Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/h2VaLYa-bifxllpksAyJUwl_jyI.roa
File: h2VaLYa-bifxllpksAyJUwl_jyI.roa (raw, json)
Hash identifier: fK/2WmjeznlqcLz/vlH9KtoHCiPQrL16ieIYA40LZ3c=
Subject key identifier: 87:65:5A:2D:86:BE:6E:27:F1:96:5A:64:B0:0C:89:53:09:7F:8F:22
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01930C2F878D821D9EE485B602C9C37CF88B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/h2VaLYa-bifxllpksAyJUwl_jyI.roa
Signing time: Fri 08 Nov 2024 14:31:01 +0000
ROA not before: Fri 08 Nov 2024 14:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 17:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0c:2f:87:8d:82:1d:9e:e4:85:b6:02:c9:c3:7c:f8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 8 14:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87655a2d86be6e27f1965a64b00c8953097f8f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:a0:50:45:17:36:e2:22:bb:9a:3a:d5:6d:
16:36:9e:f4:2e:12:bf:8e:ca:28:b2:73:35:69:31:
98:23:6d:9f:f7:77:16:33:e6:b6:8e:81:8a:02:47:
21:76:93:ca:e5:f4:46:88:dc:38:99:a0:84:59:ac:
ba:9c:3e:1c:41:79:54:aa:6f:0f:ec:05:2a:36:79:
78:78:1e:f5:39:12:22:27:76:cb:71:56:2f:b8:03:
74:f5:b9:88:d6:62:1a:05:de:f6:43:9e:b2:e2:ba:
b5:61:2e:42:e3:f9:04:cf:43:c9:f3:16:47:fb:09:
38:79:64:ae:04:33:f1:8e:8f:43:24:6d:76:a4:d0:
da:6b:9b:38:04:23:ea:09:e0:a6:b9:61:84:bb:a5:
12:0b:55:82:1d:56:0d:ef:dd:c9:0a:31:99:d4:cd:
74:a5:ea:81:17:4c:98:3a:4c:c6:5e:82:fd:25:60:
68:1b:15:27:dc:15:10:fa:6e:a2:a0:96:d0:36:cd:
81:26:8a:c4:64:ee:24:b4:a7:e3:65:6a:00:2a:e6:
88:b1:d8:c9:46:27:cf:6c:de:d2:9d:2e:ba:37:a8:
2c:04:7f:cb:00:af:52:bb:00:95:aa:04:dd:dd:ec:
84:9d:c9:b8:82:58:b7:df:1b:38:fc:89:3f:f4:fd:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:65:5A:2D:86:BE:6E:27:F1:96:5A:64:B0:0C:89:53:09:7F:8F:22
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/h2VaLYa-bifxllpksAyJUwl_jyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.218.101.0/24
185.220.250.0/23
185.225.0.0/23
185.227.146.0/23
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:a4:14:cb:e9:ef:d3:17:78:0b:a1:bd:9d:39:41:15:b4:df:
69:47:41:b4:7e:8c:3a:1b:5f:65:79:b2:2a:5c:28:e6:e6:1e:
a2:05:73:89:cb:43:37:34:36:36:6e:67:32:89:85:e8:f0:76:
85:07:8b:82:57:7d:db:f0:c4:27:48:b1:ec:3e:aa:92:b0:8f:
99:2e:4b:a5:9f:64:47:d8:66:ce:19:d4:10:bf:5a:53:36:27:
50:df:63:ea:27:a1:b7:87:6a:dc:3d:4d:24:41:38:6f:da:21:
3d:84:f0:23:bf:2b:2f:36:a9:78:7e:4f:e9:b7:d6:2e:fa:a2:
aa:75:ca:13:e3:b1:78:3e:0a:2e:3f:94:5b:a6:e4:11:da:90:
1c:f4:48:d9:d0:27:df:9b:30:71:b4:97:26:33:5d:79:62:74:
26:b7:ab:48:98:5c:f3:ef:22:b7:99:a7:5c:f7:93:c9:0a:22:
67:c6:4f:5c:5c:4b:4f:f6:a3:8f:b8:c1:6c:0f:5d:b5:a3:1c:
a5:46:e3:bd:fd:65:a2:57:e9:69:89:ef:1f:10:55:98:cd:e0:
96:ca:7e:cf:60:f3:9f:fb:e3:bd:47:db:34:5b:0d:05:e3:74:
95:e2:cb:c1:7f:ae:b7:d1:62:18:f3:5c:77:51:41:24:05:cb:
3b:18:3b:4c
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZMML4eNgh2e5IW2AsnDfPiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQxMTA4MTQzMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzY1NWEyZDg2YmU2ZTI3ZjE5NjVhNjRiMDBjODk1MzA5N2Y4ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb2gUEUXNuIiu5o61W0WNp70LhK/
jsoosnM1aTGYI22f93cWM+a2joGKAkchdpPK5fRGiNw4maCEWay6nD4cQXlUqm8P
7AUqNnl4eB71ORIiJ3bLcVYvuAN09bmI1mIaBd72Q56y4rq1YS5C4/kEz0PJ8xZH
+wk4eWSuBDPxjo9DJG12pNDaa5s4BCPqCeCmuWGEu6USC1WCHVYN793JCjGZ1M10
peqBF0yYOkzGXoL9JWBoGxUn3BUQ+m6ioJbQNs2BJorEZO4ktKfjZWoAKuaIsdjJ
RifPbN7SnS66N6gsBH/LAK9SuwCVqgTd3eyEncm4gli33xs4/Ik/9P02SwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFIdlWi2Gvm4n8ZZaZLAMiVMJf48iMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvaDJWYUxZYS1iaWZ4bGxwa3NBeUpVd2xfanlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALQgVAwQA
uX5SAwQAudplAwQBudz6AwQBueEAAwQBueOSAwQBwQhwAwQBwTqSMA0GCSqGSIb3
DQEBCwUAA4IBAQC7pBTL6e/TF3gLob2dOUEVtN9pR0G0fow6G19lebIqXCjm5h6i
BXOJy0M3NDY2bmcyiYXo8HaFB4uCV33b8MQnSLHsPqqSsI+ZLkuln2RH2GbOGdQQ
v1pTNidQ32PqJ6G3h2rcPU0kQThv2iE9hPAjvysvNql4fk/pt9Yu+qKqdcoT47F4
PgouP5RbpuQR2pAc9EjZ0CffmzBxtJcmM115YnQmt6tImFzz7yK3madc95PJCiJn
xk9cXEtP9qOPuMFsD121oxylRuO9/WWiV+lpie8fEFWYzeCWyn7PYPOf++O9R9s0
Ww0F43SV4svBf6630WIY81x3UUEkBcs7GDtM
-----END CERTIFICATE-----
Generated at Thu Nov 14 20:09:25 2024 by rpki-client on console-fra.rpki-client.org