Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nnODMTd1lrzGyyRdh-kGP565wrw.roa
File: nnODMTd1lrzGyyRdh-kGP565wrw.roa (raw, json)
Hash identifier: xkeCOynsST0CXtOTNwNXfFp+IceG15euVGqeYDtWnMg=
Subject key identifier: 9E:73:83:31:37:75:96:BC:C6:CB:24:5D:87:E9:06:3F:9E:B9:C2:BC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188BEA7BD75AB93CB660686B3ADF5B42C83
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nnODMTd1lrzGyyRdh-kGP565wrw.roa
Signing time: Thu 15 Jun 2023 10:44:04 +0000
ROA not before: Thu 15 Jun 2023 10:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.20.0/24 maxlen: 24
193.58.145.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
194.147.16.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 16 Jun 2023 16:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:a7:bd:75:ab:93:cb:66:06:86:b3:ad:f5:b4:2c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 15 10:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e738331377596bcc6cb245d87e9063f9eb9c2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:c5:6b:90:8c:d5:02:cc:4b:39:cd:f8:62:
43:47:22:73:74:0d:42:4d:e0:df:bf:0b:7c:d6:f5:
99:72:38:82:99:53:1b:76:64:cf:34:b6:1d:ac:00:
5f:96:5e:df:7f:91:48:3e:2d:26:f5:ff:b6:0a:1e:
2c:7d:7d:ad:92:a8:c4:08:f5:6d:6e:97:23:ef:6b:
90:7c:51:53:e7:cb:cd:05:80:35:66:d8:12:fe:b6:
e8:f0:ec:7b:78:39:a3:b4:d1:bb:23:d2:89:7e:22:
f3:c1:62:71:75:5c:10:d1:d6:40:a5:1b:00:af:5d:
25:49:22:21:da:f9:81:5a:68:74:e6:a4:5b:ce:05:
a6:4a:b3:5f:39:04:69:d1:ad:5f:84:36:de:62:c4:
0c:7d:36:9b:de:96:3b:27:4b:a8:3d:e0:94:ca:e5:
56:fc:c6:cf:e8:2c:ba:c6:71:56:bd:a1:65:18:d8:
47:4c:19:62:2f:ca:e1:d4:4a:9b:c2:bd:79:17:dd:
46:54:0d:3b:81:90:9a:42:30:b1:65:e1:b0:60:13:
c0:1d:49:5c:e5:fd:41:40:1b:53:b3:e2:ce:95:9d:
26:53:55:98:ab:c3:94:70:3f:8b:b7:af:71:f3:c2:
25:10:3b:12:5f:4c:79:29:42:e1:bc:3e:e6:d0:41:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:73:83:31:37:75:96:BC:C6:CB:24:5D:87:E9:06:3F:9E:B9:C2:BC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nnODMTd1lrzGyyRdh-kGP565wrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.225.0.0/23
185.225.20.0/24
193.58.145.0-193.58.147.255
194.147.16.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:a8:ee:38:95:4d:13:c4:e4:b1:b4:7e:b4:f6:f3:78:98:11:
a0:a2:65:f2:7c:d6:c5:c3:1e:33:6f:3d:57:4f:47:2f:e5:e2:
97:1f:97:11:cc:6d:c8:2f:96:08:d7:9b:cc:b8:54:b1:7b:41:
45:2d:6d:00:e8:e7:de:7e:00:fa:ef:d4:ae:ed:4b:9a:f4:55:
9c:d2:a8:4f:f2:fc:4d:7c:0b:40:de:3e:54:a3:bb:fd:77:1d:
3e:4c:ef:e5:01:dc:13:20:5c:28:ce:93:a3:9c:4d:1b:e8:f3:
dc:0c:97:e0:0a:ee:f7:93:cc:5d:12:28:b5:00:b5:0e:72:a4:
cc:f8:3e:3f:f7:64:bd:34:bd:2d:36:dd:97:81:45:7c:0e:99:
4a:ff:91:87:b2:d5:c2:bc:f4:14:0e:b2:3a:0d:5f:80:49:bc:
72:90:45:95:54:3a:75:b0:7b:ee:cd:43:9a:e7:3e:57:92:54:
96:ef:c5:85:73:f7:71:6a:49:0f:40:b5:7b:87:7f:53:7f:ae:
de:53:78:c9:1b:7a:8d:cc:d5:84:99:10:70:7a:5f:12:40:bc:
de:b7:86:c0:4a:c8:2d:c6:0e:55:f8:ed:d8:6a:77:b6:49:b8:
3e:45:85:a1:7d:d6:0e:af:3b:b1:fc:5e:3f:5e:af:a4:ff:e9:
27:5d:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org