Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/liyGq1a2aP7I7Ca1sZsLzG7pSHc.roa
File: liyGq1a2aP7I7Ca1sZsLzG7pSHc.roa (raw, json)
Hash identifier: a8eWFHyJEf/cWRzBOPKs3nFehlhY23xYEVXWZv8/K5k=
Subject key identifier: 96:2C:86:AB:56:B6:68:FE:C8:EC:26:B5:B1:9B:0B:CC:6E:E9:48:77
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189E44732F7A689A094C9464D56D5F85584
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/liyGq1a2aP7I7Ca1sZsLzG7pSHc.roa
Signing time: Fri 11 Aug 2023 11:06:58 +0000
ROA not before: Fri 11 Aug 2023 11:06:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.225.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.230.52.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.230.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.194.177.0/24 maxlen: 24
185.223.81.0/24 maxlen: 24
185.223.83.0/24 maxlen: 24
185.222.31.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
185.220.251.0/24 maxlen: 24
185.220.250.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.226.106.0/24 maxlen: 24
185.218.23.0/24 maxlen: 24
185.221.20.0/24 maxlen: 24
185.221.21.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 14:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:47:32:f7:a6:89:a0:94:c9:46:4d:56:d5:f8:55:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 11 11:06:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=962c86ab56b668fec8ec26b5b19b0bcc6ee94877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:fd:b6:ca:ad:f5:43:4a:84:9f:a9:6f:c6:
3f:aa:5e:3e:ee:97:5d:9e:65:48:c0:d1:fa:57:b8:
17:28:ef:04:37:f7:7d:58:c1:f7:46:35:65:e5:79:
c9:ec:0e:0e:47:e3:9e:d3:38:77:5e:4c:aa:ec:7e:
9e:20:d9:01:7b:ed:cb:84:d8:00:06:46:e1:97:15:
11:56:39:80:b2:ce:4b:d6:3f:52:81:fe:63:f4:79:
6f:ce:5e:5d:48:33:6b:6a:4a:60:40:ed:63:97:60:
08:96:4d:32:f1:38:a5:75:72:cd:f9:11:17:4d:b9:
ba:2f:b8:b2:f8:34:2c:a8:1e:0f:8d:80:72:c2:64:
c3:68:69:27:8b:64:37:c6:12:dc:d9:95:87:c4:03:
07:da:f0:4e:98:28:1b:15:95:52:e6:10:86:89:f7:
38:a2:0c:eb:61:88:3f:6a:8a:d3:d8:75:3c:b7:30:
df:40:f2:83:6b:9f:ca:5e:c2:54:9a:88:2e:88:7f:
ab:07:4f:b8:e5:d1:d1:ea:a9:37:a4:6c:c9:f7:50:
9f:f4:47:21:76:79:81:49:08:fb:03:4d:5b:ae:53:
4b:6e:33:ea:1a:d2:d6:ec:dd:20:ef:dc:cd:c0:9f:
ad:dc:f3:a5:5d:1b:61:19:a3:c8:a9:2d:bf:ea:1f:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:86:AB:56:B6:68:FE:C8:EC:26:B5:B1:9B:0B:CC:6E:E9:48:77
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/liyGq1a2aP7I7Ca1sZsLzG7pSHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.194.177.0/24
185.209.73.0/24
185.209.75.0/24
185.210.232.0/24
185.210.235.0/24
185.218.23.0/24
185.218.101.0/24
185.220.250.0/23
185.221.20.0/23
185.222.30.0/23
185.223.81.0/24
185.223.83.0/24
185.225.0.0/23
185.225.20.0/24
185.225.22.0/24
185.226.106.0/24
185.227.144.0/23
185.228.75.0/24
185.230.52.0/24
185.246.115.0/24
185.251.229.0-185.251.230.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d1:55:38:eb:d4:d1:48:30:ba:60:f1:2d:5a:59:36:bc:db:
b2:6b:7f:0e:39:b7:90:2c:e3:0e:6c:eb:ba:e6:9e:e6:b3:c7:
ce:fe:ed:a5:c8:9a:29:90:e2:bf:0b:87:11:8e:52:02:9e:ae:
14:3e:14:a5:01:0f:b5:33:66:c0:40:c7:ad:1a:b4:c6:bc:53:
46:54:14:67:96:29:49:c2:8e:8f:ca:94:cf:9c:12:98:50:6b:
bf:d9:a0:f5:b5:93:d0:e0:05:ba:a2:c4:74:c0:45:a4:a6:84:
40:0b:25:20:f4:a7:65:c3:38:cf:7f:f9:91:87:55:a3:91:68:
36:c6:06:2c:6e:5d:85:2f:91:f7:ed:9e:6a:9a:6b:bb:32:86:
28:c0:0a:bd:ea:ce:44:7d:43:15:86:2a:e4:7e:27:3e:83:d2:
06:60:0a:9b:0a:98:23:33:90:f6:8e:5d:fa:91:49:12:b5:c0:
64:1b:bf:d9:86:22:3e:1f:a3:ec:f3:65:7d:3b:17:0a:18:8c:
9a:3a:92:88:75:ad:a6:f2:c1:be:e8:1d:44:e0:64:87:0d:3d:
21:b1:ce:e9:e8:74:c2:fa:76:96:94:39:83:e0:66:dc:7a:4d:
31:d4:80:f7:69:d7:8c:78:17:70:9b:be:63:43:79:ed:6f:b1:
84:04:63:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org