Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N8AYaWc8oih6oWFQeFoe4eduWG8.roa
File: N8AYaWc8oih6oWFQeFoe4eduWG8.roa (raw, json)
Hash identifier: 1UC15k31yQIPcQSnaiNvs5aZHkDLEz1npe6ELfXLklY=
Subject key identifier: 37:C0:18:69:67:3C:A2:28:7A:A1:61:50:78:5A:1E:E1:E7:6E:58:6F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C31C3C1261F520A5D44014B2973B053BE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N8AYaWc8oih6oWFQeFoe4eduWG8.roa
Signing time: Sun 03 Dec 2023 22:19:21 +0000
ROA not before: Sun 03 Dec 2023 22:19:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.206.248.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
45.90.19.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.115.0/24 maxlen: 24
185.36.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:31:c3:c1:26:1f:52:0a:5d:44:01:4b:29:73:b0:53:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 3 22:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37c01869673ca2287aa16150785a1ee1e76e586f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:25:69:02:75:f4:db:ba:75:72:3d:32:3c:d5:
32:5e:e7:04:df:4f:b7:f7:8d:b1:a5:5d:53:c1:7f:
4f:f3:7f:de:fb:90:b3:2c:58:10:c1:bc:90:94:80:
a0:96:8f:58:85:c6:65:4a:5a:73:f2:9a:fe:6b:68:
3d:2d:fb:db:f8:6d:00:f0:cf:47:2a:53:8c:08:af:
1f:e6:c5:57:8c:60:2a:88:4d:b9:12:a0:c3:03:ae:
ef:56:ec:b1:7a:5d:65:dd:ab:b4:4a:bb:f8:76:91:
21:0b:fa:84:99:9d:81:97:66:3b:e7:bb:c9:eb:e4:
32:ee:01:6c:ca:36:ae:d9:fd:3b:dc:42:21:ee:cb:
d9:b4:e5:5d:50:c6:b6:45:8b:7a:c1:07:70:64:7a:
47:b0:f0:d6:c0:73:3d:2e:02:28:1f:91:3e:3f:10:
c3:37:e9:be:19:78:6d:55:26:a6:ed:d8:53:40:7d:
7c:a7:cf:29:79:91:4c:67:68:0e:0f:27:4f:8a:38:
d4:a7:4a:0c:54:bb:e8:fd:39:23:6f:af:c7:75:ef:
e2:53:22:32:be:a4:91:94:5e:89:42:f6:9b:9a:da:
28:62:95:c4:f6:2d:fd:50:93:f3:07:76:49:9a:30:
f2:e6:7c:e9:79:dd:10:d0:58:af:30:e8:bd:59:b1:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C0:18:69:67:3C:A2:28:7A:A1:61:50:78:5A:1E:E1:E7:6E:58:6F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N8AYaWc8oih6oWFQeFoe4eduWG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
185.36.204.0/24
185.206.248.0/23
185.240.120.0/23
185.246.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f8:a5:7c:b7:dc:de:c3:ad:3b:76:27:6c:ef:f5:ed:37:10:
db:89:cd:a7:5e:bc:6b:9c:d0:6c:a2:ef:41:1f:37:73:5b:73:
ce:68:1d:09:01:db:5a:91:7d:63:a8:af:84:b1:bd:e1:d7:c1:
a6:6b:5a:0d:bf:52:ac:d5:4c:77:fd:f9:35:31:9a:26:2a:00:
b8:83:09:8a:32:5f:f0:3c:50:a6:23:1a:2a:1b:91:e6:6a:76:
de:fc:dd:21:b1:fa:13:b5:7c:4f:e2:94:ab:c9:96:05:0c:f8:
2e:92:1a:5b:25:0a:42:66:36:20:e0:56:53:8e:93:15:56:7f:
67:29:d0:bc:7f:b5:e7:b1:78:4e:c4:c9:b5:41:3a:05:37:af:
67:c7:1a:6e:f7:92:2c:e3:f0:44:23:7c:93:1f:93:24:c6:49:
5f:d3:47:c5:ac:1b:36:4f:fd:75:26:58:7f:8c:6a:76:1f:14:
c5:1b:1e:c5:6a:4b:21:41:5b:da:8e:0e:c2:ca:26:de:c3:51:
48:15:94:de:65:e9:43:40:c2:31:fb:b3:b5:6f:ef:18:38:c5:
a1:0a:85:fe:87:41:d3:a4:2f:89:95:d3:ed:f7:8f:2e:af:ad:
ad:30:bb:21:16:67:2d:cf:00:18:45:8c:13:41:a1:cf:75:1f:
99:b2:7d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org