Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mscqcOsWkErUtNiuHGmLulpTWOk.roa
File: mscqcOsWkErUtNiuHGmLulpTWOk.roa (raw, json)
Hash identifier: JEdPPQvhTnAb9fprNMmuunxFoQAeR7uttQw4A7RnXxY=
Subject key identifier: 9A:C7:2A:70:EB:16:90:4A:D4:B4:D8:AE:1C:69:8B:BA:5A:53:58:E9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A5FDFEA83A3663A6DCB619B7753A13F64
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mscqcOsWkErUtNiuHGmLulpTWOk.roa
Signing time: Mon 04 Sep 2023 11:07:04 +0000
ROA not before: Mon 04 Sep 2023 11:07:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.225.20.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.223.83.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.226.106.0/24 maxlen: 24
45.90.19.0/24 maxlen: 24
185.221.20.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.246.114.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.36.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 19:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:df:ea:83:a3:66:3a:6d:cb:61:9b:77:53:a1:3f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 4 11:07:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ac72a70eb16904ad4b4d8ae1c698bba5a5358e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:ae:62:bb:7b:c6:55:aa:7b:86:c1:15:30:
09:db:05:f3:81:78:a9:08:8f:13:0e:d4:47:54:07:
37:e7:c8:ab:35:d7:58:00:41:b3:98:aa:50:e5:e7:
b9:7f:b7:79:dd:52:a3:15:f3:e9:c8:74:b7:6f:32:
f3:02:3e:63:f4:8e:49:dc:c5:24:c6:9f:25:b8:cd:
ec:ed:c5:e6:6e:2c:04:b5:85:0e:68:65:cb:a2:f7:
d1:5d:de:05:c1:59:0b:65:51:d9:e0:1b:c2:05:95:
33:38:e0:15:02:af:75:86:bd:32:d4:94:64:15:b9:
6f:34:83:06:f1:97:04:c2:1c:9d:2b:f7:7b:7a:46:
02:ef:21:16:0f:f3:44:c0:33:71:4c:9e:e4:70:ca:
a8:c0:30:0e:05:18:a5:88:ee:2a:18:b5:fe:a9:c4:
b7:61:ab:e6:ef:9f:09:bf:ef:df:5a:75:20:35:12:
3e:61:70:9f:73:26:12:05:ec:ea:8d:a3:d8:f4:4f:
03:c5:8c:9e:0b:b9:b8:23:f1:2d:00:ce:8c:e9:17:
50:68:b5:11:e3:3b:46:d7:d2:ba:40:de:6c:c9:69:
9e:fd:4f:f7:be:2d:68:43:90:f6:3f:35:93:6c:d0:
cc:b8:3b:26:cc:45:eb:6d:f9:35:bd:63:c3:2b:e4:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C7:2A:70:EB:16:90:4A:D4:B4:D8:AE:1C:69:8B:BA:5A:53:58:E9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mscqcOsWkErUtNiuHGmLulpTWOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.90.19.0/24
45.147.224.0/24
185.36.205.0/24
185.220.249.0/24
185.221.20.0/24
185.222.29.0/24
185.223.80.0/24
185.223.83.0/24
185.225.0.0/23
185.225.20.0/24
185.225.22.0/24
185.226.106.0/24
185.227.145.0/24
185.228.75.0/24
185.246.112.0/24
185.246.114.0/23
185.251.229.0/24
185.251.231.0/24
193.58.144.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:40:ec:34:cf:0e:b6:f6:d5:d7:51:4b:dc:34:03:b4:35:09:
a0:0c:8f:b9:d3:45:3a:dc:74:da:bb:67:32:71:7f:c1:fe:b9:
16:8a:aa:b7:fd:ab:d3:cb:f7:3c:55:cf:02:e8:56:fe:c6:7f:
1f:da:32:45:db:ef:44:3e:b8:dd:97:24:ce:24:84:04:a8:1f:
be:ee:25:75:ee:94:72:f2:63:96:78:b9:47:36:46:ed:fa:1c:
40:04:f8:6d:d0:ea:89:f7:46:7f:45:12:a5:bc:4e:92:57:48:
aa:29:a3:6c:4d:24:77:73:7a:64:44:e6:0a:77:33:eb:77:76:
4e:5b:f9:e9:12:72:9e:86:ea:52:51:40:a4:10:dd:03:25:cd:
ea:c9:4e:72:72:6c:ac:6e:9c:17:38:03:4b:98:20:2b:b4:37:
16:b5:be:20:10:16:d9:6b:3e:f3:da:13:88:f0:c1:9e:43:25:
e5:d0:4f:ff:86:79:88:ab:fa:1a:eb:ec:ff:13:ac:54:3b:28:
6a:01:ca:49:eb:ac:9a:a4:84:eb:0a:88:ee:01:20:3a:fb:71:
ac:83:50:57:91:6c:21:85:58:4b:0d:66:5a:4b:57:f2:e7:b7:
5b:69:21:a1:6d:a8:ee:8f:3c:76:ef:6e:53:80:60:b5:74:8a:
5b:53:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org