Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ML8e7hXKeqORUia9My8f3gEGRwU.roa
File: ML8e7hXKeqORUia9My8f3gEGRwU.roa (raw, json)
Hash identifier: qEt+v3UwvSUFmNLBH4/Vu92oq2q0kbAp99CKJqn5MWk=
Subject key identifier: 30:BF:1E:EE:15:CA:7A:A3:91:52:26:BD:33:2F:1F:DE:01:06:47:05
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01937219718E57218AF4AC5D9BBDB384953E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ML8e7hXKeqORUia9My8f3gEGRwU.roa
Signing time: Thu 28 Nov 2024 09:28:10 +0000
ROA not before: Thu 28 Nov 2024 09:28:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.90.19.0/24 maxlen: 24
185.36.204.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.218.22.0/24 maxlen: 24
185.227.146.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.115.0/24 maxlen: 24
193.8.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 11:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:19:71:8e:57:21:8a:f4:ac:5d:9b:bd:b3:84:95:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 28 09:28:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30bf1eee15ca7aa3915226bd332f1fde01064705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:19:8b:d2:b9:7f:08:3c:96:b7:8b:a9:ad:
9e:68:02:13:ef:54:2a:df:16:f4:73:03:d7:7e:80:
6b:e8:6a:3e:53:76:66:c9:2b:f2:3f:d8:c9:c1:17:
ed:bb:b8:8a:7c:3d:52:38:7d:b6:c3:01:27:e9:43:
79:58:42:0a:e1:88:88:77:02:41:e5:ad:1b:e0:d0:
97:7e:f3:55:60:20:18:91:de:00:7c:3c:f1:13:9e:
19:d7:54:2f:e7:8e:35:69:f1:9b:9a:67:4c:cc:4f:
42:6d:e8:17:0a:c2:02:0c:d9:4e:10:ba:9a:e7:a4:
e5:39:3d:ae:f2:ac:68:54:6c:2b:39:5b:5c:6a:c4:
a0:87:bf:44:38:03:eb:5c:79:08:de:fa:b7:16:00:
8a:86:60:17:05:96:4f:aa:76:f5:46:7d:82:93:29:
ab:d4:39:25:1b:43:72:34:8a:5e:4a:fb:0d:f3:df:
30:68:b5:83:c7:84:b7:c6:fc:b9:5a:01:c6:8e:b7:
9e:64:55:c2:26:8f:c4:bc:82:36:22:82:75:11:d8:
52:6f:ed:38:23:32:17:6d:dc:25:ff:b2:bd:5e:56:
f7:06:1e:1b:82:16:02:7e:4c:1b:b7:42:6e:c1:ac:
f4:13:df:7d:db:f0:b8:58:7c:25:f4:43:0a:cc:db:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BF:1E:EE:15:CA:7A:A3:91:52:26:BD:33:2F:1F:DE:01:06:47:05
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ML8e7hXKeqORUia9My8f3gEGRwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
185.36.204.0/24
185.206.248.0/24
185.218.22.0/24
185.227.146.0/24
185.240.120.0/23
185.246.115.0/24
193.8.112.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e9:09:03:19:b8:88:a5:71:b4:d6:84:87:84:cd:0c:5c:6c:
86:30:37:34:0a:9e:b6:c2:c5:05:56:97:aa:74:5f:86:2d:d4:
40:7e:81:53:11:29:3f:a4:e4:2f:d8:3b:1a:51:8f:5f:db:03:
40:b2:fd:81:13:45:21:ee:03:1f:00:b4:b8:49:a1:04:31:bf:
f5:15:1c:3d:dc:b8:fa:d6:15:eb:2a:e8:c1:22:ea:57:41:82:
b6:a2:25:9d:3a:68:23:b8:00:2b:8b:a4:0c:ea:6e:43:77:e5:
a6:e7:41:07:ed:98:3b:6c:16:1e:75:69:cb:12:ee:be:55:07:
06:e2:70:ff:5d:2b:f4:e2:7a:2a:98:72:35:d5:fe:69:f7:ad:
46:87:8b:85:73:eb:e6:aa:a4:fd:4c:3c:47:c8:56:21:a0:28:
13:8a:1f:ac:11:32:c7:a0:8b:49:9c:02:88:72:7d:0f:4e:34:
6a:30:cc:c2:74:a1:e8:52:9f:0a:24:c0:94:30:1d:a3:c0:a1:
0d:2d:e6:08:36:68:ce:f4:96:3f:72:49:7d:7e:ed:8f:f0:77:
04:a9:48:13:71:e0:a3:46:fa:ac:bc:8e:8d:60:f2:7b:fe:e8:
f6:48:38:9a:2b:84:53:18:7f:a2:c5:fc:47:eb:33:71:e4:56:
1b:16:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:35:31 2025 by rpki-client