Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/msjcgxtNNhoCjM8mbcUjXpXbTL4.roa
File: msjcgxtNNhoCjM8mbcUjXpXbTL4.roa (raw, json)
Hash identifier: RZ7ghWxy32N+jXQA1BsodZHSpA4dRqlo2D//cVB6fyo=
Subject key identifier: 9A:C8:DC:83:1B:4D:36:1A:02:8C:CF:26:6D:C5:23:5E:95:DB:4C:BE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018BFB9005726C07A8DCA8CA6837361A4EBC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/msjcgxtNNhoCjM8mbcUjXpXbTL4.roa
Signing time: Thu 23 Nov 2023 09:43:21 +0000
ROA not before: Thu 23 Nov 2023 09:43:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.227.146.0/23 maxlen: 24
185.209.38.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.108.204.0/23 maxlen: 24
185.223.80.0/24 maxlen: 24
185.222.30.0/23 maxlen: 24
45.90.16.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.23.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 20:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:90:05:72:6c:07:a8:dc:a8:ca:68:37:36:1a:4e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 23 09:43:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ac8dc831b4d361a028ccf266dc5235e95db4cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:0d:10:a5:78:5b:94:31:e7:22:92:dc:59:
57:8b:7b:16:81:55:ef:1d:b5:e7:aa:5f:28:8a:57:
3c:38:b5:ad:5d:4e:41:25:93:fa:43:cc:38:f6:d0:
ef:30:ba:5e:61:25:75:ba:45:62:09:8c:71:8b:bf:
27:ca:76:17:31:c8:6a:3a:ce:e5:42:8a:9f:bd:b8:
3e:14:67:14:82:86:f5:55:26:06:cb:b8:bb:b3:73:
52:6f:fe:02:2c:20:16:2b:ad:1f:2f:9e:0e:61:4c:
67:07:2b:ba:15:87:b0:43:8a:d9:a7:7e:ac:b5:e1:
94:4e:00:f1:f1:2e:d0:15:47:20:a2:0d:1c:32:86:
18:7a:5e:14:17:22:40:1e:b5:21:61:4f:7f:82:04:
f0:47:3b:0f:25:0d:e2:b9:ae:4f:4d:50:3c:d3:94:
d4:21:0e:53:3d:e1:cb:e4:a1:ac:4f:b1:c3:4c:2f:
6e:f5:81:3d:e8:c6:93:34:d3:15:c2:1a:b0:88:43:
e1:10:22:ee:df:11:86:d4:bd:1e:3e:7f:db:87:39:
45:18:64:a7:50:af:d5:dc:5a:78:64:4e:f2:a1:ca:
9a:eb:65:f5:eb:a4:30:8f:c2:48:14:c8:e0:7b:fd:
35:24:b6:92:0a:9f:19:9d:25:f4:5a:f1:b2:8a:28:
e5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C8:DC:83:1B:4D:36:1A:02:8C:CF:26:6D:C5:23:5E:95:DB:4C:BE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/msjcgxtNNhoCjM8mbcUjXpXbTL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.8.23.0/24
45.90.16.0/24
45.147.224.0/24
185.108.204.0/23
185.209.38.0/24
185.220.249.0-185.220.251.255
185.222.30.0/23
185.223.80.0/24
185.225.0.0/23
185.227.146.0/23
185.251.229.0/24
185.251.231.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
01:b2:65:73:3b:4d:77:38:2c:26:41:80:d1:ab:89:ae:af:63:
37:e5:d4:9a:a2:aa:7d:9b:0c:57:68:ef:b1:4c:14:a5:28:74:
52:45:11:a5:b4:17:88:dc:7c:fd:b4:22:02:95:f7:85:d6:d6:
c5:ed:eb:c2:4d:68:cc:40:c7:ee:a2:90:d1:c7:c2:83:19:fd:
9d:87:94:4d:a9:84:ff:e7:d5:65:a6:96:7a:cb:1d:12:92:0b:
a0:13:73:2f:be:76:70:c8:8d:a1:b8:d0:4c:57:25:49:e6:c9:
b6:81:5b:0d:bf:08:ae:b9:c1:c6:95:49:b8:e3:c8:bc:57:e4:
d9:30:a5:d2:b1:64:7a:e9:9b:0a:3d:9a:bd:98:c2:ba:48:c8:
04:90:54:f2:4e:7e:8d:d2:2b:3b:06:ba:2d:c8:13:7e:b5:34:
07:cd:df:24:f4:4f:31:cf:0a:00:86:f0:9b:cb:dd:3a:d2:7a:
4d:a7:d8:e9:86:db:c7:2b:0f:23:d3:84:39:ab:17:12:f7:1b:
1c:0b:07:0e:7d:54:c2:e6:78:bc:37:f5:a3:95:05:fe:ea:8a:
26:47:27:36:18:a0:df:5c:af:6c:de:0e:e3:b7:35:ae:10:15:
56:94:98:c7:95:a6:32:44:ba:99:5d:e6:ad:e7:99:24:f2:8d:
2b:24:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org