Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fvR7JjceGd1009zc0J0ePbeWrzM.roa
File: fvR7JjceGd1009zc0J0ePbeWrzM.roa (raw, json)
Hash identifier: LINNMcFwqDTrFy3XiO6tLW1QkrmF9L7awBrvwDUfnTs=
Subject key identifier: 7E:F4:7B:26:37:1E:19:DD:74:D3:DC:DC:D0:9D:1E:3D:B7:96:AF:33
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0192D29D9B153F73F5BD5B1D289B6FF32430
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fvR7JjceGd1009zc0J0ePbeWrzM.roa
Signing time: Mon 28 Oct 2024 10:13:17 +0000
ROA not before: Mon 28 Oct 2024 10:13:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.126.82.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.223.78.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 10:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:9d:9b:15:3f:73:f5:bd:5b:1d:28:9b:6f:f3:24:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 28 10:13:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ef47b26371e19dd74d3dcdcd09d1e3db796af33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:02:f7:18:3b:16:0e:a4:0d:38:d3:6c:7c:
60:2c:cb:cc:10:e4:f6:d8:72:3c:d2:c2:ce:3b:0e:
f1:ee:a2:72:41:3f:3b:9f:12:6c:35:cb:4f:2a:bb:
17:3f:58:11:2d:9c:93:e6:06:be:6c:fe:fb:08:44:
14:eb:33:90:65:da:00:96:01:10:aa:0d:75:d8:9d:
59:c7:a2:cd:7b:63:fa:40:3f:18:63:9a:0a:bd:8e:
44:8e:49:6c:a6:d2:43:4d:8b:da:04:7b:83:7b:e5:
5c:3f:c1:bf:f5:92:cf:f1:d1:33:9d:73:36:93:ca:
bd:02:81:aa:1d:b7:44:e0:65:5f:bd:8b:6e:3a:32:
29:a1:26:4e:78:27:d2:e0:dd:48:38:ec:5c:e6:a4:
28:6a:37:60:be:6f:6a:43:58:02:57:1b:f9:ae:2b:
af:c5:72:fc:a1:26:f5:71:c1:eb:7f:54:31:ce:12:
bf:4a:e8:d7:ad:3b:a6:27:46:d0:11:2b:7d:6d:7f:
c5:f4:b4:cc:03:af:ee:c4:86:84:bc:43:48:e5:97:
2a:3f:f6:f9:ac:0c:71:0b:be:4f:70:d8:8f:c8:5a:
95:44:3f:81:bd:03:2e:fb:fb:f6:1d:ea:fc:95:a1:
20:9c:a3:24:ee:30:f0:69:17:06:c1:0f:a4:08:9c:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F4:7B:26:37:1E:19:DD:74:D3:DC:DC:D0:9D:1E:3D:B7:96:AF:33
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fvR7JjceGd1009zc0J0ePbeWrzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.121.12.0/22
185.126.82.0/24
185.218.101.0/24
185.220.250.0/23
185.223.78.0/24
185.225.0.0/23
185.227.146.0/23
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
41:31:34:80:52:1b:ef:0e:1d:af:71:03:61:2c:97:b6:01:6a:
b5:d3:ed:d8:4c:32:e9:eb:db:da:50:42:71:ce:59:31:77:30:
a8:73:5d:f1:6d:d0:61:9d:66:b5:3c:8b:97:60:65:b7:63:45:
21:10:76:8c:7b:d6:64:f6:07:66:95:3b:14:52:f2:7e:c2:2b:
19:cb:a6:57:26:74:1b:1c:47:d3:70:89:68:2d:f0:7d:b3:a2:
d5:5f:df:fa:4e:6e:2c:d1:3b:8b:11:66:53:78:08:5f:d0:f4:
47:06:df:08:f8:1d:1e:02:37:2a:be:af:84:87:4a:c4:ff:2d:
25:34:d2:a2:ae:d5:af:da:dd:9c:82:cf:51:98:d6:de:55:7f:
7d:14:f3:51:a5:46:95:c1:90:a9:75:99:a5:a3:46:83:8a:a0:
ba:b6:bf:b1:0d:50:ef:51:bf:23:db:f6:d7:48:01:28:41:8d:
d4:c8:c3:ec:d7:85:28:45:0d:90:2b:ae:38:e6:a5:f1:c1:3b:
ad:a1:42:50:d6:f3:91:7d:1f:e2:cd:e2:95:b1:be:7b:18:32:
1b:26:67:da:37:12:23:8e:84:18:6a:dc:c2:7c:a5:cd:a6:d7:
44:fb:c9:9e:99:8c:67:66:2a:d1:a4:f5:44:69:a0:f2:5b:38:
cc:23:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:06 2025 by rpki-client