Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q3uJgq5yN2Q-S4mbo45aAAX3xKc.roa
File: q3uJgq5yN2Q-S4mbo45aAAX3xKc.roa (raw, json)
Hash identifier: WIEvBohE9f4btpOC/uyY9Lkgz/SG4hoQo3B6gxj1kuM=
Subject key identifier: AB:7B:89:82:AE:72:37:64:3E:4B:89:9B:A3:8E:5A:00:05:F7:C4:A7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80295AAFCBA7AAD1FFFC6B04E5CC690
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q3uJgq5yN2Q-S4mbo45aAAX3xKc.roa
Signing time: Tue 02 Jan 2024 02:31:01 +0000
ROA not before: Tue 02 Jan 2024 02:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212017
IP address blocks: 185.128.52.0/22 maxlen: 22
185.121.12.0/22 maxlen: 22
185.227.172.0/22 maxlen: 22
45.90.236.0/24 maxlen: 24
45.90.237.0/24 maxlen: 24
194.48.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 20 Mar 2024 16:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:95:aa:fc:ba:7a:ad:1f:ff:c6:b0:4e:5c:c6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab7b8982ae7237643e4b899ba38e5a0005f7c4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:13:66:cc:50:0d:70:e2:09:59:f1:46:bd:ea:
df:9f:e8:90:e4:12:bc:0d:09:6a:b9:fa:5d:50:65:
38:76:a1:36:d4:50:f2:e9:cd:43:15:87:45:b2:54:
c5:9a:7f:7b:84:e1:96:db:1f:7d:a9:e2:42:3a:56:
21:ff:37:35:4e:44:6d:2e:08:1c:9b:73:df:1f:95:
f2:f4:03:61:9e:5d:d0:aa:c3:65:ea:b9:24:2f:ae:
09:45:19:a9:2c:ca:ff:6b:c5:cd:ea:1a:18:12:7b:
f4:f4:dd:22:32:ad:6d:1e:a9:af:2f:03:26:aa:d6:
e9:e3:77:a7:3d:73:c1:65:16:d5:2f:bc:44:92:f9:
17:8a:db:cb:93:ab:a2:ae:0f:2f:31:fb:2c:58:16:
cb:db:24:84:86:e0:9e:d2:b4:06:aa:40:35:31:9a:
e4:a1:c8:31:4c:67:42:84:af:64:17:59:63:5c:41:
3d:d5:af:5d:7d:e8:7d:9d:2c:93:22:e4:a5:20:44:
32:0f:6c:75:8b:8f:35:18:9d:7a:ed:29:aa:3e:e7:
d9:b2:92:6b:02:46:dc:a7:ec:46:01:44:95:bd:5e:
c7:c1:5b:f7:0b:25:e6:a5:70:e8:ce:a5:90:f1:7e:
90:65:d0:c8:a2:b4:bb:6e:f5:15:7b:17:35:9d:ce:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7B:89:82:AE:72:37:64:3E:4B:89:9B:A3:8E:5A:00:05:F7:C4:A7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q3uJgq5yN2Q-S4mbo45aAAX3xKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.236.0/23
185.121.12.0/22
185.128.52.0/22
185.227.172.0/22
194.48.140.0/22
Signature Algorithm: sha256WithRSAEncryption
47:31:6b:73:6f:ed:23:3b:b0:da:15:d7:2c:eb:40:ea:95:c6:
5a:0a:68:06:2d:7b:41:59:0f:53:0a:d6:e2:ce:3f:ac:f0:71:
d7:66:3d:55:90:ea:bb:81:8d:0e:47:06:41:39:8f:62:47:bf:
6b:cf:99:f6:df:57:02:e7:04:5f:ce:11:ef:c4:a0:6b:4b:2d:
26:6a:0b:a9:bc:72:01:58:65:9d:45:b3:9e:31:4a:81:fe:f6:
e1:e6:f9:91:9b:ff:94:80:aa:d2:2e:f5:4d:3d:a4:31:d3:17:
70:19:1c:d2:50:9f:03:3e:b5:d7:37:f8:e3:c6:e5:88:80:fe:
4b:d1:e0:ab:5e:51:07:d8:b1:a6:a9:17:45:eb:22:bb:51:f8:
bc:fd:97:38:63:17:02:6d:25:9b:f8:23:7a:f8:85:7c:ed:c0:
87:77:14:90:3f:f7:0e:89:0c:01:ed:31:65:1a:ae:c7:8b:3a:
5c:41:29:79:5d:80:37:f5:f1:97:ee:7a:b4:60:ca:85:be:b8:
c9:4b:47:24:80:56:25:fc:8f:ce:f6:9c:ce:1a:53:4c:81:44:
14:6f:b6:4d:b9:c0:69:1c:ac:db:d6:cd:cf:3f:5b:b0:91:f4:
8d:85:01:74:70:0c:b7:7e:0f:bc:f4:98:8f:d7:a6:0c:38:aa:
c5:1b:7f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org