Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b1JRzB1P_zdee_oqSBkneo0EQyI.roa
File: b1JRzB1P_zdee_oqSBkneo0EQyI.roa (raw, json)
Hash identifier: yLGNdaA441BMmz0cln5PU8wB9OWl5MbK7NnXc3veo88=
Subject key identifier: 6F:52:51:CC:1D:4F:FF:37:5E:7B:FA:2A:48:19:27:7A:8D:04:43:22
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01878FE01CB7E5F03269FF27BC7C4CAFCF50
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b1JRzB1P_zdee_oqSBkneo0EQyI.roa
Signing time: Mon 17 Apr 2023 15:40:41 +0000
ROA not before: Mon 17 Apr 2023 15:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.90.17.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.240.123.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
176.125.248.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Apr 2023 10:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:e0:1c:b7:e5:f0:32:69:ff:27:bc:7c:4c:af:cf:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 17 15:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f5251cc1d4fff375e7bfa2a4819277a8d044322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c7:3f:5f:c4:5e:c4:2d:59:a6:4d:a4:86:a9:
5d:f0:09:80:0e:09:4e:5c:ee:99:c5:c7:b2:d0:80:
3b:04:7d:71:af:a3:cb:64:81:b3:34:68:ca:83:7b:
f1:b8:34:fa:64:7f:c8:21:b6:05:15:54:d7:03:41:
3a:b6:82:1a:9d:bf:02:00:6b:94:62:99:29:c5:07:
ac:ad:11:15:91:65:42:ba:5a:66:49:3e:98:1d:46:
c0:be:03:5a:44:03:73:a6:46:5b:c2:52:86:bd:be:
d2:2f:b8:e1:85:d7:53:5a:02:81:a0:02:ce:bf:9c:
f8:a6:a7:4f:2f:21:d3:f6:e7:7a:5d:46:d2:b9:f0:
e5:8e:c1:ef:66:ff:e7:c3:ba:bb:45:98:e2:a8:99:
da:ac:83:0a:09:ba:9b:ea:d1:56:e7:55:db:18:4e:
08:a5:32:1b:0b:16:fe:2a:8f:62:54:e6:de:16:b7:
c0:15:b7:9f:f6:47:24:f1:b0:44:75:67:a7:6d:b4:
50:26:95:df:bd:8a:39:10:e8:30:3a:03:d6:27:cc:
98:4d:9a:74:be:24:ca:10:2d:f9:c2:eb:1e:72:89:
b0:3b:b2:ee:c1:ce:55:0b:8d:0f:8d:5d:7d:4f:f3:
a5:c2:13:89:dc:99:99:b5:ed:c6:8d:a0:3b:da:59:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:52:51:CC:1D:4F:FF:37:5E:7B:FA:2A:48:19:27:7A:8D:04:43:22
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b1JRzB1P_zdee_oqSBkneo0EQyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
45.147.224.0/24
176.125.248.0/24
185.108.204.0/23
185.126.82.0/24
185.218.20.0/24
185.225.0.0/23
185.240.123.0/24
193.58.146.0/23
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:bb:86:ae:75:09:08:a8:fd:9b:c8:e6:f6:86:7b:17:21:b7:
e5:0f:e5:5d:92:04:7b:90:5e:7e:bd:29:3c:46:71:bf:07:f0:
19:aa:eb:b4:88:3a:75:a0:00:69:5c:95:61:c2:22:35:fa:e9:
b1:10:f7:7b:fd:bd:ad:e3:81:e5:7b:3a:7a:8b:43:e6:8f:81:
15:9c:95:08:d6:fc:71:08:81:d5:ab:2c:d1:6b:ce:8d:24:23:
e0:d5:59:ee:fc:a5:e3:58:5b:c1:d7:5e:ac:25:2f:65:ae:e7:
2f:c6:20:22:39:59:7f:b9:1e:b5:fb:45:6d:1a:c6:1d:65:d9:
7a:ec:6b:4e:e3:f2:7b:fe:6e:99:12:92:f6:55:df:51:8b:cb:
1c:74:a8:cb:28:60:da:f4:6f:d6:36:8d:fb:33:b5:d8:21:71:
a6:fe:13:23:81:be:ea:de:3a:2a:3d:20:e3:99:2f:80:13:fd:
fb:33:ea:40:46:24:8d:71:a3:88:6d:86:9e:2c:a3:0f:08:03:
ce:23:88:56:2a:19:19:a0:21:08:b1:09:7c:a5:96:1c:8c:c8:
d2:c9:85:fc:60:31:b4:2b:ae:f3:05:93:fd:1e:89:78:4d:13:
f6:b5:69:b3:ce:3f:7c:d8:69:3c:79:5a:56:48:6c:74:33:c1:
4c:1d:f6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org