Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/opSl3emUwGqW6dO2YM0UP1l1h6k.roa
File: opSl3emUwGqW6dO2YM0UP1l1h6k.roa (raw, json)
Hash identifier: O08BSFn96DkpqnzQbFVFFIjakrL4KyeLigqdu1/x7o0=
Subject key identifier: A2:94:A5:DD:E9:94:C0:6A:96:E9:D3:B6:60:CD:14:3F:59:75:87:A9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AA7AAE89DDD6926CBF961B60252210745
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/opSl3emUwGqW6dO2YM0UP1l1h6k.roa
Signing time: Mon 18 Sep 2023 09:41:50 +0000
ROA not before: Mon 18 Sep 2023 09:41:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.194.177.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
45.90.19.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.23.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.36.204.0/24 maxlen: 24
185.36.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 17:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:aa:e8:9d:dd:69:26:cb:f9:61:b6:02:52:21:07:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 18 09:41:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a294a5dde994c06a96e9d3b660cd143f597587a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:6b:4f:56:86:98:59:e0:7d:55:7b:e4:ee:
63:a3:3f:39:03:c5:c7:7e:95:16:0c:3c:3f:6f:97:
bc:a2:4a:88:39:d8:57:66:10:e1:68:d2:24:55:bb:
30:46:49:f8:c5:bb:09:4e:a3:79:2b:96:6a:1a:16:
1b:eb:4e:e6:1e:83:32:e9:fc:ba:d9:0e:e3:ee:9f:
67:0e:6c:d3:de:da:d0:00:d4:7a:30:f6:5a:35:d3:
9b:40:00:9e:45:90:d0:36:3b:79:2a:cf:70:26:7e:
5e:d0:f4:3a:cb:97:2f:b6:e6:ca:90:e1:5e:ad:04:
ba:b0:5d:45:ac:24:fc:62:e3:97:cb:ea:a3:37:f4:
6c:45:c8:7c:66:da:bd:7f:09:f4:bd:1a:b1:77:22:
72:c3:b2:e1:c7:49:dc:31:7c:69:c2:d0:5c:dd:34:
7a:21:d4:70:64:49:c2:a5:aa:8a:9b:12:24:97:67:
f9:67:24:a4:6a:ef:54:be:f6:4b:53:a4:c6:7d:5b:
af:26:dc:8e:29:72:7e:9c:48:b0:7c:4a:3d:cd:66:
5d:1a:4b:f0:98:61:e6:8b:3d:6f:32:a9:70:37:9e:
4d:b6:d1:c8:f1:45:df:18:13:93:2b:50:a1:90:8a:
1c:29:13:31:37:b2:76:85:33:ff:99:d0:8c:b2:9c:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:94:A5:DD:E9:94:C0:6A:96:E9:D3:B6:60:CD:14:3F:59:75:87:A9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/opSl3emUwGqW6dO2YM0UP1l1h6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.8.23.0/24
45.90.19.0/24
45.147.224.0/24
185.36.204.0/23
185.194.177.0/24
185.209.73.0/24
185.210.233.0/24
185.220.249.0/24
185.222.29.0/24
185.223.80.0/24
185.225.0.0/23
185.225.22.0/24
185.246.112.0/24
185.246.115.0/24
185.251.229.0/24
185.251.231.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:2f:bc:8d:7f:5d:91:bb:23:aa:c8:fe:1a:74:65:49:4a:58:
31:98:40:36:27:0c:75:54:a6:da:43:91:37:74:a5:eb:00:1b:
a5:78:1f:3a:87:6c:12:82:00:3c:58:e6:41:c1:17:3b:51:8e:
f9:26:16:bd:95:42:be:2a:3b:f8:80:d0:9f:4b:6c:01:f0:0b:
e6:f8:9e:90:e0:71:e2:ba:08:c0:1a:0b:0b:11:50:e9:d9:84:
6d:8c:99:ed:a6:f3:f1:d3:57:4d:13:ca:77:9c:b4:91:8d:ad:
59:f1:f2:4a:a1:f0:00:a0:17:d7:af:a5:de:68:63:49:7e:89:
15:ca:cc:d9:8c:87:b7:57:38:fe:38:df:72:06:73:4e:7d:77:
6d:e6:f2:0b:cb:30:a8:9d:45:14:16:5a:bc:32:15:fd:0f:8c:
ed:c6:77:c9:f3:9c:45:64:6b:3b:a6:eb:b2:b1:0b:53:60:5b:
2c:66:0c:df:78:e1:e5:12:6c:83:ee:57:a6:8a:2d:12:19:53:
ad:d3:41:90:80:97:c0:35:b7:e4:0b:e1:46:2c:52:1b:20:3c:
af:1a:40:00:0b:5b:a2:db:cc:af:d1:fb:57:ba:70:ab:ce:19:
18:d0:9c:b4:db:10:14:16:32:e1:f4:8d:d6:ef:2a:61:0f:d5:
8b:35:c7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org