Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SbIWuWxs4GPdjaFXXifvlkZ6GXs.roa
File: SbIWuWxs4GPdjaFXXifvlkZ6GXs.roa (raw, json)
Hash identifier: zI1Xy0gNzmJmm/v701DjQbJzDAxeRr6NoX036cC62Rk=
Subject key identifier: 49:B2:16:B9:6C:6C:E0:63:DD:8D:A1:57:5E:27:EF:96:46:7A:19:7B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B638D27E163483C8B4453511957EB6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SbIWuWxs4GPdjaFXXifvlkZ6GXs.roa
Signing time: Mon 02 Jan 2023 09:00:45 +0000
ROA not before: Mon 02 Jan 2023 09:00:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.5.67.0/24 maxlen: 24
185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
45.8.20.0/22 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 10:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:38:d2:7e:16:34:83:c8:b4:45:35:11:95:7e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49b216b96c6ce063dd8da1575e27ef96467a197b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:b6:b9:c8:5d:83:5e:d3:38:6e:f7:8f:24:
a3:b8:0f:c9:2a:ea:02:fc:c1:52:68:fe:d3:78:eb:
fe:9e:30:c8:fb:8e:db:0e:04:a2:60:a7:73:34:cb:
9d:cf:95:e6:b7:60:16:17:22:b4:15:f4:a2:1a:2e:
b2:8b:3b:1f:2c:9e:8e:57:45:4e:5b:dc:01:37:59:
68:bd:65:8f:f7:ee:fa:8b:11:73:08:d7:67:9c:45:
21:2e:8d:c7:f7:ca:9b:c6:48:57:cb:de:e6:df:7f:
06:ec:70:3b:c4:66:91:18:67:9d:e1:b9:5a:f2:ff:
d3:16:22:4a:4a:9e:1b:2d:28:f5:43:11:55:66:03:
6f:65:89:9f:5a:84:0b:bb:87:5a:96:ba:1c:01:26:
bd:51:a9:09:03:25:cc:a8:55:a4:15:7c:f3:ef:a1:
02:a2:d4:a8:c1:dd:33:b5:5e:e0:80:52:0b:c7:9c:
25:d2:bb:d9:9a:6d:b5:63:c0:b4:f5:20:9e:fc:5e:
66:53:29:04:2d:40:c7:df:71:e4:05:f7:33:06:d1:
ec:97:a6:5e:9c:eb:4e:7a:32:ad:96:42:a7:5a:8f:
a3:81:4b:cd:4f:b4:6b:b8:2e:83:71:c7:85:58:b5:
9e:7f:bc:d8:bd:5e:af:d3:f6:7e:e4:ac:4c:f6:5d:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B2:16:B9:6C:6C:E0:63:DD:8D:A1:57:5E:27:EF:96:46:7A:19:7B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SbIWuWxs4GPdjaFXXifvlkZ6GXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.121.12.0/22
185.206.248.0/24
185.206.251.0/24
185.223.76.0/24
185.226.105.0/24
185.226.107.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.255.124.0/24
194.5.67.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b2:f6:40:de:2a:cd:63:5e:88:bb:de:f6:fc:07:80:05:18:
82:31:92:ac:31:a0:18:26:48:14:9f:27:a4:68:6d:d5:07:65:
b2:2f:f9:db:3d:00:be:7c:45:f6:7e:38:80:5d:a9:8d:97:96:
63:c3:4c:2f:59:f7:8c:ff:df:cb:89:3c:6b:5f:e0:66:b0:5f:
4d:04:60:a3:59:14:6f:12:d8:2b:fe:e3:13:6a:e5:68:b7:ff:
db:33:21:2b:7b:75:e6:a7:9f:91:6a:5f:87:d9:4e:cd:4f:91:
1d:0c:85:9e:c0:9d:10:83:ed:8d:45:41:b1:13:51:f5:17:14:
71:19:ea:76:2f:7a:4e:4e:1e:e9:23:ce:f7:12:4c:5e:eb:c0:
26:80:c5:07:d2:f0:5a:92:5d:66:fc:ed:bc:b7:a3:38:51:5b:
78:3d:49:47:3f:0e:4b:9f:bc:3a:7d:66:d8:48:c0:ae:9e:73:
bb:c2:5e:9a:5f:34:b8:b7:f7:80:2d:8d:49:b9:64:ef:70:03:
6b:f1:a2:99:d3:28:11:92:c8:36:bb:70:ea:f6:ef:9f:49:2b:
65:b0:a7:7c:53:1c:e7:b4:a7:66:40:09:49:f8:28:95:e9:a5:
84:af:c7:8b:34:f1:c1:c0:79:84:cd:ee:5c:c5:f6:46:4d:65:
35:4b:e9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org