Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hqozW9MJdA0QHbI06SjuEtjxPOQ.roa
File: hqozW9MJdA0QHbI06SjuEtjxPOQ.roa (raw, json)
Hash identifier: ETmiVc2fjPekAZso0xnp6eKSMG/6xM8rBhnETYR2j1s=
Subject key identifier: 86:AA:33:5B:D3:09:74:0D:10:1D:B2:34:E9:28:EE:12:D8:F1:3C:E4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018DF982644D9542F0F44ED430A59B9C52FB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hqozW9MJdA0QHbI06SjuEtjxPOQ.roa
Signing time: Fri 01 Mar 2024 10:14:48 +0000
ROA not before: Fri 01 Mar 2024 10:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.223.82.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.105.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.251.229.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 18:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:82:64:4d:95:42:f0:f4:4e:d4:30:a5:9b:9c:52:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 1 10:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86aa335bd309740d101db234e928ee12d8f13ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:8e:a5:58:e3:09:df:56:5a:c7:63:3d:0b:
24:2a:73:93:34:e3:ba:69:f9:4c:fb:e5:65:d8:3d:
3a:34:fa:a0:44:09:67:af:bc:18:90:94:38:8b:1a:
c9:f0:a8:60:f9:7a:71:16:9e:1e:b8:f2:b4:c7:33:
8e:fa:a5:d7:b7:8e:71:5a:8e:b2:18:f9:cc:0a:e9:
5b:d1:1b:08:ae:a4:3d:a6:59:f7:65:73:9a:d5:0a:
a2:b3:e3:1a:df:51:02:01:28:a9:3e:4c:cc:03:58:
ef:d8:89:4e:d1:b4:af:ed:3c:52:bd:46:4c:bf:e2:
03:1a:8f:40:77:a9:21:84:6b:d1:42:e3:88:71:fb:
0a:19:17:a7:25:ba:87:d9:05:58:6b:3b:a3:17:a4:
27:63:4e:21:83:e8:01:e3:84:fc:91:07:0a:c8:96:
b9:09:9a:f0:1d:9b:bf:5e:5c:06:42:9a:b7:99:e3:
26:c6:d0:83:8f:aa:d9:d6:b5:55:c7:06:85:ad:01:
4f:14:98:c9:d1:dd:ed:58:ad:e8:5b:46:f5:ad:7b:
d3:34:95:d1:b4:94:35:c9:9d:61:27:93:c8:9a:a2:
bc:0b:be:38:2f:f3:a6:2e:0f:33:ea:a0:af:91:27:
9e:64:3b:96:51:6c:d0:da:99:ee:72:e1:76:e5:2b:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AA:33:5B:D3:09:74:0D:10:1D:B2:34:E9:28:EE:12:D8:F1:3C:E4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hqozW9MJdA0QHbI06SjuEtjxPOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.210.235.0/24
185.220.250.0/23
185.223.82.0/24
185.225.0.0/23
185.226.105.0/24
185.227.146.0/23
185.251.229.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
91:b4:0a:f8:6d:b1:db:99:fe:06:56:7a:d6:3f:bc:4c:62:7a:
43:54:9d:5f:1e:dd:28:91:f6:95:90:6f:53:06:d6:fc:00:b8:
0d:8a:95:01:34:4d:d3:25:e1:fb:35:1d:25:e5:37:6f:83:b6:
b6:e7:ec:97:6a:3a:1b:3a:0e:76:de:1a:7d:ee:48:08:77:b1:
c8:fb:75:86:ad:77:b5:6f:03:47:f4:f3:b7:19:a2:1e:c3:cf:
99:24:04:b7:01:67:9b:40:15:9e:50:5c:71:7b:ac:37:9e:0b:
dc:81:b4:ae:42:64:37:a0:c3:e2:21:46:38:eb:b8:f5:9f:a9:
2c:67:ce:f1:9f:71:e3:ce:35:43:f0:46:f2:63:00:28:d3:ef:
1c:76:6e:b1:c5:9e:76:0b:26:3b:96:01:b4:d9:b0:ab:d5:a7:
d1:c4:5a:23:e5:2e:f3:af:ae:37:1b:97:9d:d3:8c:7d:5f:ee:
39:d7:d6:0d:28:ce:4b:4d:2d:bf:85:ab:06:58:c6:04:9c:e3:
00:a3:64:62:50:b1:62:bb:ed:87:32:29:dc:c7:bc:6c:be:1c:
1a:4e:17:af:8e:0f:82:3e:ca:7a:c8:85:dd:80:63:de:01:d1:
00:36:19:5d:c1:2d:a9:44:09:61:56:9c:85:a8:37:b6:b8:2e:
c4:50:00:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org