Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kqUxmzTJK4GFjJr0_tJhc4mLz9o.roa
File: kqUxmzTJK4GFjJr0_tJhc4mLz9o.roa (raw, json)
Hash identifier: GRR/9k9W9pr/qDjrMztx9zoCFaUp/7hF07ZmUKbtJh4=
Subject key identifier: 92:A5:31:9B:34:C9:2B:81:85:8C:9A:F4:FE:D2:61:73:89:8B:CF:DA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0191275B5F766122580E2D6680D5E7C54D67
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kqUxmzTJK4GFjJr0_tJhc4mLz9o.roa
Signing time: Tue 06 Aug 2024 11:03:04 +0000
ROA not before: Tue 06 Aug 2024 11:03:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:5b:5f:76:61:22:58:0e:2d:66:80:d5:e7:c5:4d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 6 11:03:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92a5319b34c92b81858c9af4fed26173898bcfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:8d:82:91:28:97:07:6b:c3:3c:e6:9f:06:
a3:98:d8:33:31:13:6e:00:00:26:8a:d3:a8:cc:80:
30:e5:66:a6:93:01:a2:c5:98:ed:21:40:d9:3b:99:
15:d9:dd:79:22:79:20:63:e7:c2:76:3d:79:24:95:
70:9c:1b:33:92:01:ed:1a:e5:95:06:8d:4b:47:ab:
cf:54:f1:d7:5f:56:b4:53:9e:5b:d9:4e:77:e4:cc:
86:99:44:8b:39:e7:e9:49:d2:15:c3:ff:52:20:55:
aa:9d:8a:d0:04:42:3a:49:2b:bf:a3:96:ef:a1:09:
ab:fd:40:05:d4:ca:b9:bd:60:44:43:87:0c:cd:91:
f4:10:64:ba:59:ae:f7:88:75:50:8a:1a:ad:bf:f4:
71:55:48:ee:fe:ed:fd:24:66:a7:7c:cd:ea:bf:eb:
40:72:ea:4d:38:1b:67:6f:f2:71:3a:47:ab:3e:cd:
1a:19:f6:60:2a:2e:b4:63:5f:e2:1f:55:db:a5:4c:
73:06:95:6d:94:04:0b:1f:1b:2c:65:2f:95:20:3c:
2b:ca:fd:2b:d9:b6:cf:08:2b:29:d5:be:7e:5d:91:
dd:1a:67:11:35:31:87:79:4c:fe:cb:82:6c:32:4c:
67:5a:37:c1:9b:14:cd:dc:86:cb:59:fe:e5:fc:a6:
1c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A5:31:9B:34:C9:2B:81:85:8C:9A:F4:FE:D2:61:73:89:8B:CF:DA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kqUxmzTJK4GFjJr0_tJhc4mLz9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.210.235.0/24
185.220.250.0/23
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:0a:bc:56:82:cd:c8:57:65:94:79:4e:39:d3:d2:e7:17:34:
0c:00:94:f2:2c:f4:ec:bc:ac:43:75:3f:64:92:b7:73:48:c5:
59:bb:1a:a0:45:e8:63:5a:1c:8b:85:1e:72:c3:13:c9:82:c1:
8a:7b:32:50:5b:3b:8e:a9:1a:24:6b:20:15:cb:ad:cb:45:1c:
0e:79:6c:f2:f1:f8:ca:a7:3b:ea:8e:b2:c3:df:f7:91:40:61:
3e:17:b9:2f:f1:1a:dc:ad:61:9e:db:a2:34:e2:54:8f:6c:53:
1e:d7:47:f5:f1:23:bb:75:b2:00:c5:b6:11:2b:cd:d7:17:2e:
49:5c:e0:fc:e5:6a:d3:73:5d:f6:89:f1:af:72:2e:f8:47:d0:
14:df:f3:67:61:30:26:a2:ac:1c:2e:60:a4:c8:1a:00:d9:ca:
d9:a6:cc:96:7e:a1:6d:b9:3a:6f:da:f9:ab:0f:52:02:64:23:
45:66:ec:5b:95:e7:c5:0d:8a:ab:3a:89:fc:95:92:85:ef:91:
4d:e5:f8:0c:9a:0a:fe:b0:f0:24:d5:67:63:4c:20:19:18:c7:
95:aa:d6:10:13:42:fa:07:d7:b2:1e:72:f4:1f:2a:08:9b:8e:
2c:fc:bb:cc:72:db:21:7b:aa:30:98:83:60:e0:13:26:c2:83:
bd:d4:09:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 18:15:44 2024 by rpki-client on console-fra.rpki-client.org