Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/O2JPOXY8-i28BykChIf-9e4Z9fM.roa
File: O2JPOXY8-i28BykChIf-9e4Z9fM.roa (raw, json)
Hash identifier: paT6W3+XF6coBQMJjCv7yd74O9nsfkHJ8yFiwB5yDZs=
Subject key identifier: 3B:62:4F:39:76:3C:FA:2D:BC:07:29:02:84:87:FE:F5:EE:19:F5:F3
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0190E00D300D107085CF80F9257E42F31101
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/O2JPOXY8-i28BykChIf-9e4Z9fM.roa
Signing time: Tue 23 Jul 2024 14:44:38 +0000
ROA not before: Tue 23 Jul 2024 14:44:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.251.230.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 15:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e0:0d:30:0d:10:70:85:cf:80:f9:25:7e:42:f3:11:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 23 14:44:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b624f39763cfa2dbc0729028487fef5ee19f5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:15:7b:da:34:30:90:a2:a3:4f:77:e9:32:
d4:f5:1c:ac:5d:9a:da:6d:76:dc:4c:00:a4:6e:23:
a5:83:dd:ef:fb:ca:9a:46:0a:2b:5b:72:0f:ba:01:
31:e1:b2:75:06:0b:c5:30:d3:b3:16:4a:5f:20:a2:
d8:4e:e8:3d:e5:e2:46:6c:31:af:86:e0:67:7b:56:
d8:95:e4:8f:f9:be:47:f5:a8:1f:64:48:98:6a:89:
de:4a:db:82:1c:6c:f3:dc:48:a3:a1:23:d6:5c:66:
df:47:da:b7:83:5a:78:e6:7b:f1:62:c0:f5:34:16:
8c:a9:37:84:f4:a3:f0:ea:b4:2a:9a:c3:71:f0:6f:
2a:e2:ee:9d:30:23:f7:5e:21:1b:b4:dd:6b:d1:dd:
9e:83:60:24:b3:47:53:d4:21:4d:85:66:50:63:c3:
04:26:7d:70:6d:dd:dc:ce:06:c4:13:4c:20:1b:0b:
6a:16:9e:e8:d6:a6:05:4b:ac:bd:8d:db:e2:87:41:
c7:27:57:be:60:19:70:03:81:b8:e6:44:d9:07:b1:
31:09:3d:4c:a7:a0:e6:e6:20:10:b4:58:7e:99:16:
c4:31:cd:4a:3b:e9:56:c7:0b:8d:75:03:b9:f7:3b:
a2:73:4a:2f:4f:1a:94:41:08:75:f4:85:f6:bb:88:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:62:4F:39:76:3C:FA:2D:BC:07:29:02:84:87:FE:F5:EE:19:F5:F3
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/O2JPOXY8-i28BykChIf-9e4Z9fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.220.250.0/23
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
185.251.230.0/24
193.8.112.0-193.8.114.255
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
72:be:c7:f9:33:ba:6c:5b:f5:65:2b:94:b3:9d:98:55:bf:f7:
33:40:61:86:09:84:89:f7:56:5e:04:7d:58:87:1f:60:9d:76:
c1:42:5d:15:eb:87:cc:a4:14:0b:76:19:2b:93:63:a0:39:44:
5f:b3:e6:70:e1:07:a3:9f:8a:9a:a5:57:5c:5e:bf:64:c5:cb:
06:d9:e6:1e:77:72:63:cb:f9:65:9b:d1:18:c6:33:96:99:6e:
65:c6:72:6c:f7:01:16:cb:22:3a:c6:36:07:01:50:13:86:df:
1c:65:41:79:25:5d:4f:b0:b1:d5:01:b8:22:c0:e6:af:2b:98:
39:97:8f:52:a1:e8:f5:2e:b0:9e:56:3d:d9:0a:bc:a7:cb:a6:
05:69:cd:e3:3c:f6:fb:d7:98:b1:1f:81:02:f8:91:58:47:b6:
5b:b5:6f:4e:12:65:48:d1:2f:22:f5:83:b6:c1:e5:a2:b4:e0:
48:1e:05:60:cc:a2:61:22:f8:df:24:6e:97:08:af:10:18:93:
6a:ac:61:d5:6d:e5:ad:88:8e:70:89:3e:6a:11:1a:12:3b:22:
a9:fe:a4:15:50:75:b1:1c:d3:b6:32:82:0e:78:12:7e:52:5f:
9b:35:d4:16:2c:ec:ad:ad:5e:e5:89:c6:df:1d:85:c7:ee:4a:
2a:fc:6b:17
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZDgDTANEHCFz4D5JX5C8xEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwNzIzMTQ0NDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjYyNGYzOTc2M2NmYTJkYmMwNzI5MDI4NDg3ZmVmNWVlMTlmNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArocVe9o0MJCio0936TLU9RysXZra
bXbcTACkbiOlg93v+8qaRgorW3IPugEx4bJ1BgvFMNOzFkpfIKLYTug95eJGbDGv
huBne1bYleSP+b5H9agfZEiYaoneStuCHGzz3EijoSPWXGbfR9q3g1p45nvxYsD1
NBaMqTeE9KPw6rQqmsNx8G8q4u6dMCP3XiEbtN1r0d2eg2Aks0dT1CFNhWZQY8ME
Jn1wbd3czgbEE0wgGwtqFp7o1qYFS6y9jdvih0HHJ1e+YBlwA4G45kTZB7ExCT1M
p6Dm5iAQtFh+mRbEMc1KO+lWxwuNdQO59zuic0ovTxqUQQh19IX2u4iJ6QIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFDtiTzl2PPotvAcpAoSH/vXuGfXzMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvTzJKUE9YWTgtaTI4QnlrQ2hJZi05ZTRaOWZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQALQgVAwQA
uX5SAwQBudz6AwQBueEAAwQAueJoAwQBueOSAwQAufvmMAwDBATBCHADBADBCHID
BAHBOpIwDQYJKoZIhvcNAQELBQADggEBAHK+x/kzumxb9WUrlLOdmFW/9zNAYYYJ
hIn3Vl4EfViHH2CddsFCXRXrh8ykFAt2GSuTY6A5RF+z5nDhB6OfipqlV1xev2TF
ywbZ5h53cmPL+WWb0RjGM5aZbmXGcmz3ARbLIjrGNgcBUBOG3xxlQXklXU+wsdUB
uCLA5q8rmDmXj1Kh6PUusJ5WPdkKvKfLpgVpzeM89vvXmLEfgQL4kVhHtlu1b04S
ZUjRLyL1g7bB5aK04EgeBWDMomEi+N8kbpcIrxAYk2qsYdVt5a2IjnCJPmoRGhI7
Iqn+pBVQdbEc07Yygg54En5SX5s11BYs7K2tXuWJxt8dhcfuSir8axc=
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:27 2025 by rpki-client