Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_Tp88sq6en0TZ4z9r0_WjgQR7Jk.roa
File: _Tp88sq6en0TZ4z9r0_WjgQR7Jk.roa (raw, json)
Hash identifier: R5DQffMmJEQgLiyHfJwpGIJFEKEPsqPR95Nyt1nq1pk=
Subject key identifier: FD:3A:7C:F2:CA:BA:7A:7D:13:67:8C:FD:AF:4F:D6:8E:04:11:EC:99
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0190B63DB042106732F2E65440F630AF580A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_Tp88sq6en0TZ4z9r0_WjgQR7Jk.roa
Signing time: Mon 15 Jul 2024 11:53:34 +0000
ROA not before: Mon 15 Jul 2024 11:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.194.29.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.251.230.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 10:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b6:3d:b0:42:10:67:32:f2:e6:54:40:f6:30:af:58:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 15 11:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd3a7cf2caba7a7d13678cfdaf4fd68e0411ec99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d6:fd:b9:8e:aa:53:4b:22:a1:25:fa:fe:30:
ad:08:51:e4:ae:16:ef:d8:a8:2a:1a:ea:de:8b:97:
61:87:2c:8e:08:3f:29:d8:fc:1c:77:59:2a:cb:2a:
11:42:44:8d:47:5a:4d:7f:5e:44:7e:2b:2f:48:cb:
02:bb:f9:ab:39:39:f6:19:d7:91:f9:54:3f:2f:2e:
d9:73:e3:34:fe:ed:96:cd:0b:00:98:32:8d:26:e9:
ec:f9:d3:3e:88:72:47:20:43:ad:23:57:d8:36:6e:
6f:f7:b2:e9:8f:2e:27:f0:f7:f7:3f:98:53:42:74:
da:07:dc:ee:ae:24:e2:b6:89:25:d0:b9:08:41:b5:
e7:d1:44:a3:c0:c0:96:d4:0c:d5:5f:28:c4:0f:c1:
13:1b:52:a9:95:43:48:bf:73:cf:75:bd:f1:df:76:
a6:53:39:e0:e0:3a:5c:a8:e4:c1:36:ff:03:d3:28:
57:2e:c6:7d:c7:78:0e:d7:b5:9f:54:91:4d:e4:97:
de:cd:c3:d9:c8:85:c1:6c:96:c0:a7:11:2b:d5:4c:
c0:e5:04:b7:39:5b:a2:80:dd:86:cf:7c:3a:77:71:
6c:ee:19:60:e3:e4:9e:1c:5e:bb:6a:0b:be:b8:16:
33:bd:15:00:0d:0e:b9:c3:9e:f2:ee:7b:e3:c2:46:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:7C:F2:CA:BA:7A:7D:13:67:8C:FD:AF:4F:D6:8E:04:11:EC:99
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_Tp88sq6en0TZ4z9r0_WjgQR7Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.194.29.0/24
185.220.250.0/23
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
185.251.230.0/24
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:7a:fc:82:6b:c5:81:6f:43:68:cf:d2:17:e8:69:ca:07:06:
b8:28:de:92:9d:23:69:93:49:f9:90:53:c4:06:49:bd:97:f7:
7b:ee:a6:6b:a9:fd:fe:e5:8d:da:f8:9a:7f:16:29:d8:7d:e9:
30:2c:df:05:b3:3e:07:43:30:13:29:9f:b4:71:53:c1:28:55:
21:9e:30:3e:a1:c0:d8:4f:50:a7:c4:4a:ae:6a:02:f4:2a:fe:
76:9c:f6:c7:65:b6:bf:5f:ca:a0:69:88:20:e6:6b:f5:52:53:
da:89:ef:5c:7e:a6:2c:8d:08:c7:a2:47:ce:da:3a:15:ce:94:
a6:7b:d9:8d:58:62:12:15:d1:c6:37:dc:01:10:0b:d2:5f:61:
9c:77:92:87:8c:a9:45:df:eb:2e:71:9d:6c:ab:c6:e7:e3:c2:
68:af:34:e5:ba:8b:78:8c:13:b7:96:b0:5f:7c:f1:5c:b1:20:
c9:a2:b2:be:aa:f6:86:ff:0d:ce:d9:22:5b:b9:18:69:1b:40:
06:24:87:54:fc:df:50:e7:d9:22:ef:06:4f:4a:78:95:e6:31:
30:28:0b:1a:7f:af:6e:16:40:5f:e3:43:29:41:61:da:70:7b:
c0:1c:48:c9:6d:64:38:c0:f3:a9:e9:38:c6:05:51:ff:05:fe:
fb:a3:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 14:07:27 2024 by rpki-client on console-ams.rpki-client.org