Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Yk0p-iW_rMs_pENE_pCfd9DSBrE.roa
File: Yk0p-iW_rMs_pENE_pCfd9DSBrE.roa (raw, json)
Hash identifier: tzFFJumGMB7FKRTsHtV3RBoX8nMO0J42siCaTfXxVhc=
Subject key identifier: 62:4D:29:FA:25:BF:AC:CB:3F:A4:43:44:FE:90:9F:77:D0:D2:06:B1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CEF021793291FD462D79F13A1A74E592B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Yk0p-iW_rMs_pENE_pCfd9DSBrE.roa
Signing time: Tue 09 Jan 2024 16:15:40 +0000
ROA not before: Tue 09 Jan 2024 16:15:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.227.146.0/23 maxlen: 24
185.220.250.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
45.8.21.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 09 Jan 2024 20:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ef:02:17:93:29:1f:d4:62:d7:9f:13:a1:a7:4e:59:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 9 16:15:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=624d29fa25bfaccb3fa44344fe909f77d0d206b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:da:11:54:5c:08:f1:58:15:a1:0c:a0:29:
5f:0e:fe:4a:06:ce:6e:f7:b4:d8:59:d8:bb:5c:0c:
e8:6e:52:6b:4b:8b:3d:09:8e:95:5b:4d:b9:83:3e:
b1:d3:bd:44:a4:f0:1c:45:1d:2c:04:e6:df:6b:8b:
00:64:76:f3:03:92:80:8d:9c:f0:ca:09:2c:68:68:
40:5b:e3:6c:c4:13:4c:4c:67:3e:b7:41:5f:b1:ad:
ed:64:99:09:a4:ef:6c:c5:98:75:f4:82:a6:24:1c:
b0:86:1e:fc:99:b5:0b:7e:d7:61:da:0a:d4:da:a2:
78:cb:eb:a2:90:47:76:17:f0:6e:89:5e:51:35:08:
73:d6:ed:09:c5:f7:b8:f1:53:79:ed:61:b1:37:a4:
30:22:cb:ee:85:0f:f0:bd:1f:4d:da:0f:8e:5b:d0:
ec:97:8c:b7:f6:a0:af:38:b9:59:06:42:b6:71:e1:
b9:9f:26:57:85:8b:bc:5b:b0:49:bf:f0:19:4f:73:
c2:a8:83:66:1b:2d:05:b3:c2:5e:e2:95:97:f6:76:
1c:21:75:52:98:f6:e2:c8:7f:b0:d6:cb:92:ad:ef:
b7:bb:5d:a8:72:f2:26:08:f9:49:03:28:28:64:74:
4a:33:cd:db:7f:33:6a:4f:b0:a1:cc:aa:49:77:94:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4D:29:FA:25:BF:AC:CB:3F:A4:43:44:FE:90:9F:77:D0:D2:06:B1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Yk0p-iW_rMs_pENE_pCfd9DSBrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.220.250.0/23
185.223.82.0/24
185.225.0.0/23
185.227.146.0/23
185.251.229.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
af:f9:aa:1d:2a:9d:5c:7b:4a:af:fa:e8:c9:62:9f:3f:e6:f4:
7f:b8:a7:15:c3:e0:17:2f:a1:02:72:f8:98:56:2a:77:cb:43:
5a:5d:9e:82:cc:af:bb:09:dc:95:3f:96:3f:a0:37:9c:33:47:
52:06:f4:86:19:d9:64:4b:3e:44:91:6d:65:01:22:9e:c7:b7:
67:5f:fd:7f:02:74:ca:06:bc:a7:2b:59:f8:93:2a:ad:a5:33:
ce:fb:8c:82:61:62:52:b4:97:24:f7:08:62:6d:5b:13:c3:a1:
f8:b5:fb:78:82:7d:bc:d8:5c:65:c1:9e:3b:84:b8:f9:5f:8e:
7d:ea:80:8c:66:19:df:48:3a:81:7e:aa:97:7d:6a:ef:4d:30:
d1:2f:01:7b:5d:91:16:1c:48:6d:fb:07:39:ce:0b:b5:b8:3e:
66:3d:7e:0e:45:9d:a7:17:e1:c7:f2:b8:b2:e4:93:2b:91:a9:
65:dc:d0:70:b3:fb:de:b5:7a:c4:93:a2:22:d5:b1:85:91:b1:
c3:93:34:b8:4d:39:2c:5c:18:78:6b:db:2a:be:50:14:dd:eb:
c0:0e:86:98:ac:9d:56:f2:9f:89:a9:aa:b3:d1:d7:bf:fe:80:
fd:02:f7:06:6b:de:77:ec:d8:31:f1:2d:de:56:97:50:05:22:
32:4e:ff:d0
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzvAheTKR/UYtefE6GnTlkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMTA5MTYxNTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjRkMjlmYTI1YmZhY2NiM2ZhNDQzNDRmZTkwOWY3N2QwZDIwNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIraEVRcCPFYFaEMoClfDv5KBs5u
97TYWdi7XAzoblJrS4s9CY6VW025gz6x071EpPAcRR0sBObfa4sAZHbzA5KAjZzw
ygksaGhAW+NsxBNMTGc+t0Ffsa3tZJkJpO9sxZh19IKmJBywhh78mbULftdh2grU
2qJ4y+uikEd2F/BuiV5RNQhz1u0Jxfe48VN57WGxN6QwIsvuhQ/wvR9N2g+OW9Ds
l4y39qCvOLlZBkK2ceG5nyZXhYu8W7BJv/AZT3PCqINmGy0Fs8Je4pWX9nYcIXVS
mPbiyH+w1suSre+3u12ocvImCPlJAygoZHRKM83bfzNqT7ChzKpJd5R5SwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFGJNKfolv6zLP6RDRP6Qn3fQ0gaxMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvWWswcC1pV19yTXNfcEVORV9wQ2ZkOURTQnJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALQgVAwQB
udz6AwQAud9SAwQBueEAAwQBueOSAwQAufvlAwQBwTqSMA0GCSqGSIb3DQEBCwUA
A4IBAQCv+aodKp1ce0qv+ujJYp8/5vR/uKcVw+AXL6ECcviYVip3y0NaXZ6CzK+7
CdyVP5Y/oDecM0dSBvSGGdlkSz5EkW1lASKex7dnX/1/AnTKBrynK1n4kyqtpTPO
+4yCYWJStJck9whibVsTw6H4tft4gn282FxlwZ47hLj5X4596oCMZhnfSDqBfqqX
fWrvTTDRLwF7XZEWHEht+wc5zgu1uD5mPX4ORZ2nF+HH8riy5JMrkall3NBws/ve
tXrEk6Ii1bGFkbHDkzS4TTksXBh4a9sqvlAU3evADoaYrJ1W8p+Jqaqz0de//oD9
AvcGa9537Ngx8S3eVpdQBSIyTv/Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org