Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l8i9wuAsJiM3Pj5cwjjSpuqBo1c.roa
File: l8i9wuAsJiM3Pj5cwjjSpuqBo1c.roa (raw, json)
Hash identifier: S8LSb9ex0aXAyteFo77QGU+Fgir3RnBE79Sm8x5KmvE=
Subject key identifier: 97:C8:BD:C2:E0:2C:26:23:37:3E:3E:5C:C2:38:D2:A6:EA:81:A3:57
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A6C0C3757A030311212EF31F064A3D969
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l8i9wuAsJiM3Pj5cwjjSpuqBo1c.roa
Signing time: Wed 06 Sep 2023 19:50:54 +0000
ROA not before: Wed 06 Sep 2023 19:50:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.223.80.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.226.106.0/24 maxlen: 24
45.90.19.0/24 maxlen: 24
185.221.20.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.246.114.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.36.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 19:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6c:0c:37:57:a0:30:31:12:12:ef:31:f0:64:a3:d9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 6 19:50:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97c8bdc2e02c2623373e3e5cc238d2a6ea81a357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3d:4e:46:45:1a:6c:13:25:02:46:42:f0:ff:
cb:7a:7a:76:3c:a0:ac:b9:2d:20:50:00:6f:f2:98:
a9:63:e9:8b:d1:a6:b8:67:cc:c9:3f:c0:1b:90:83:
91:e0:a5:50:e0:dd:d5:62:6f:ee:e5:68:49:7a:40:
f5:01:74:56:e7:0b:b3:81:a8:c4:10:2a:30:dc:02:
14:08:fb:e3:b7:00:41:f2:dc:97:2a:a2:25:73:e2:
64:bb:e3:07:c7:73:bd:d9:3f:36:bc:98:78:4c:8b:
b1:fe:a9:34:1a:b6:74:17:2c:b8:ca:42:46:04:51:
c9:7f:fe:02:ce:25:58:e2:38:ae:42:9d:0d:f7:68:
aa:6d:5f:6e:ae:af:76:9e:fb:de:f1:33:50:23:7e:
8f:c1:8a:04:91:22:a9:ec:06:bb:b7:b1:78:1a:16:
09:42:56:ac:f0:ed:86:e3:fe:20:78:20:81:1f:02:
27:12:76:e6:e0:7d:a7:da:07:5e:0b:6e:74:a9:d0:
f0:a0:65:70:2f:8b:15:6c:8f:4a:94:3a:3c:07:99:
00:21:ae:01:5d:1b:58:b6:30:83:43:c6:90:f5:69:
f3:ff:a6:61:f2:5c:42:45:94:21:3a:35:fd:34:bd:
70:9b:77:29:61:55:5e:3b:35:c4:9e:f1:c1:0e:e8:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C8:BD:C2:E0:2C:26:23:37:3E:3E:5C:C2:38:D2:A6:EA:81:A3:57
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l8i9wuAsJiM3Pj5cwjjSpuqBo1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.90.19.0/24
45.147.224.0/24
185.36.205.0/24
185.220.249.0/24
185.221.20.0/24
185.222.29.0/24
185.223.80.0/24
185.225.0.0/23
185.225.22.0/24
185.226.106.0/24
185.227.145.0/24
185.228.74.0/23
185.246.112.0/24
185.246.114.0/23
185.251.229.0/24
185.251.231.0/24
193.58.144.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:79:ce:20:bc:09:94:3e:ba:12:d4:f2:c1:05:fa:30:d9:83:
d6:95:e7:1c:3c:9a:0d:65:40:f8:da:d3:b2:2b:70:4c:a8:9b:
9e:43:44:86:ad:ec:30:31:b5:49:14:1b:a9:c8:23:9d:c4:41:
e4:ed:43:4a:3a:b0:1e:b6:33:49:d4:b9:c1:fc:b1:86:0f:3c:
83:da:5d:c8:21:16:14:36:79:9f:5d:26:60:11:33:64:b1:f8:
fe:0d:c1:70:e7:c9:59:2b:52:f0:23:41:b9:d9:7b:8a:83:24:
47:c3:3f:0f:cf:48:d1:88:1a:30:38:61:68:b1:0e:59:ad:08:
41:de:d8:d8:94:27:b3:26:5b:75:78:cf:f4:1e:38:f6:dc:fe:
66:ed:a6:d0:5a:41:39:ec:36:75:67:af:30:3f:fb:fd:b7:a8:
99:49:63:67:ce:c7:98:ba:9c:77:a3:2e:84:91:41:ae:e4:f1:
23:c6:e7:71:2b:ca:4c:b0:f0:6a:c9:92:8a:01:71:b7:3f:ee:
49:42:e3:08:0e:e5:8a:c9:e4:42:8f:2c:c8:f3:98:d6:fd:d8:
8a:5e:a1:6e:25:c0:67:fe:65:ca:cf:ef:df:a0:9d:3b:77:89:
63:36:bb:ca:47:b8:1e:28:63:f7:e3:cb:15:e5:e0:13:5b:03:
32:7b:0d:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org