Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WDmSyOfwnVsJ1w_jD-NpBTCHiAQ.roa
File: WDmSyOfwnVsJ1w_jD-NpBTCHiAQ.roa (raw, json)
Hash identifier: /e7i/Mlq/DW9HBX6/73mK3wBgZn2COC3hWCW5mBHc7I=
Subject key identifier: 58:39:92:C8:E7:F0:9D:5B:09:D7:0F:E3:0F:E3:69:05:30:87:88:04
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189C024B6BE48B156F39750206BC41DCF3E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WDmSyOfwnVsJ1w_jD-NpBTCHiAQ.roa
Signing time: Fri 04 Aug 2023 10:42:58 +0000
ROA not before: Fri 04 Aug 2023 10:42:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.5.65.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.230.52.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.223.81.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.226.106.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
194.147.16.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 18:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:24:b6:be:48:b1:56:f3:97:50:20:6b:c4:1d:cf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 4 10:42:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=583992c8e7f09d5b09d70fe30fe3690530878804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:8b:65:82:a5:02:f2:31:e1:c9:93:0e:07:
4a:58:2c:bb:f0:67:ae:51:fe:17:23:07:83:71:cd:
7b:a3:1c:3e:a5:95:ed:bf:64:b3:06:d8:b4:c1:17:
a9:68:89:c0:6a:47:91:1b:c0:b0:c8:d4:f2:d8:74:
f5:1f:a1:ff:e2:8b:1b:d3:fb:20:46:f2:20:29:73:
9d:eb:10:5c:74:e2:ee:c0:2f:ee:07:b1:57:f1:18:
e1:34:46:01:4b:6c:52:39:56:f3:88:15:15:d1:e0:
ca:d5:d2:80:f2:59:90:d8:87:91:aa:7e:d0:c8:73:
36:cb:4a:a6:74:a5:de:87:55:99:d7:cc:d9:46:36:
c7:36:a0:6b:d7:74:e0:a4:36:2d:79:ee:be:83:90:
9f:73:5f:5e:be:cd:e2:ed:8d:c7:13:8b:ca:5f:24:
0d:9a:78:78:36:0c:c3:19:60:e6:ab:95:c9:76:78:
5e:5d:31:79:df:97:ae:ee:a4:94:fb:8c:bd:d0:49:
44:5c:e1:5f:9a:0f:62:fa:57:af:0e:89:a5:4b:ef:
6f:f3:af:50:4d:51:88:eb:74:e5:d4:89:85:7e:d3:
3d:c8:8f:33:36:48:a5:3c:ef:35:64:43:7f:28:ea:
a7:bd:a6:33:bb:5f:fd:7f:40:e8:77:b9:bb:9d:75:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:39:92:C8:E7:F0:9D:5B:09:D7:0F:E3:0F:E3:69:05:30:87:88:04
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WDmSyOfwnVsJ1w_jD-NpBTCHiAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.209.75.0/24
185.210.232.0/24
185.210.235.0/24
185.218.101.0/24
185.223.81.0-185.223.82.255
185.225.0.0/23
185.225.22.0/24
185.226.106.0/24
185.230.52.0/24
185.246.115.0/24
185.251.229.0/24
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.147.16.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2f:e5:6e:81:f0:e1:59:36:a5:ce:44:20:fe:f8:ef:f3:d3:
37:8a:85:70:31:ba:20:00:c3:fe:47:87:37:9a:aa:0e:29:95:
91:04:e0:9c:68:a2:74:b4:42:d5:d1:fa:79:85:e3:3e:95:45:
20:8f:48:1a:a1:50:54:6a:7e:4b:0d:54:6b:9b:5b:bc:5b:0b:
10:25:25:21:22:75:9d:25:8e:fe:c4:9a:d8:e0:20:13:ac:2b:
4e:33:4d:35:01:eb:22:b3:3b:6b:e2:ea:29:a3:21:29:4e:98:
ef:d3:44:54:20:05:cc:77:35:12:26:49:2a:3f:eb:80:2d:5e:
57:9d:52:52:bd:66:32:bf:8c:ac:9d:21:cd:60:13:90:7d:27:
82:8a:fc:2b:a9:85:74:16:c0:3a:06:d0:62:64:ef:af:0b:72:
fd:83:fa:5d:ea:03:d4:b7:d4:2f:7b:3a:26:88:23:f6:ca:da:
75:5e:88:7f:c5:90:d4:52:cf:7b:d2:69:61:d3:c2:3b:09:86:
aa:f6:fa:fe:73:f9:1e:c8:eb:46:d4:c1:73:b5:10:1b:fb:83:
71:12:a5:d7:35:a5:a1:30:1f:8b:32:1a:83:66:d5:51:25:35:
88:83:f9:ef:e1:1c:04:ba:18:c0:d9:2b:49:82:f9:96:3e:1d:
ac:f7:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org