Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mebhELGjDrxW0ZZ1XOMhhVy8mhg.roa
File: mebhELGjDrxW0ZZ1XOMhhVy8mhg.roa (raw, json)
Hash identifier: M9izJtfQajp9H2XR9vOECnIjSgY94pfY/V8/FLowvyQ=
Subject key identifier: 99:E6:E1:10:B1:A3:0E:BC:56:D1:96:75:5C:E3:21:85:5C:BC:9A:18
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B492D73747018D0BF1A426BB318936396
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mebhELGjDrxW0ZZ1XOMhhVy8mhg.roa
Signing time: Thu 19 Oct 2023 18:23:17 +0000
ROA not before: Thu 19 Oct 2023 18:23:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.209.38.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.251.229.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.223.80.0/24 maxlen: 24
185.222.30.0/23 maxlen: 24
185.226.107.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
185.240.122.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.114.0/24 maxlen: 24
185.238.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 09:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:2d:73:74:70:18:d0:bf:1a:42:6b:b3:18:93:63:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 19 18:23:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99e6e110b1a30ebc56d196755ce321855cbc9a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:d8:06:9a:6c:5d:37:10:d7:f7:d5:74:71:
54:18:8d:71:7a:2e:b4:5c:31:ce:fb:00:f5:8f:2f:
a9:e2:72:0d:89:02:50:65:1d:39:36:ba:3c:9c:f0:
e0:4a:e2:83:36:41:f3:1e:a2:55:de:8e:ed:c6:21:
9a:99:f2:80:ed:a7:48:6d:af:f4:34:7c:e6:d0:bd:
92:80:23:5b:5c:5a:49:88:15:79:5b:f4:90:5d:b0:
6c:ba:e0:bc:e5:57:01:c8:96:53:34:59:2f:67:f5:
8e:dd:55:7a:5d:89:65:f9:31:27:fb:1f:6f:5a:33:
55:37:59:18:55:83:89:a6:91:b0:5e:8c:69:21:32:
11:96:a7:d5:2b:f6:d9:f8:01:5f:5a:33:6b:bd:bf:
ac:ff:9b:4f:24:65:41:a8:cd:8b:6a:42:5c:8c:8b:
73:b4:19:05:06:86:fa:14:44:fc:c3:ee:0d:b1:c7:
4c:bf:35:dc:47:e3:c2:1b:4f:13:d5:2e:d0:34:74:
86:2b:89:4b:bc:6e:2d:a2:17:19:28:e3:cc:64:c9:
44:22:4f:ca:15:b8:45:ab:6a:ee:28:9f:50:73:ef:
33:f8:a6:55:aa:ed:c5:2f:37:bc:18:b2:a0:36:10:
24:14:2f:1d:81:6d:f2:60:f3:82:9e:b7:30:c8:c2:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E6:E1:10:B1:A3:0E:BC:56:D1:96:75:5C:E3:21:85:5C:BC:9A:18
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mebhELGjDrxW0ZZ1XOMhhVy8mhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.209.38.0/24
185.220.250.0/23
185.222.30.0/23
185.223.80.0/24
185.225.0.0/23
185.226.107.0/24
185.238.229.0/24
185.240.122.0/24
185.246.114.0/24
185.251.229.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
35:7c:b4:ad:e7:5c:f1:51:b9:a8:ab:21:37:16:c1:34:d0:13:
d2:d1:fe:38:dc:ef:f2:ae:6b:02:8a:7d:41:e1:34:a3:24:24:
c1:4e:9e:f6:fd:dc:6e:7a:a0:ac:21:49:ce:c0:3d:8a:f7:b2:
86:48:82:e0:d8:7f:8a:00:98:54:f0:9b:15:ec:e3:11:63:09:
12:0c:f1:7b:51:7b:7d:b7:07:d2:a4:6e:8a:66:ec:71:2e:53:
46:66:54:51:57:45:0a:da:a9:56:94:99:32:af:45:70:41:b3:
09:f7:71:d3:1a:43:f8:3c:9e:79:ea:94:9a:b4:51:8a:38:18:
2d:31:2f:5c:52:f1:01:0a:df:9c:ed:15:bb:ba:81:74:d3:fa:
27:a6:77:b7:06:3a:2b:28:2f:64:8a:04:5d:2d:64:e4:6d:19:
ae:ff:5f:ea:7a:1e:7e:7c:ce:8e:d5:21:f2:27:c1:6a:50:2d:
c3:fe:d0:24:59:bc:81:f4:37:8a:52:fe:8c:6e:d3:78:72:88:
a5:84:ad:5f:15:2f:82:76:91:75:09:7c:61:80:c0:00:72:8c:
51:be:71:d4:4b:c6:89:c5:da:2e:6e:7c:8a:eb:38:4e:37:44:
cb:89:59:15:06:3d:10:9d:84:68:11:ee:89:99:65:13:8f:15:
d4:9a:98:26
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAYtJLXN0cBjQvxpCa7MYk2OWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMxMDE5MTgyMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWU2ZTExMGIxYTMwZWJjNTZkMTk2NzU1Y2UzMjE4NTVjYmM5YTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsLYBppsXTcQ1/fVdHFUGI1xei60
XDHO+wD1jy+p4nINiQJQZR05Nro8nPDgSuKDNkHzHqJV3o7txiGamfKA7adIba/0
NHzm0L2SgCNbXFpJiBV5W/SQXbBsuuC85VcByJZTNFkvZ/WO3VV6XYll+TEn+x9v
WjNVN1kYVYOJppGwXoxpITIRlqfVK/bZ+AFfWjNrvb+s/5tPJGVBqM2LakJcjItz
tBkFBob6FET8w+4NscdMvzXcR+PCG08T1S7QNHSGK4lLvG4tohcZKOPMZMlEIk/K
FbhFq2ruKJ9Qc+8z+KZVqu3FLze8GLKgNhAkFC8dgW3yYPOCnrcwyMLtAQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFJnm4RCxow68VtGWdVzjIYVcvJoYMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvbWViaEVMR2pEcnhXMFpaMVhPTWhoVnk4bWhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQALQgVAwQA
LZPgAwQAudEmAwQBudz6AwQBud4eAwQAud9QAwQBueEAAwQAueJrAwQAue7lAwQA
ufB6AwQAufZyAwQAufvlAwQBwTqSMA0GCSqGSIb3DQEBCwUAA4IBAQA1fLSt51zx
UbmoqyE3FsE00BPS0f443O/yrmsCin1B4TSjJCTBTp72/dxueqCsIUnOwD2K97KG
SILg2H+KAJhU8JsV7OMRYwkSDPF7UXt9twfSpG6KZuxxLlNGZlRRV0UK2qlWlJky
r0VwQbMJ93HTGkP4PJ556pSatFGKOBgtMS9cUvEBCt+c7RW7uoF00/onpne3Bjor
KC9kigRdLWTkbRmu/1/qeh5+fM6O1SHyJ8FqUC3D/tAkWbyB9DeKUv6MbtN4coil
hK1fFS+CdpF1CXxhgMAAcoxRvnHUS8aJxdoubnyK6zhON0TLiVkVBj0QnYRoEe6J
mWUTjxXUmpgm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org