Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p8wKOYHN875Vwo-Xz5bYnoY5sVo.roa
File: p8wKOYHN875Vwo-Xz5bYnoY5sVo.roa (raw, json)
Hash identifier: kTcURA7xzwOIR2qqzO62Shh950VChKCgJBnTCuOBcmw=
Subject key identifier: A7:CC:0A:39:81:CD:F3:BE:55:C2:8F:97:CF:96:D8:9E:86:39:B1:5A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01924290A6771004F85D377F8F974B36A2B1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p8wKOYHN875Vwo-Xz5bYnoY5sVo.roa
Signing time: Mon 30 Sep 2024 10:53:48 +0000
ROA not before: Mon 30 Sep 2024 10:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.113.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 10:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:90:a6:77:10:04:f8:5d:37:7f:8f:97:4b:36:a2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 30 10:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7cc0a3981cdf3be55c28f97cf96d89e8639b15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:8d:73:24:62:84:cd:f3:a3:a0:a1:46:4c:
70:81:8a:cc:f9:49:5c:a2:32:b8:cd:a7:66:5e:2c:
25:2e:0a:33:59:78:6c:8a:a8:c5:54:2d:1c:c2:2d:
0e:9e:43:b3:30:e1:bc:13:78:81:e5:b2:e1:5c:3a:
3b:33:fa:b5:8b:e5:18:3c:41:fe:cc:61:1a:70:02:
78:a2:c0:0d:dd:24:9d:62:2d:6e:9e:51:5b:6e:be:
cb:e2:68:d5:31:ef:d2:92:89:86:29:b1:b3:40:a7:
4e:b7:24:a2:3b:8d:cd:08:1c:28:26:ab:86:f8:0f:
d8:3c:97:54:58:86:8b:a1:94:e3:0b:ec:5b:c4:d9:
fc:62:f4:29:2f:b5:b1:c6:ef:b7:2f:c2:df:82:f1:
4e:52:84:5e:92:2b:66:d0:b0:f6:d9:34:0d:53:b2:
76:1b:e5:1a:d0:61:6c:62:af:76:90:9b:cd:b3:a6:
f8:e6:de:a1:08:09:4e:bd:3b:6e:49:f3:a7:9c:1d:
a8:a2:06:e9:21:a3:69:a6:17:94:69:26:bf:4b:31:
4b:26:9c:d8:c2:b3:1c:96:29:65:34:20:d8:a5:a7:
85:28:8e:37:f0:f2:ec:20:46:57:a7:76:4a:13:88:
1c:7b:94:72:15:b7:c1:5f:fd:15:8a:d6:53:31:3e:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CC:0A:39:81:CD:F3:BE:55:C2:8F:97:CF:96:D8:9E:86:39:B1:5A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p8wKOYHN875Vwo-Xz5bYnoY5sVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.218.101.0/24
185.220.250.0/23
185.223.80.0/24
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
40:26:85:8a:f9:1c:29:06:73:22:3a:3a:41:29:ee:ac:64:b2:
f4:31:77:61:46:85:d0:66:b9:6b:4b:e1:43:9c:22:1e:92:7d:
ff:cb:0b:af:f7:89:66:85:a3:2f:97:82:7e:16:3b:95:eb:30:
05:bb:9f:7b:d8:f3:6e:8f:e8:bd:5e:35:53:7b:ed:77:c5:94:
e9:e1:0f:97:44:78:88:45:15:8a:b8:03:0d:36:a5:57:c8:0d:
b5:20:90:f6:e2:45:73:1b:e3:8a:01:98:04:e0:e4:60:c4:46:
26:59:39:e1:cb:57:c2:a2:4f:42:15:0e:e3:8b:ab:f3:90:d1:
b3:eb:f7:e5:1c:1c:b6:3b:34:52:c4:09:60:96:bd:62:c3:f0:
09:9c:17:8d:3a:ba:0e:2c:86:19:aa:21:ba:36:13:70:b4:5d:
e1:10:9f:d3:36:af:ab:7b:62:0d:7f:36:63:5f:40:e0:98:00:
06:3f:ab:b4:37:bb:18:1b:86:07:eb:6f:0d:d9:0f:c4:98:cd:
a1:61:35:6f:ba:59:dd:b4:b7:77:e0:f7:75:1a:c7:85:e4:34:
dd:59:79:c7:6f:1f:a8:5b:b5:6d:4c:f3:8b:04:9b:22:96:91:
35:7f:72:fa:34:63:86:a2:e7:52:0e:89:02:dd:8f:f8:34:e2:
1a:c9:64:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 13:08:42 2024 by rpki-client on console-fra.rpki-client.org