Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RsmRu8G-3hU6SM2JXc1-Mq5qfEA.roa
File: RsmRu8G-3hU6SM2JXc1-Mq5qfEA.roa (raw, json)
Hash identifier: 9lICVTLC4DnONxIFDsyfNUmEeWldWh1yBUC4B5i2nTk=
Subject key identifier: 46:C9:91:BB:C1:BE:DE:15:3A:48:CD:89:5D:CD:7E:32:AE:6A:7C:40
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018746B93236C6E05510D49787A5C08743CE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RsmRu8G-3hU6SM2JXc1-Mq5qfEA.roa
Signing time: Mon 03 Apr 2023 10:45:54 +0000
ROA not before: Mon 03 Apr 2023 10:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.218.20.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Apr 2023 10:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:b9:32:36:c6:e0:55:10:d4:97:87:a5:c0:87:43:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 3 10:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46c991bbc1bede153a48cd895dcd7e32ae6a7c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:36:cf:fc:b0:a0:41:ce:2f:9b:ec:b7:85:
98:9f:d5:48:64:22:32:eb:96:99:8c:3d:d0:3c:5f:
af:2d:5f:bb:bc:86:7b:27:30:77:ab:4d:f3:9b:c5:
a1:79:ee:ed:5d:b0:29:de:30:8b:88:8d:df:8f:f7:
2e:f8:c5:ee:c0:8d:96:d3:90:3e:30:40:64:11:4f:
5f:40:78:f4:93:2c:ef:6e:cd:64:ad:79:b0:93:d6:
6d:61:b8:72:1d:2a:e7:21:ca:e2:c3:44:2e:43:d4:
81:18:86:3b:00:7f:5c:1e:5c:99:72:6d:4c:b9:42:
9c:7d:4b:f4:3f:c2:95:ed:b2:5c:80:e3:5d:5e:8f:
60:92:11:d9:7e:18:10:51:a4:56:7d:24:3e:99:83:
24:a6:82:53:04:fa:fb:84:cf:42:29:2e:b9:31:69:
f4:2f:64:00:49:ae:09:f8:3f:80:7a:47:87:56:29:
5b:7d:e8:a9:1c:28:b2:8a:c0:7b:9e:8c:cc:8b:6e:
61:c3:ab:75:d3:a2:6b:53:ca:d9:9c:8a:d4:ea:8a:
60:2d:69:b7:dd:d0:f6:56:7b:4b:61:8e:f7:60:0e:
51:7c:51:07:24:b9:e2:f1:d8:1c:aa:78:d7:e8:fd:
a1:4c:ac:0e:55:fc:85:3e:c5:ac:18:cb:3b:8b:6f:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C9:91:BB:C1:BE:DE:15:3A:48:CD:89:5D:CD:7E:32:AE:6A:7C:40
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RsmRu8G-3hU6SM2JXc1-Mq5qfEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.224.0/24
185.218.20.0/24
185.223.155.0/24
185.225.0.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:e3:bc:3e:94:b3:e4:7c:d7:cc:b1:82:79:4b:68:b4:97:37:
b1:9f:90:5b:de:b2:40:fa:1b:df:37:23:3f:c7:f4:0f:ca:b6:
48:db:0e:03:2f:1a:62:92:93:18:2e:d1:f9:11:82:10:53:53:
91:3b:89:9f:d1:c8:8d:e8:eb:70:a0:22:24:ab:14:ea:67:ca:
a4:09:01:d4:ab:6f:78:ec:52:96:1f:80:5d:7d:7a:4e:7d:b2:
ae:db:32:23:cb:ea:d5:8d:ea:15:65:34:17:a3:1c:cb:97:c0:
2b:92:b2:0d:f5:a4:43:a2:c5:03:90:57:93:ae:e5:82:13:b9:
4a:52:64:4b:03:c9:36:e7:1b:99:4c:44:5e:30:85:6f:4b:a7:
e9:8d:67:89:63:42:82:11:b9:0d:eb:1c:36:f7:ad:d3:36:fe:
6c:d7:05:e5:3e:85:c3:09:01:fe:b2:53:50:d6:73:22:46:5a:
a2:4d:ad:70:65:97:34:32:52:42:be:a0:03:59:62:ed:8e:c3:
8c:3e:1b:22:1a:ef:40:a0:45:35:84:19:92:54:88:bf:b9:ee:
38:09:93:97:c0:27:5e:d1:f7:9e:56:ec:d6:25:b1:05:a5:50:
90:9c:92:79:f6:2c:94:fa:c3:42:11:c3:9e:59:90:84:50:44:
b9:46:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org