Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QVgAmTjElFbJEvAsVhQctrrZTME.roa
File: QVgAmTjElFbJEvAsVhQctrrZTME.roa (raw, json)
Hash identifier: jpL00hLaWlsXPN4kLgKZtYIgKGnBifzFLGxNnZDrimw=
Subject key identifier: 41:58:00:99:38:C4:94:56:C9:12:F0:2C:56:14:1C:B6:BA:D9:4C:C1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189F488BB0647F99FDB6D915C791A4697EE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QVgAmTjElFbJEvAsVhQctrrZTME.roa
Signing time: Mon 14 Aug 2023 14:52:28 +0000
ROA not before: Mon 14 Aug 2023 14:52:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.225.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.230.52.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.230.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.194.177.0/24 maxlen: 24
185.223.81.0/24 maxlen: 24
185.223.83.0/24 maxlen: 24
185.222.31.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
185.220.251.0/24 maxlen: 24
185.220.250.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.226.106.0/24 maxlen: 24
185.218.23.0/24 maxlen: 24
185.221.20.0/24 maxlen: 24
185.221.21.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Aug 2023 09:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:88:bb:06:47:f9:9f:db:6d:91:5c:79:1a:46:97:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 14 14:52:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4158009938c49456c912f02c56141cb6bad94cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:b9:e3:63:44:af:a8:a8:e7:ca:a5:56:d5:
0f:04:75:c9:9e:8f:e2:b9:81:fc:da:98:29:bf:a4:
1c:fb:2a:15:b1:76:1c:ce:7b:29:c8:e2:7d:af:4e:
cb:fc:e2:0f:a9:0f:70:54:ed:d4:fc:3f:81:1b:a8:
fc:5f:3b:6c:b1:20:19:20:a6:f1:ac:05:4f:75:d5:
d7:02:76:99:ab:69:c4:69:d1:9a:0a:08:38:4a:17:
5b:29:c8:40:09:9a:a8:2a:a8:33:ea:e7:1a:ab:83:
e2:97:6e:c5:5c:52:0d:9c:3b:fe:bf:18:71:4f:d9:
cb:70:73:30:32:f4:ce:76:bf:93:52:dc:55:20:1c:
55:3f:7a:f1:36:99:4a:d1:69:2b:71:de:97:02:02:
8f:84:4c:fd:b5:a4:2e:75:ee:81:27:9e:14:0c:1b:
5a:80:d2:ce:0b:0c:d5:66:97:3f:76:57:04:ec:70:
2f:d9:e0:f5:f4:ed:b6:d8:cf:8f:fa:07:38:47:41:
71:71:d0:c7:00:97:6e:7d:7e:46:f9:5e:ec:41:65:
2a:ee:fa:00:55:e4:9c:eb:c8:e1:41:11:4c:96:cc:
9a:f3:7c:aa:d2:06:ec:8b:06:77:83:92:30:ba:41:
22:e2:2c:1d:70:b2:07:b7:1f:7a:90:9b:80:6c:c7:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:58:00:99:38:C4:94:56:C9:12:F0:2C:56:14:1C:B6:BA:D9:4C:C1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QVgAmTjElFbJEvAsVhQctrrZTME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.194.177.0/24
185.209.75.0/24
185.210.232.0/24
185.210.235.0/24
185.218.23.0/24
185.218.101.0/24
185.220.250.0/23
185.221.20.0/23
185.222.30.0/23
185.223.81.0/24
185.223.83.0/24
185.225.0.0/23
185.225.20.0/24
185.225.22.0/24
185.226.106.0/24
185.227.144.0/23
185.228.75.0/24
185.230.52.0/24
185.246.115.0/24
185.251.229.0-185.251.231.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b8:ba:25:3e:97:00:6f:9d:10:59:4e:51:e5:bd:55:35:1e:
34:52:ea:58:04:ab:f4:d1:35:2a:ff:75:05:87:03:05:9e:9e:
63:fa:f6:ba:fd:91:43:bc:c7:2d:27:70:39:51:dd:39:32:83:
ae:b2:64:a2:2d:df:3c:93:e1:ec:2a:9d:94:d6:e3:09:d9:94:
84:a3:09:fa:2c:a3:40:ac:8a:bd:f3:84:3b:24:f5:4a:17:37:
8d:05:fe:29:f1:e4:ce:ee:96:8f:f3:da:a9:d2:5e:20:24:eb:
76:ff:0a:d1:04:c7:13:3e:c5:1c:fe:ac:76:f2:9d:e8:68:d3:
f5:80:04:6d:df:25:90:9a:1e:c9:b9:37:84:62:a8:25:17:88:
98:48:ee:19:63:f6:e6:fc:28:12:57:6b:57:0b:bb:cc:ef:63:
c6:37:fd:63:6d:ef:75:a5:b4:87:bd:4d:e1:f6:a3:59:20:29:
a6:88:04:f9:b0:c2:df:b6:b4:2f:a3:a2:3d:09:82:3d:e3:ec:
a4:24:18:52:f2:44:af:c2:96:52:cf:e6:9f:e5:f2:15:dc:63:
8e:96:d7:db:45:80:06:48:a0:b3:b3:a7:7e:11:9d:db:b0:e5:
4a:2f:cc:d7:e7:71:a7:da:3c:3f:f6:48:67:83:18:e0:1b:0a:
42:01:e9:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org