOS6cHDRwsGRqRHXJVuKbsjOG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org