Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SD5LDo4zD9vwf0BqM_vCGE2q_D8.roa
File: SD5LDo4zD9vwf0BqM_vCGE2q_D8.roa (raw, json)
Hash identifier: dOBQ2+C3t2ViDCBGO+QmfKOaSShIXZORiD4je69gU34=
Subject key identifier: 48:3E:4B:0E:8E:33:0F:DB:F0:7F:40:6A:33:FB:C2:18:4D:AA:FC:3F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0187B291A37065EF2DD610A2B19F8A8F1E31
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SD5LDo4zD9vwf0BqM_vCGE2q_D8.roa
Signing time: Mon 24 Apr 2023 09:21:41 +0000
ROA not before: Mon 24 Apr 2023 09:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.218.20.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 24 Apr 2023 10:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:91:a3:70:65:ef:2d:d6:10:a2:b1:9f:8a:8f:1e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 24 09:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=483e4b0e8e330fdbf07f406a33fbc2184daafc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:96:e4:8b:6c:9e:89:ac:2e:c5:1b:85:21:
b5:e8:ab:72:d2:f9:f9:66:46:76:fe:16:17:5d:27:
cc:36:0c:0e:63:0b:c8:56:be:30:cb:46:f8:16:05:
f4:aa:5d:eb:9c:76:a2:00:e1:fb:b2:31:09:9e:40:
b0:99:7f:47:36:db:6f:04:d8:b2:57:e2:b7:f6:33:
20:71:17:c3:cc:48:70:2e:b6:cb:0f:52:3f:a8:3f:
50:67:28:24:11:c9:a8:da:d3:fc:f9:f6:45:f5:9f:
32:6c:c1:df:02:bd:27:e3:de:78:0e:9e:fc:cf:a7:
cd:29:f2:4c:7e:b0:7f:b5:5a:3a:d1:71:f2:d3:98:
94:75:f8:d3:5c:40:84:23:21:57:7e:c4:c0:23:3e:
75:c3:4c:ae:d6:c4:d9:65:4f:cc:ee:24:fe:25:2b:
e5:80:1f:14:42:c0:56:fc:28:9f:c7:5d:7e:c4:d6:
02:53:b7:c3:ef:92:95:bd:ca:ad:e6:d0:3a:64:b6:
0e:d7:96:87:69:2d:49:a6:3c:bd:83:14:7d:2b:4f:
8d:98:7f:7a:4e:06:7d:57:f6:cc:fe:2e:1c:e7:c0:
15:ce:0d:4b:2b:5b:b0:32:e9:d0:87:66:b7:ad:6f:
c6:92:27:50:84:57:fc:b5:c2:aa:e7:37:65:77:0c:
c9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3E:4B:0E:8E:33:0F:DB:F0:7F:40:6A:33:FB:C2:18:4D:AA:FC:3F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SD5LDo4zD9vwf0BqM_vCGE2q_D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.218.20.0/24
185.225.0.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:1b:45:2b:63:5d:cb:d2:49:33:69:8f:70:ef:24:3d:69:5c:
09:7e:5e:ab:bf:c6:f6:d5:84:fc:96:35:f9:29:d8:8c:1e:a0:
a9:6a:dd:92:0e:6f:f5:e7:19:73:e8:c8:4d:46:96:be:ce:d5:
1c:72:77:3d:29:73:5b:62:2b:b9:2b:fc:11:3e:69:a4:db:a9:
64:a0:67:ee:d8:00:7a:b4:fb:3c:ca:08:12:8f:27:b3:67:00:
fa:31:a2:94:91:ec:86:85:a2:06:a1:9f:1c:d1:95:05:11:ac:
16:51:c0:96:f2:3f:4a:39:f7:95:ef:a5:af:7c:15:10:19:52:
87:62:79:4e:95:3d:82:86:58:17:98:41:c4:80:31:46:ce:93:
a6:b4:65:69:9a:62:34:8b:5c:f7:72:5d:50:e9:07:fd:67:a0:
e3:6a:52:85:bf:9d:1b:34:35:99:d3:6c:76:62:5c:5f:fe:28:
66:35:31:be:01:7e:9c:30:5c:97:42:6b:8a:ba:44:a5:1b:19:
20:c9:ca:07:40:68:d7:f8:74:c4:89:6e:7a:2d:16:19:26:09:
c5:9d:64:4f:79:8a:48:76:c9:a6:49:e9:b1:e5:d3:3d:cd:0b:
a7:9f:05:a1:92:70:54:ca:d7:9e:44:8d:15:3e:7a:c5:08:be:
e9:85:35:61
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYeykaNwZe8t1hCisZ+Kjx4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNDI0MDkyMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODNlNGIwZThlMzMwZmRiZjA3ZjQwNmEzM2ZiYzIxODRkYWFmYzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng+W5ItsnomsLsUbhSG16Kty0vn5
ZkZ2/hYXXSfMNgwOYwvIVr4wy0b4FgX0ql3rnHaiAOH7sjEJnkCwmX9HNttvBNiy
V+K39jMgcRfDzEhwLrbLD1I/qD9QZygkEcmo2tP8+fZF9Z8ybMHfAr0n4954Dp78
z6fNKfJMfrB/tVo60XHy05iUdfjTXECEIyFXfsTAIz51w0yu1sTZZU/M7iT+JSvl
gB8UQsBW/Cifx11+xNYCU7fD75KVvcqt5tA6ZLYO15aHaS1Jpjy9gxR9K0+NmH96
TgZ9V/bM/i4c58AVzg1LK1uwMunQh2a3rW/GkidQhFf8tcKq5zdldwzJ5wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEg+Sw6OMw/b8H9AajP7whhNqvw/MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvU0Q1TERvNHpEOXZ3ZjBCcU1fdkNHRTJxX0Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQgVAwQA
LZPgAwQAudoUAwQBueEAMA0GCSqGSIb3DQEBCwUAA4IBAQCLG0UrY13L0kkzaY9w
7yQ9aVwJfl6rv8b21YT8ljX5KdiMHqCpat2SDm/15xlz6MhNRpa+ztUccnc9KXNb
Yiu5K/wRPmmk26lkoGfu2AB6tPs8yggSjyezZwD6MaKUkeyGhaIGoZ8c0ZUFEawW
UcCW8j9KOfeV76WvfBUQGVKHYnlOlT2ChlgXmEHEgDFGzpOmtGVpmmI0i1z3cl1Q
6Qf9Z6DjalKFv50bNDWZ02x2Ylxf/ihmNTG+AX6cMFyXQmuKukSlGxkgycoHQGjX
+HTEiW56LRYZJgnFnWRPeYpIdsmmSemx5dM9zQunnwWhknBUyteeRI0VPnrFCL7p
hTVh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org