Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lsI5f72fjYzFPYJdr1rtMSCLGD4.roa
File: lsI5f72fjYzFPYJdr1rtMSCLGD4.roa (raw, json)
Hash identifier: bThr4VbB676fXQaaLdEUaM3X07UtQF98XezteNJwU2g=
Subject key identifier: 96:C2:39:7F:BD:9F:8D:8C:C5:3D:82:5D:AF:5A:ED:31:20:8B:18:3E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A552555730805F90C54A809C20DC15A47
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lsI5f72fjYzFPYJdr1rtMSCLGD4.roa
Signing time: Sat 02 Sep 2023 09:07:04 +0000
ROA not before: Sat 02 Sep 2023 09:07:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.225.20.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.223.83.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.226.106.0/24 maxlen: 24
45.90.19.0/24 maxlen: 24
185.221.23.0/24 maxlen: 24
185.221.20.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.246.114.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 11:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:55:25:55:73:08:05:f9:0c:54:a8:09:c2:0d:c1:5a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 2 09:07:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96c2397fbd9f8d8cc53d825daf5aed31208b183e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:32:37:6a:02:ab:8a:e0:cf:ca:eb:35:5a:
b0:8f:18:e9:af:69:8d:52:c8:65:55:3d:c3:44:43:
d7:f1:ee:45:e7:f5:9c:c7:09:c2:48:dc:f0:ab:c5:
50:0f:02:2c:1f:b9:d6:70:4b:6d:ae:cf:49:7a:35:
26:71:41:38:45:65:10:26:8e:a6:0a:27:f0:d7:16:
7b:9d:06:51:d6:24:80:fe:88:bd:1a:67:34:6c:77:
b3:a4:a8:b5:6e:82:ee:80:90:14:9a:dc:fd:4d:c6:
d6:d6:f8:24:b8:c3:f3:58:28:0f:2e:9c:05:3c:19:
97:3c:57:6e:26:61:36:86:a4:ff:d8:3a:5f:7c:07:
74:b9:24:5a:75:11:fe:8c:13:18:46:89:fc:6b:47:
77:7f:3f:80:81:fe:3b:da:dc:bc:35:23:8e:7c:f0:
11:c4:9f:63:1b:e9:73:ae:12:42:3a:43:46:70:2f:
be:41:8b:45:bd:59:4b:d5:33:d8:08:a5:07:d8:54:
06:5f:e3:87:b7:41:e3:82:82:ef:ed:e6:61:72:02:
f2:ff:36:b6:b7:87:a0:21:9d:b6:4d:55:91:4e:c4:
2e:5c:eb:46:44:90:67:b3:fb:6b:b5:86:f7:d3:29:
f4:bd:d1:f5:43:97:9c:ea:cd:ea:d0:83:73:8c:3d:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C2:39:7F:BD:9F:8D:8C:C5:3D:82:5D:AF:5A:ED:31:20:8B:18:3E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lsI5f72fjYzFPYJdr1rtMSCLGD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.90.19.0/24
45.147.224.0/24
185.210.232.0/24
185.220.249.0/24
185.221.20.0/24
185.221.22.0/23
185.222.29.0/24
185.223.80.0/24
185.223.83.0/24
185.225.0.0/23
185.225.20.0/24
185.225.22.0/24
185.226.106.0/24
185.227.145.0/24
185.228.75.0/24
185.246.112.0/24
185.246.114.0/23
185.251.229.0/24
185.251.231.0/24
193.58.144.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:65:c7:ae:aa:02:83:a8:32:09:60:c6:63:c2:99:9a:16:11:
cb:3e:2f:14:ac:15:0f:97:e9:8c:03:22:9c:42:87:a6:74:a2:
10:47:dc:2f:d2:1d:ab:40:dd:09:e8:cf:f8:aa:cf:da:86:89:
4e:8f:a6:25:a6:23:44:a0:42:7c:36:6e:58:f1:09:d0:64:d1:
58:c6:ff:11:9e:ea:99:e8:73:59:0c:ec:d3:ec:87:a5:ac:fa:
f7:a3:78:8c:b6:6f:4a:33:83:70:4a:88:52:89:5d:a2:1b:ca:
2f:fd:97:fb:12:9f:42:c6:1f:27:bd:3f:92:6a:9f:c6:e0:aa:
fb:8b:43:0c:63:98:21:a6:14:1c:1a:c9:e6:84:ae:cc:f5:fc:
8e:39:58:d7:b0:19:c6:cd:e9:51:d7:d1:fb:91:61:12:33:c9:
97:f9:58:80:39:f6:c8:26:4f:da:52:f3:4c:6d:d5:79:c0:37:
f8:fc:c8:4f:c6:19:fc:69:4d:42:c0:e6:29:22:df:1a:81:65:
13:cd:40:82:56:f8:23:bd:87:39:6d:44:a1:6d:2f:f7:ec:36:
2b:8b:40:55:52:96:3c:f6:f7:7a:f2:ff:f0:02:ca:72:8f:31:
f3:5b:6a:17:14:07:f2:ea:b8:83:8c:00:a4:c5:59:fc:1d:e8:
54:85:06:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org