Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/eXv5MtDtm5Mlpe_0tPNv3kXyrZM.roa
File: eXv5MtDtm5Mlpe_0tPNv3kXyrZM.roa (raw, json)
Hash identifier: jpr9NY1DCKF+0NZ5MX4HRGtfe1bSQ8LOmwwk7N7eycM=
Subject key identifier: 79:7B:F9:32:D0:ED:9B:93:25:A5:EF:F4:B4:F3:6F:DE:45:F2:AD:93
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E802C85432DB355778E950B7DA601D646
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/eXv5MtDtm5Mlpe_0tPNv3kXyrZM.roa
Signing time: Wed 27 Mar 2024 13:49:45 +0000
ROA not before: Wed 27 Mar 2024 13:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.81.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.223.82.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.230.65.0/24 maxlen: 24
185.230.66.0/24 maxlen: 24
185.246.113.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 20:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:2c:85:43:2d:b3:55:77:8e:95:0b:7d:a6:01:d6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 27 13:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=797bf932d0ed9b9325a5eff4b4f36fde45f2ad93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:3d:fa:af:6d:e9:20:26:5b:6b:9a:0a:4b:
15:81:68:f0:05:15:c7:a9:53:47:34:73:e5:49:75:
cb:9b:ef:86:db:23:f8:3e:7a:44:1f:23:00:2b:61:
35:bc:98:3f:1e:07:cc:16:87:69:00:4e:cb:72:e3:
a0:a1:5b:b5:78:83:4a:5f:3f:0c:c9:89:78:08:88:
09:db:c1:37:71:48:99:e6:78:be:9a:78:95:c1:46:
df:fa:3e:1f:9c:5d:8a:a8:0e:21:1e:cc:e8:23:8a:
62:43:25:f9:06:1c:78:8b:9f:32:3a:ac:26:52:29:
4a:e5:ec:e5:65:61:5e:2a:0a:37:74:d0:e2:d1:1d:
15:47:ef:bd:3e:e4:d8:29:82:f2:96:a7:bd:3a:7c:
ff:37:82:c1:bb:d3:b0:d3:f9:5e:b3:e4:9e:22:49:
c7:de:52:7b:59:b6:12:d2:44:c6:27:b6:ca:ef:51:
5a:64:c6:7e:9c:44:21:e5:df:0a:bc:9a:c5:9e:10:
e7:0a:58:f7:66:4c:66:2e:da:32:fe:ca:22:d7:0c:
bc:e2:97:dd:9e:9f:5d:99:96:d4:46:05:22:c5:9d:
f5:f2:89:5e:7f:ef:89:cd:ae:5c:bf:82:4b:bf:2f:
ce:ae:42:e3:0d:7b:bf:55:cd:70:eb:1f:05:ca:3f:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:F9:32:D0:ED:9B:93:25:A5:EF:F4:B4:F3:6F:DE:45:F2:AD:93
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/eXv5MtDtm5Mlpe_0tPNv3kXyrZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.81.0/24
185.218.20.0/24
185.220.250.0/23
185.223.82.0/24
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
185.230.65.0-185.230.66.255
185.246.113.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
22:fa:11:83:62:7d:69:bd:ca:66:df:17:45:87:52:2d:6d:84:
01:01:2b:72:27:2c:65:f1:0e:e9:90:e3:27:60:0e:4c:fc:2c:
6a:1f:b0:d8:e2:05:2c:0a:ec:a9:a4:29:60:a8:2e:6c:fa:9f:
ef:fc:0c:3f:63:e8:09:c8:79:43:03:07:ee:4c:f7:31:a9:f5:
0e:be:4e:89:f2:4d:22:e6:6a:fb:e3:8c:c6:63:36:68:bd:d4:
d0:88:3c:4a:d8:e9:d2:a2:6f:77:fc:a8:01:d0:f3:19:a8:b0:
74:fa:b9:f2:0c:79:6f:b5:10:cc:66:1d:72:bd:58:6d:ad:0b:
39:06:c2:c2:7d:7e:49:90:6b:1d:bc:ca:c7:5b:9c:cb:73:e4:
02:0b:9f:23:ff:90:27:4e:b6:94:0c:c9:42:a6:25:1f:12:04:
48:ca:9a:06:12:96:88:de:b6:f3:2a:58:85:41:ee:e4:45:17:
f3:03:99:d8:65:42:ad:3f:be:80:28:fd:86:64:25:8a:87:d6:
ef:60:bc:4e:ed:3a:6d:71:58:2d:f1:c7:5e:f9:13:42:ae:ac:
a9:b8:73:ed:b6:20:c2:0c:71:52:32:f9:a0:e4:d8:04:f0:e4:
f5:1f:4f:d8:2a:cd:ec:5e:ee:0f:57:51:69:40:56:b7:02:e4:
84:98:b5:89
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAY6ALIVDLbNVd46VC32mAdZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMzI3MTM0OTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTdiZjkzMmQwZWQ5YjkzMjVhNWVmZjRiNGYzNmZkZTQ1ZjJhZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxs9+q9t6SAmW2uaCksVgWjwBRXH
qVNHNHPlSXXLm++G2yP4PnpEHyMAK2E1vJg/HgfMFodpAE7LcuOgoVu1eINKXz8M
yYl4CIgJ28E3cUiZ5ni+mniVwUbf+j4fnF2KqA4hHszoI4piQyX5Bhx4i58yOqwm
UilK5ezlZWFeKgo3dNDi0R0VR++9PuTYKYLylqe9Onz/N4LBu9Ow0/les+SeIknH
3lJ7WbYS0kTGJ7bK71FaZMZ+nEQh5d8KvJrFnhDnClj3ZkxmLtoy/soi1wy84pfd
np9dmZbURgUixZ318olef++Jza5cv4JLvy/OrkLjDXu/Vc1w6x8Fyj+LLwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFHl7+TLQ7ZuTJaXv9LTzb95F8q2TMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvZVh2NU10RHRtNU1scGVfMHRQTnYza1h5clpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQALQgVAwQA
uX5RAwQAudoUAwQBudz6AwQAud9SAwQBueEAAwQAueJoAwQBueOSMAwDBAC55kED
BAC55kIDBAC59nEDBAHBOpIwDQYJKoZIhvcNAQELBQADggEBACL6EYNifWm9ymbf
F0WHUi1thAEBK3InLGXxDumQ4ydgDkz8LGofsNjiBSwK7KmkKWCoLmz6n+/8DD9j
6AnIeUMDB+5M9zGp9Q6+TonyTSLmavvjjMZjNmi91NCIPErY6dKib3f8qAHQ8xmo
sHT6ufIMeW+1EMxmHXK9WG2tCzkGwsJ9fkmQax28ysdbnMtz5AILnyP/kCdOtpQM
yUKmJR8SBEjKmgYSlojetvMqWIVB7uRFF/MDmdhlQq0/voAo/YZkJYqH1u9gvE7t
Om1xWC3xx175E0KurKm4c+22IMIMcVIy+aDk2ATw5PUfT9gqzexe7g9XUWlAVrcC
5ISYtYk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org