Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/m1Zl6H0g6DxqaV2yf6xyjhVt9Ls.roa
File: m1Zl6H0g6DxqaV2yf6xyjhVt9Ls.roa (raw, json)
Hash identifier: p/YTMRju/FLM1pSqyr5ino8S4MSlmpL263OZfUf5Wak=
Subject key identifier: 9B:56:65:E8:7D:20:E8:3C:6A:69:5D:B2:7F:AC:72:8E:15:6D:F4:BB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A4341DFBECA41D0F3BA8095FE4FED4CF1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/m1Zl6H0g6DxqaV2yf6xyjhVt9Ls.roa
Signing time: Tue 29 Aug 2023 21:45:05 +0000
ROA not before: Tue 29 Aug 2023 21:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.225.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.230.52.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.0.0/24 maxlen: 24
185.194.177.0/24 maxlen: 24
185.223.81.0/24 maxlen: 24
185.223.83.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.226.106.0/24 maxlen: 24
185.221.23.0/24 maxlen: 24
185.221.20.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Aug 2023 11:47:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:41:df:be:ca:41:d0:f3:ba:80:95:fe:4f:ed:4c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 29 21:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b5665e87d20e83c6a695db27fac728e156df4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:01:ad:e1:77:ef:55:a6:ef:dd:f5:0d:51:
3c:ad:4f:2c:e9:0a:aa:30:ce:52:d3:72:fd:5b:fc:
28:a4:af:17:c8:04:aa:d4:03:08:a1:5c:83:42:a2:
39:4d:a6:66:9c:c8:61:b9:e9:a4:28:b9:81:f0:ea:
eb:73:8d:77:fe:7b:e0:c2:c5:a1:96:a4:f0:da:aa:
75:ac:a6:f1:fe:1d:f8:55:a6:60:ca:22:22:59:47:
56:c5:79:48:9b:82:e0:26:c9:2b:04:48:da:37:5a:
4e:de:31:c0:36:3a:d6:55:e3:71:51:b3:8d:b2:cb:
aa:3e:a1:99:5e:63:65:a6:1e:c7:df:85:15:2e:e5:
68:b0:15:75:3e:98:c5:57:6d:37:65:4d:8a:8b:3e:
65:28:e8:9b:fa:78:69:70:4c:37:5c:a4:00:c0:97:
61:b4:5e:64:df:fc:a1:c2:d5:fd:07:f5:e5:0b:b3:
97:69:89:a4:97:67:c3:69:be:d6:ae:0c:4a:f6:42:
5f:19:63:c6:7e:69:18:31:d9:47:f3:42:5d:57:3c:
21:d2:a3:7c:27:e2:1e:36:4f:23:6e:cc:07:43:5f:
91:c9:f2:0b:d6:bf:a4:ec:41:f2:12:83:d3:34:88:
fa:48:ba:2f:74:32:15:ca:02:fb:3e:12:d7:8d:6d:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:56:65:E8:7D:20:E8:3C:6A:69:5D:B2:7F:AC:72:8E:15:6D:F4:BB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/m1Zl6H0g6DxqaV2yf6xyjhVt9Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.194.177.0/24
185.209.75.0/24
185.210.232.0/24
185.218.101.0/24
185.220.249.0/24
185.221.20.0/24
185.221.22.0/23
185.222.29.0/24
185.223.80.0/23
185.223.83.0/24
185.225.0.0/23
185.225.20.0/24
185.225.22.0/24
185.226.106.0/24
185.227.145.0/24
185.228.75.0/24
185.230.52.0/24
185.246.115.0/24
185.251.229.0/24
185.251.231.0/24
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
Signature Algorithm: sha256WithRSAEncryption
56:3c:f6:86:7f:b6:d0:db:d0:f8:4f:ef:a0:90:e8:e3:dd:83:
82:0d:ac:53:16:51:ff:df:32:6e:ab:40:f1:3f:0c:cd:c7:3c:
c3:59:6e:6e:43:fd:13:8f:75:cb:f4:7d:82:55:2b:4b:8a:91:
71:3e:6b:c6:01:43:eb:60:32:8d:b8:a6:fd:b1:f3:63:94:d0:
af:96:1e:93:b8:aa:35:06:a1:ee:c1:91:44:9a:3c:d4:6f:f2:
34:4a:d1:4e:f6:3e:af:3f:d7:52:49:90:f5:65:e8:af:da:52:
46:c7:22:96:86:5c:66:0e:13:48:a9:da:23:f2:21:af:16:99:
7d:fb:b7:ca:b0:b6:53:2e:66:40:f7:fb:c4:9f:27:7b:ad:85:
ec:bf:65:00:5f:cf:e1:d0:43:ed:cc:1b:29:3f:c6:ba:c0:ac:
c0:53:62:42:b9:76:4f:db:4a:e8:1d:ff:f2:09:e0:41:f7:26:
e2:7e:81:46:53:ca:32:f8:b6:1f:79:0a:12:ab:b5:de:28:24:
33:48:58:02:c4:ef:1d:16:c0:49:74:9e:f5:7f:37:ca:79:0a:
ae:f3:c2:c9:0b:44:b5:c6:35:54:4a:25:90:e7:43:e3:0a:3f:
52:11:8c:50:2d:af:0e:bc:50:2d:cc:c4:da:29:81:1d:d9:cb:
66:46:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org