Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jWErhcicpAyxYzrUtXNpY1tO9-0.roa
File: jWErhcicpAyxYzrUtXNpY1tO9-0.roa (raw, json)
Hash identifier: NZaEx21dm6Lsscm2FaSUOcFVG5goRakahzwTdNI5B88=
Subject key identifier: 8D:61:2B:85:C8:9C:A4:0C:B1:63:3A:D4:B5:73:69:63:5B:4E:F7:ED
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AD0A2D861A7253B5142C6F07957C8FC59
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jWErhcicpAyxYzrUtXNpY1tO9-0.roa
Signing time: Tue 26 Sep 2023 08:37:27 +0000
ROA not before: Tue 26 Sep 2023 08:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.209.36.0/23 maxlen: 24
185.220.249.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
176.125.248.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 11:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:a2:d8:61:a7:25:3b:51:42:c6:f0:79:57:c8:fc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 26 08:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d612b85c89ca40cb1633ad4b57369635b4ef7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ac:62:63:e0:93:d9:97:60:26:e3:7b:c3:21:
6e:9a:8b:49:fb:ba:e3:cd:e0:d4:c7:6e:f2:f9:81:
08:37:a5:19:10:77:8d:8b:8e:7d:ce:a0:ff:60:20:
e6:68:32:83:ff:00:ae:a9:47:c9:f5:40:10:27:7e:
a1:b8:34:4a:06:c1:53:89:7e:c2:da:58:0c:d3:ee:
54:7b:28:3b:de:a1:2e:a1:7a:c0:bf:8d:33:86:57:
17:1b:85:76:47:a1:0b:52:95:d2:42:08:51:76:09:
60:70:8a:1c:64:97:f2:a8:a4:98:a0:ce:2a:d7:a5:
29:05:93:1f:96:38:dd:09:65:8a:a2:d5:39:9e:b6:
59:42:9d:42:e7:ee:84:62:0c:bf:55:18:5b:09:1f:
6f:d6:42:b7:5b:8a:bf:31:0c:f5:40:3b:c2:ac:b5:
7e:d2:11:96:9b:58:e2:b7:38:72:64:cc:99:83:6b:
70:6d:bf:21:b9:b8:39:22:64:5c:0c:8c:cd:4f:25:
12:f0:80:43:5d:a9:34:00:c8:9e:fe:85:6c:50:74:
7e:67:42:6b:8b:e2:fb:1d:0d:79:76:8a:24:ca:2a:
0b:1f:7d:a3:59:bf:b8:31:39:30:52:7e:ba:08:5c:
93:99:60:69:60:bd:a2:e9:24:26:b7:46:30:50:b0:
69:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:61:2B:85:C8:9C:A4:0C:B1:63:3A:D4:B5:73:69:63:5B:4E:F7:ED
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jWErhcicpAyxYzrUtXNpY1tO9-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.248.0/24
185.121.12.0/22
185.199.159.0/24
185.206.248.0/23
185.206.251.0/24
185.209.36.0/23
185.210.152.0/22
185.220.249.0/24
185.223.76.0/24
185.223.80.0/24
185.225.2.0/24
185.226.105.0/24
185.226.107.0/24
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:a5:84:95:6a:b4:cd:da:28:7d:f4:c2:92:b6:63:7f:cd:16:
6b:57:2a:ea:e1:b7:7d:97:9f:8b:a6:59:3d:f5:2b:5c:e5:60:
5d:a4:7b:8e:c4:c5:a3:69:9e:4d:83:c9:90:c8:94:3d:c8:e4:
b6:16:ea:d1:c2:fc:60:8a:e1:66:f4:87:a7:9a:41:d6:50:34:
90:19:f8:f0:0f:28:35:8d:19:b7:a1:f5:d7:6f:92:ed:d7:c5:
dc:c0:ee:4e:de:a7:4f:1f:85:ac:4f:0b:4c:83:e9:aa:f8:c3:
4d:b0:a1:a8:05:04:ed:20:66:1b:5e:50:b0:1c:1c:ef:18:0a:
f7:6b:30:63:54:21:e0:a8:c8:80:0f:83:96:be:15:b8:7d:7c:
38:0e:ee:a0:9e:b9:db:f7:39:e0:ea:47:67:64:61:01:f2:29:
21:d2:b6:ee:63:81:37:8b:8e:df:0a:7e:15:80:89:1d:63:c5:
67:3b:9c:91:8b:70:08:f7:32:ab:22:de:3e:5b:85:bf:f9:c8:
f3:3e:ab:c4:5d:13:96:fc:8b:a1:a8:78:5f:41:06:35:70:aa:
51:62:f4:af:8f:2d:4d:8f:2b:da:2a:60:1e:cd:80:df:a0:3d:
07:88:b4:fe:23:7f:c0:c9:0f:aa:4c:23:fa:d2:f3:f7:5c:f7:
88:65:a1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org