Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/no9ZUBqU-5mw_JTiNFVlJRWem_A.roa
File: no9ZUBqU-5mw_JTiNFVlJRWem_A.roa (raw, json)
Hash identifier: wyxr8EkNPoo/xygxR78VD6NMLJTGuMk6yItyahrxvFw=
Subject key identifier: 9E:8F:59:50:1A:94:FB:99:B0:FC:94:E2:34:55:65:25:15:9E:9B:F0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01887144F8DE944F6819C9791CA2EAC3443B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/no9ZUBqU-5mw_JTiNFVlJRWem_A.roa
Signing time: Wed 31 May 2023 10:05:25 +0000
ROA not before: Wed 31 May 2023 10:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.230.52.0/23 maxlen: 24
185.199.159.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.0.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.238.228.0/22 maxlen: 24
185.36.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Jun 2023 09:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:44:f8:de:94:4f:68:19:c9:79:1c:a2:ea:c3:44:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 31 10:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e8f59501a94fb99b0fc94e234556525159e9bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c6:9a:9f:5f:c6:26:63:22:8e:66:1c:1b:3a:
04:76:7f:fc:c8:29:ed:aa:e8:d7:b7:2b:70:6d:e0:
f4:54:9d:10:b9:a4:23:c2:88:9f:55:a3:62:78:88:
92:19:56:d7:24:e6:47:72:3d:fa:e2:8f:93:7b:40:
bd:3a:72:b3:9e:5a:de:53:f6:60:9a:53:13:ee:da:
88:3f:5b:e3:49:ef:9c:39:67:ec:20:d2:94:81:9d:
2c:68:31:8d:5e:5a:d5:b6:e4:e2:4b:ac:cb:8d:d2:
bf:50:7c:00:f7:dc:6e:81:f0:25:b5:0c:e8:4d:b1:
e9:7d:33:dd:1c:48:61:a1:5e:4e:cc:06:33:e8:79:
48:b9:a8:ad:a6:06:84:60:75:e9:dd:e2:42:79:9e:
0d:48:ff:e1:2a:73:76:8d:78:f0:22:a7:dc:d5:ac:
85:43:25:13:5b:83:1d:36:42:05:65:8f:38:78:17:
4e:4a:23:4d:2c:d9:fb:1d:72:92:cf:d6:cc:56:3a:
cb:43:87:0c:01:47:f9:02:f6:56:cc:5d:e3:96:be:
dd:cf:18:8d:63:07:4b:6d:a0:3d:2d:be:78:49:db:
74:f0:66:85:dc:b0:a0:f2:f9:99:9b:f8:65:0f:1e:
b5:73:39:25:b6:55:79:7b:70:4f:df:34:fa:7d:7c:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:59:50:1A:94:FB:99:B0:FC:94:E2:34:55:65:25:15:9E:9B:F0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/no9ZUBqU-5mw_JTiNFVlJRWem_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.204.0/24
185.121.12.0/22
185.199.159.0/24
185.206.248.0/24
185.206.251.0/24
185.223.76.0/24
185.225.0.0/24
185.225.2.0/24
185.226.105.0/24
185.226.107.0/24
185.228.74.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:b0:b5:b7:91:b8:ad:f3:5d:ff:0f:00:92:27:d3:63:51:af:
29:63:0d:6f:ae:70:7c:9e:66:80:f8:49:5e:fa:6e:d5:69:3f:
ce:48:67:47:d1:16:ea:e6:2a:6b:5f:b2:c4:f1:8f:74:06:4f:
04:c6:9c:48:1b:0a:8f:be:9d:16:31:dd:ce:91:0e:e6:34:70:
e6:7e:85:75:3d:9a:41:3c:76:00:ce:db:b2:da:f5:0e:d3:32:
8e:3a:bf:d5:86:d9:5a:df:74:c6:85:f1:2c:d6:aa:e0:f0:a5:
6b:02:3b:0c:5a:d4:8d:8c:5e:fa:d6:5e:1f:b6:73:c1:3b:65:
71:fc:41:a8:51:a8:e9:66:fe:51:ec:22:c1:18:a1:e0:8b:ed:
86:8e:bb:62:85:be:05:20:1c:72:77:6e:27:cb:54:da:48:b4:
0a:30:04:ce:f4:f8:1e:de:5c:de:a2:3a:f7:37:9f:1f:b3:d6:
59:5b:6b:ef:48:ca:21:6e:22:52:bc:18:02:2d:6a:1c:8b:55:
96:4b:c0:11:89:50:f3:d4:60:ce:68:eb:d7:81:95:d2:5e:5c:
3f:cd:11:89:4d:36:7a:e4:3b:b7:24:40:ce:bb:96:83:14:ef:
58:91:fa:54:bb:ca:eb:de:40:8b:cd:23:18:ed:89:89:b3:df:
c4:23:2c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org