Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LZjZREiT_ilB1-HSDZNgC6L7jgc.roa
File: LZjZREiT_ilB1-HSDZNgC6L7jgc.roa (raw, json)
Hash identifier: nVQNQUSJ9XNRooK5Q2tLVA9e/4Ac43eWwGfTBhalqyA=
Subject key identifier: 2D:98:D9:44:48:93:FE:29:41:D7:E1:D2:0D:93:60:0B:A2:FB:8E:07
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018BA55ECFCC23382C13F0B9F0173F297A82
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LZjZREiT_ilB1-HSDZNgC6L7jgc.roa
Signing time: Mon 06 Nov 2023 16:02:15 +0000
ROA not before: Mon 06 Nov 2023 16:02:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.227.146.0/23 maxlen: 24
185.209.38.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.220.248.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.222.30.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
45.8.21.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 09:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a5:5e:cf:cc:23:38:2c:13:f0:b9:f0:17:3f:29:7a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 6 16:02:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d98d9444893fe2941d7e1d20d93600ba2fb8e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:79:4b:4d:40:cb:35:39:75:8f:0c:53:7a:fe:
e4:5a:bf:0a:ab:22:41:34:14:21:20:3a:48:37:b2:
8a:7f:6e:cc:27:76:8a:6d:80:07:c4:c1:7c:37:e8:
5e:bb:c7:c8:fa:50:28:21:c2:d8:cf:00:2b:87:f2:
2e:e6:96:57:a7:2e:03:9e:e9:56:cb:32:6b:be:28:
b4:14:30:e7:d8:0e:d3:c9:03:04:7d:6f:a8:91:08:
1d:b0:be:26:a3:e2:a4:91:9a:ac:d3:cf:77:29:34:
05:13:d4:91:d6:41:c9:44:b3:8b:62:cd:a5:ab:9d:
e3:68:ac:57:64:92:67:75:57:0f:2c:ad:84:f3:6e:
3b:4e:c1:b2:64:4a:4f:09:a7:73:e3:d0:43:60:df:
a7:c1:71:df:ae:e4:37:df:9a:b5:8d:33:51:c6:0b:
72:68:a5:f9:ee:5f:dd:62:b4:a7:ea:5c:c7:25:75:
3c:e1:bd:38:98:af:d6:33:5a:2b:33:23:be:bd:bb:
16:de:19:69:27:55:5e:01:0f:7d:3b:2b:3c:f9:62:
1a:0c:98:53:11:1d:f0:99:35:29:e4:a1:57:1c:87:
a3:18:3d:4d:49:a8:7a:af:db:95:a8:67:41:2b:49:
3d:3e:a3:3c:c5:de:21:e0:d5:80:72:f3:47:3a:d6:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:98:D9:44:48:93:FE:29:41:D7:E1:D2:0D:93:60:0B:A2:FB:8E:07
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LZjZREiT_ilB1-HSDZNgC6L7jgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.209.38.0/24
185.218.102.0/24
185.220.248.0/24
185.220.250.0/23
185.221.20.0/24
185.222.30.0/23
185.223.80.0/24
185.225.0.0/23
185.227.146.0/23
185.228.75.0/24
185.251.229.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:8b:00:b1:78:a7:98:29:83:ca:af:80:5d:f1:ac:5a:cc:0a:
ee:36:2f:ec:af:76:14:40:4a:41:13:88:c3:7c:2b:49:bd:12:
25:c4:6a:6f:a0:2a:02:d0:c2:1c:7e:4f:bf:86:55:0f:9f:4e:
6e:bd:1a:b9:65:8d:2b:b8:6f:13:1e:3b:f1:34:25:21:cc:2d:
23:9b:40:f3:52:51:e3:d9:5f:f0:7b:9b:69:9f:87:a9:69:f4:
8d:a7:bf:9e:69:ea:3c:a2:a4:dc:d7:96:b2:3a:7c:a0:77:d5:
66:0e:f4:45:99:87:b8:56:8c:f8:05:44:7a:6a:26:e1:2b:ec:
76:3f:d2:ba:d5:e5:27:68:68:9f:3f:40:f0:d7:a4:72:6a:a0:
09:61:27:5b:c2:bf:c4:9a:ed:da:d1:3f:42:15:67:6b:59:40:
2c:4c:a5:2a:a3:0b:14:5a:cb:7f:93:b5:4d:c9:fa:6f:bd:b3:
7f:25:24:19:58:e9:74:f6:5f:71:71:d6:8e:56:51:b2:42:ea:
df:87:a4:f7:52:8b:69:7c:6e:c6:c2:33:b9:cb:91:63:09:a3:
f0:cf:37:5b:65:be:64:51:12:72:bc:e1:a3:52:26:9b:40:4f:
5b:77:62:fe:23:af:25:5a:ad:2f:b5:ea:6e:74:8e:fb:99:8c:
bd:06:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org