Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZL0Ytw7Tz4f9iJ7QKjHpo5YPLiU.roa
File: ZL0Ytw7Tz4f9iJ7QKjHpo5YPLiU.roa (raw, json)
Hash identifier: djmBM7k2jMdu5CUZHz5QI6axPZPK7DY3Shr8hk5sNfs=
Subject key identifier: 64:BD:18:B7:0E:D3:CF:87:FD:88:9E:D0:2A:31:E9:A3:96:0F:2E:25
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01870367CF78A6861077A10A012972CA75A6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZL0Ytw7Tz4f9iJ7QKjHpo5YPLiU.roa
Signing time: Tue 21 Mar 2023 09:02:27 +0000
ROA not before: Tue 21 Mar 2023 09:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 185.206.250.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
45.147.226.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
45.131.132.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
45.131.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 10:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:67:cf:78:a6:86:10:77:a1:0a:01:29:72:ca:75:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 21 09:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64bd18b70ed3cf87fd889ed02a31e9a3960f2e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:4c:c6:36:2c:76:42:e7:ff:a4:43:51:9e:
2a:49:d3:31:54:3f:6b:df:a5:7d:8c:36:26:e7:30:
d7:2d:66:49:fb:ea:4e:f1:2e:dd:d2:13:9c:1c:12:
23:86:dd:f0:b0:11:a8:e7:a1:25:8a:72:62:ef:a8:
9a:32:b5:95:6d:38:f9:50:7d:ed:b0:1c:c8:ba:71:
5d:46:76:32:72:a4:84:b2:e5:ca:21:e0:6c:05:af:
60:a5:99:f2:1f:ca:a8:d1:bc:a1:24:56:48:32:46:
fb:31:72:52:b3:c2:e2:dc:12:c3:e2:44:88:f5:1a:
a5:32:3b:fa:e0:25:2b:1d:e1:3a:6c:fc:69:ff:52:
a2:d2:f1:0a:f8:1f:95:a7:b0:b7:53:ab:fd:d5:f4:
17:d9:5a:42:41:fc:6c:39:30:db:ea:22:20:a1:ce:
9b:f5:de:09:87:b8:84:50:2f:4f:3d:53:8e:a5:88:
0d:81:80:03:a6:9f:be:b6:e8:0b:33:21:22:02:6c:
9a:74:87:55:e7:6c:1b:26:7a:a3:79:22:d1:36:ca:
bb:9f:89:46:02:00:6a:15:7b:7d:6f:53:42:f4:48:
68:1d:10:56:e3:4c:a3:d6:fe:c0:c8:79:2e:c7:10:
d4:0b:7e:02:34:8a:5e:97:f9:a1:12:67:ae:14:dc:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:18:B7:0E:D3:CF:87:FD:88:9E:D0:2A:31:E9:A3:96:0F:2E:25
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZL0Ytw7Tz4f9iJ7QKjHpo5YPLiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.132.0/23
45.131.135.0/24
45.147.226.0/24
185.206.250.0/24
185.223.78.0/24
185.223.155.0/24
185.246.112.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a0:83:88:b4:20:c8:26:20:6b:f6:55:ba:28:ef:73:a6:58:
c7:15:e7:a7:6c:e4:b4:44:b1:85:0e:25:32:65:ea:54:80:f5:
e9:49:d0:50:fa:a0:e9:1b:f1:42:cf:58:10:a4:74:44:75:a0:
fd:b1:55:e4:b2:cd:41:70:62:6b:dd:36:ee:95:68:48:0b:60:
2f:99:c3:d4:ce:64:2b:90:09:5f:9d:58:f4:0f:31:12:58:0f:
8a:fb:b2:46:d2:46:3b:83:61:2a:dc:16:a0:18:75:7b:35:e4:
f3:a9:82:ac:75:52:7e:2b:ae:37:63:bd:28:53:6e:a3:6e:5e:
1e:ff:34:01:f6:e9:9d:55:d0:20:51:90:90:d3:13:98:a2:6e:
a8:34:0b:33:bf:03:95:97:01:22:ea:04:bb:6e:3c:a2:f4:dd:
db:f0:a3:be:36:18:1e:29:25:77:b2:94:36:84:9b:94:9b:d5:
51:97:2e:bb:ec:7d:40:62:bb:e6:e5:8c:e5:9c:37:48:01:2f:
15:8f:28:19:19:47:4d:5f:5e:96:9c:a6:35:d7:ec:c3:ca:6e:
9a:d2:6a:1b:7a:16:88:f5:78:f0:6e:55:81:ec:db:a8:04:65:
6a:d4:82:f6:14:5d:57:b2:03:03:33:dd:38:c1:91:ae:19:60:
b3:f4:6f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org