Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/V0anEwNlYb2lNFE2aPJTFbcp9wk.roa
File: V0anEwNlYb2lNFE2aPJTFbcp9wk.roa (raw, json)
Hash identifier: YLx72jLyalL6v6SKxuH6R/lDchAupFk9yH/UmPMBsh0=
Subject key identifier: 57:46:A7:13:03:65:61:BD:A5:34:51:36:68:F2:53:15:B7:29:F7:09
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0190FD62BD89944F957CB0C898F550344AA5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/V0anEwNlYb2lNFE2aPJTFbcp9wk.roa
Signing time: Mon 29 Jul 2024 07:27:04 +0000
ROA not before: Mon 29 Jul 2024 07:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.240.122.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 08:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:62:bd:89:94:4f:95:7c:b0:c8:98:f5:50:34:4a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 29 07:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5746a713036561bda534513668f25315b729f709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:50:fb:9c:b9:b3:24:c3:d7:c3:09:ef:85:
45:6a:bf:89:76:ba:6d:c2:3b:0f:00:b8:ec:57:29:
78:75:23:33:d7:09:ca:47:53:76:9b:35:cd:ee:68:
0b:2f:71:de:5d:65:cb:81:38:ae:da:65:1c:f4:98:
38:2c:cb:86:75:9e:4e:f7:31:81:7c:32:8d:95:7a:
b3:23:fc:4b:26:e1:52:ea:33:7f:38:4f:e9:1b:4a:
ab:42:65:46:33:6c:ed:43:cc:c9:8c:67:0a:49:5a:
c5:d8:7a:cd:09:52:06:ea:d3:4b:2d:4b:5e:99:fd:
80:75:db:4b:e8:12:c3:0d:aa:43:87:ab:fb:9a:f1:
07:8b:01:94:f3:74:ae:c2:95:30:d2:2c:cb:23:27:
63:58:f3:4f:ad:4d:50:6b:30:df:12:5f:10:f1:a7:
45:64:33:e2:9f:95:45:1b:d6:2c:f4:0d:79:4d:b3:
6c:4d:b4:51:ab:3a:e8:d8:0a:d3:e7:94:0c:fc:ad:
dc:d2:ac:e0:c6:df:1d:34:3e:c8:95:84:21:a7:39:
4a:aa:4a:8a:35:96:68:95:5a:2f:06:e0:d4:47:1e:
8f:b3:7c:03:fb:ce:60:4c:ee:14:c2:f4:59:bd:ca:
ac:5c:bf:86:1b:4c:20:15:04:60:83:50:19:66:f4:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:46:A7:13:03:65:61:BD:A5:34:51:36:68:F2:53:15:B7:29:F7:09
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/V0anEwNlYb2lNFE2aPJTFbcp9wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.220.250.0/23
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
185.240.122.0/24
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
74:08:de:72:d2:74:86:fa:af:27:de:97:0e:51:12:53:c2:f3:
3b:71:43:1f:5c:9b:ae:82:6c:b0:52:15:6d:8a:9d:f2:00:f6:
4f:91:c8:4c:9b:20:82:a4:3b:b0:ed:6b:dc:62:53:c5:f2:c6:
f5:3d:ba:cd:74:cf:f7:7d:0f:e3:77:8c:7c:60:57:0f:a5:cb:
88:5f:49:3d:77:38:57:46:06:34:06:63:88:69:b1:af:72:3f:
fe:aa:7c:87:2b:8f:39:93:45:20:4d:1d:b5:ee:c5:dc:fd:85:
95:b4:ed:4b:ae:47:1b:9f:09:41:3e:ea:f1:c5:b1:d1:53:77:
26:2c:79:17:59:56:fd:4b:bf:99:5c:b9:36:bf:48:cb:9e:72:
c9:49:d2:2a:4e:59:6b:51:14:fc:1b:af:45:9e:5c:94:83:46:
8b:c2:96:a5:14:7c:fd:3c:c6:24:64:f1:7b:90:28:45:95:a2:
ac:7a:02:72:14:3d:c0:46:fb:27:f6:64:f9:99:38:15:b1:a1:
26:2e:ac:8a:27:a2:59:00:ba:36:af:67:47:09:f1:1a:7f:a6:
7d:34:30:51:9f:7c:89:6c:31:ca:9c:5d:75:6c:e2:f2:b1:ad:
80:2a:f3:8a:5a:bb:1f:6f:85:d0:d5:f8:ea:dd:fa:ab:60:30:
c0:98:db:bc
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZD9Yr2JlE+VfLDImPVQNEqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwNzI5MDcyNzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzQ2YTcxMzAzNjU2MWJkYTUzNDUxMzY2OGYyNTMxNWI3MjlmNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8pQ+5y5syTD18MJ74VFar+Jdrpt
wjsPALjsVyl4dSMz1wnKR1N2mzXN7mgLL3HeXWXLgTiu2mUc9Jg4LMuGdZ5O9zGB
fDKNlXqzI/xLJuFS6jN/OE/pG0qrQmVGM2ztQ8zJjGcKSVrF2HrNCVIG6tNLLUte
mf2AddtL6BLDDapDh6v7mvEHiwGU83SuwpUw0izLIydjWPNPrU1QazDfEl8Q8adF
ZDPin5VFG9Ys9A15TbNsTbRRqzro2ArT55QM/K3c0qzgxt8dND7IlYQhpzlKqkqK
NZZolVovBuDURx6Ps3wD+85gTO4UwvRZvcqsXL+GG0wgFQRgg1AZZvSebwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFFdGpxMDZWG9pTRRNmjyUxW3KfcJMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvVjBhbkV3TmxZYjJsTkZFMmFQSlRGYmNwOXdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALQgVAwQA
uX5SAwQBudz6AwQBueEAAwQAueJoAwQBueOSAwQAufB6AwQBwQhwAwQBwTqSMA0G
CSqGSIb3DQEBCwUAA4IBAQB0CN5y0nSG+q8n3pcOURJTwvM7cUMfXJuugmywUhVt
ip3yAPZPkchMmyCCpDuw7WvcYlPF8sb1PbrNdM/3fQ/jd4x8YFcPpcuIX0k9dzhX
RgY0BmOIabGvcj/+qnyHK485k0UgTR217sXc/YWVtO1LrkcbnwlBPurxxbHRU3cm
LHkXWVb9S7+ZXLk2v0jLnnLJSdIqTllrURT8G69FnlyUg0aLwpalFHz9PMYkZPF7
kChFlaKsegJyFD3ARvsn9mT5mTgVsaEmLqyKJ6JZALo2r2dHCfEaf6Z9NDBRn3yJ
bDHKnF11bOLysa2AKvOKWrsfb4XQ1fjq3fqrYDDAmNu8
-----END CERTIFICATE-----
Generated at Tue Jul 30 09:58:21 2024 by rpki-client on console-ams.rpki-client.org