Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_U2LUC6juOSY9KQv0B-dnzQNDdw.roa
File: _U2LUC6juOSY9KQv0B-dnzQNDdw.roa (raw, json)
Hash identifier: 5dqVWLKo/lS7FaLAeEw3I29l7FmmayangXdChlpczlU=
Subject key identifier: FD:4D:8B:50:2E:A3:B8:E4:98:F4:A4:2F:D0:1F:9D:9F:34:0D:0D:DC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0193AC936B7B53F10E386548AE855669FE8D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_U2LUC6juOSY9KQv0B-dnzQNDdw.roa
Signing time: Mon 09 Dec 2024 17:59:22 +0000
ROA not before: Mon 09 Dec 2024 17:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207046
IP address blocks: 45.134.84.0/22 maxlen: 24
178.212.225.0/24 maxlen: 24
185.221.16.0/23 maxlen: 23
185.224.220.0/22 maxlen: 22
185.227.206.0/24 maxlen: 24
185.227.207.0/24 maxlen: 24
185.247.4.0/22 maxlen: 24
185.247.5.0/24 maxlen: 24
185.247.6.0/23 maxlen: 24
185.247.7.0/24 maxlen: 24
185.249.204.0/22 maxlen: 22
185.250.182.0/23 maxlen: 24
194.113.28.0/22 maxlen: 24
194.146.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 31 Dec 2024 11:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:93:6b:7b:53:f1:0e:38:65:48:ae:85:56:69:fe:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 9 17:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd4d8b502ea3b8e498f4a42fd01f9d9f340d0ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:d1:2f:a7:5c:48:65:e9:a1:6b:3b:b6:ca:
15:f5:76:bb:e6:f4:1b:3f:6c:97:c6:d8:81:42:d1:
b1:06:7c:21:41:32:59:a5:c4:15:b4:03:9d:dd:d9:
4a:d8:00:07:5a:1d:49:d6:ba:98:f3:47:9e:67:02:
36:a6:35:47:5b:5e:e6:a4:9f:77:87:29:a9:01:0f:
ea:a1:ea:86:22:36:c5:13:c9:b2:22:cb:27:86:e0:
88:19:57:cf:9f:72:77:16:ad:ef:bd:d9:9d:d9:65:
95:68:ca:a3:80:cf:62:1a:49:8c:da:47:02:bb:2a:
ca:aa:fa:9a:20:eb:41:f8:9d:0d:69:55:b8:7e:71:
22:a1:fb:3a:9e:18:84:5c:b9:4c:8a:b2:a6:88:46:
4a:9f:c5:99:93:f5:e7:2a:6a:ca:6a:6f:70:0b:f4:
b5:07:24:af:ae:43:18:dd:7e:08:fc:93:79:df:73:
9f:b2:9d:b6:5e:4c:02:e3:c8:43:ad:f7:5f:f1:eb:
ac:68:7f:be:2b:12:79:75:4c:7f:d8:d9:8a:a1:cd:
07:b9:c2:0e:e6:9a:f9:33:86:b9:e9:eb:8c:7a:d7:
c3:9c:4d:43:26:5b:f6:a6:cb:05:97:51:1d:3c:62:
4b:16:d7:62:0f:57:13:be:4a:ba:13:9d:5f:02:2c:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4D:8B:50:2E:A3:B8:E4:98:F4:A4:2F:D0:1F:9D:9F:34:0D:0D:DC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_U2LUC6juOSY9KQv0B-dnzQNDdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.84.0/22
178.212.225.0/24
185.221.16.0/23
185.224.220.0/22
185.227.206.0/23
185.247.4.0/22
185.249.204.0/22
185.250.182.0/23
194.113.28.0/22
194.146.220.0/22
Signature Algorithm: sha256WithRSAEncryption
92:fa:02:57:e0:5c:43:24:eb:bb:26:ff:27:f5:52:60:d2:35:
34:ba:20:16:5e:24:da:2b:65:95:02:3c:d7:20:7c:ea:9e:ed:
61:0b:6e:68:79:0b:c1:68:73:fd:01:37:ca:6c:fc:7b:6a:f0:
8e:b2:02:1f:29:8b:6e:b2:df:0b:23:73:a5:da:f8:8a:23:4e:
e9:c4:28:cb:6d:82:07:b4:62:ac:5b:41:46:93:c9:4a:26:53:
8f:f0:e1:51:f2:56:9b:0a:0e:dd:c1:b9:7f:c8:13:a6:7a:2d:
64:70:76:77:f2:0e:63:90:44:3d:43:be:47:5b:6d:67:1b:c5:
fd:e0:c2:5e:c3:92:6b:a6:1c:a7:dd:90:e2:eb:b9:ea:bc:e6:
86:f2:11:bd:f3:19:49:54:6d:d3:ef:89:99:a0:2a:50:c7:ad:
55:6b:69:1d:dc:1c:c9:b2:69:53:7a:af:20:f6:e4:2b:67:a9:
48:42:11:4a:19:b0:72:2d:db:b7:7e:fb:38:3a:09:ef:ef:e9:
91:ac:35:16:f8:bf:a2:a1:b9:fb:2b:ac:78:c9:6d:08:06:fc:
ec:9b:bd:52:bf:4d:8a:24:53:68:8a:96:9d:6a:bc:83:9f:8d:
a8:be:bf:6f:79:ff:6b:55:df:17:e5:2b:c3:14:91:22:f7:47:
0b:b2:29:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:31 2025 by rpki-client