Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pTe0FVYMeiWDSPPdEkA6bcraHGo.roa
File: pTe0FVYMeiWDSPPdEkA6bcraHGo.roa (raw, json)
Hash identifier: /sWID9uS69p9Xxw8xO3KX0okY/oCG4c8IO3z2LTECcY=
Subject key identifier: A5:37:B4:15:56:0C:7A:25:83:48:F3:DD:12:40:3A:6D:CA:DA:1C:6A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018722F94EBBA01AA4483D0A1664368D289B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pTe0FVYMeiWDSPPdEkA6bcraHGo.roa
Signing time: Mon 27 Mar 2023 12:09:36 +0000
ROA not before: Mon 27 Mar 2023 12:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.225.20.0/24 maxlen: 24
185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.214.108.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
185.36.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 12:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:f9:4e:bb:a0:1a:a4:48:3d:0a:16:64:36:8d:28:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 27 12:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a537b415560c7a258348f3dd12403a6dcada1c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:6e:9c:2e:60:70:ce:d3:27:70:1e:92:75:
c6:7d:75:02:6a:6c:07:e4:f0:09:87:1f:a7:84:0b:
03:52:7b:fe:fe:5d:e1:88:9f:7a:75:60:c0:5f:1a:
dd:6b:f7:ff:ca:d5:da:17:06:b2:6e:c8:b0:6a:bc:
8d:25:f6:1d:9b:fd:e5:3b:70:fb:ac:fc:16:ff:6b:
9b:c4:8a:c7:94:a3:bb:0e:87:2e:70:8f:fd:7c:c1:
63:4d:92:b5:57:d9:31:e9:42:11:48:7b:c0:e5:9b:
5d:ff:47:09:19:0c:91:c1:8a:32:b7:c2:f4:b8:2e:
19:68:42:06:8a:86:55:4a:ee:5d:b9:35:30:9c:77:
5f:22:79:58:3e:53:91:3e:c6:99:cd:e7:f5:b8:72:
35:f9:d4:34:4b:5c:ad:fb:0a:84:ce:af:ea:1a:a3:
41:2c:79:38:22:2d:0e:6b:16:25:3f:7f:70:7c:e9:
b6:8f:15:16:95:87:18:80:cf:bc:05:bb:09:d2:1b:
f0:06:f6:61:54:69:94:ec:94:69:29:29:c7:9d:b3:
76:20:23:ed:80:70:cc:d3:44:b2:35:5c:ad:c0:ee:
6d:10:83:0b:8d:bf:72:86:4a:3f:5b:42:d1:f5:34:
07:29:06:e2:a5:ef:ae:e7:fa:44:3d:2a:79:71:9f:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:37:B4:15:56:0C:7A:25:83:48:F3:DD:12:40:3A:6D:CA:DA:1C:6A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pTe0FVYMeiWDSPPdEkA6bcraHGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.204.0/24
185.121.12.0/22
185.206.248.0/24
185.206.251.0/24
185.214.108.0/24
185.223.76.0/24
185.225.20.0/24
185.226.105.0/24
185.226.107.0/24
185.228.74.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.229.0/24
185.251.231.0/24
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
14:aa:bb:91:9b:b0:20:4a:68:9b:f5:a8:ed:18:09:1a:4a:4e:
9a:ab:2a:6f:82:e5:5e:a1:4a:97:1f:87:ec:5b:aa:30:b0:a3:
51:af:1a:c1:db:98:7a:37:2e:ba:37:fb:7f:ef:58:ce:ef:0f:
04:f9:0c:fd:e6:5d:fc:07:b8:20:b9:a8:fb:18:b1:4f:bc:b7:
4b:62:9f:28:e9:be:3b:b9:6d:ca:2d:f7:2b:4f:d9:2f:60:b4:
14:85:e1:f7:26:42:35:86:f3:a1:d8:ba:47:a8:01:bc:e9:05:
5d:ca:10:42:70:6a:6d:d6:86:16:8c:1c:61:5f:17:81:98:93:
08:04:f7:37:f0:81:4c:1e:49:07:d9:21:05:58:2b:2e:9c:40:
6a:c4:3b:5d:c2:16:e8:07:49:88:1c:a1:ea:0d:43:99:ac:11:
dc:64:28:f7:6d:b0:7d:e9:01:55:e8:62:0e:49:8c:37:c1:52:
1b:4c:a8:54:ad:ca:cb:00:96:32:d7:bb:72:4a:81:d4:00:47:
9d:92:de:62:82:29:35:d4:58:11:01:0c:c3:b8:d0:43:35:a7:
ac:66:5d:c4:23:35:1e:06:c7:55:88:99:e4:b2:b4:18:65:b2:
8d:32:5e:4e:f6:50:1b:ac:35:44:11:e3:91:c3:9e:d1:9d:95:
0a:04:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org