Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qW_tW5IKUF3j2p0ifv9QQxTnbYM.roa
File: qW_tW5IKUF3j2p0ifv9QQxTnbYM.roa (raw, json)
Hash identifier: mDQjOW0shwMVgZ2BlhXg2RsgZI76zdxy5jGn02gSC18=
Subject key identifier: A9:6F:ED:5B:92:0A:50:5D:E3:DA:9D:22:7E:FF:50:43:14:E7:6D:83
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018949B081ACB58DB6DA5598DC4EB673A361
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qW_tW5IKUF3j2p0ifv9QQxTnbYM.roa
Signing time: Wed 12 Jul 2023 10:40:51 +0000
ROA not before: Wed 12 Jul 2023 10:40:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.230.52.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.209.72.0/24 maxlen: 24
193.58.145.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 14 Jul 2023 11:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:b0:81:ac:b5:8d:b6:da:55:98:dc:4e:b6:73:a3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 12 10:40:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a96fed5b920a505de3da9d227eff504314e76d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:99:5e:c3:dd:9c:b4:97:af:a3:9a:d7:a6:
f9:15:e4:0c:9c:cb:4c:7a:cc:9f:0b:b6:a5:ec:25:
bc:fd:62:08:6d:9f:66:29:b8:8b:c0:59:4d:48:92:
9c:f6:76:98:04:f1:1f:28:8b:23:7f:ec:76:09:00:
d4:b0:f1:6d:97:8a:ad:ae:0e:f9:8a:f6:4b:6c:52:
84:07:9b:64:fd:c6:c4:41:5d:3b:b0:c4:90:58:bf:
58:a5:95:97:f8:03:53:be:b6:7a:79:9f:2c:9e:ae:
73:9c:42:da:8b:61:d8:b8:74:74:b0:96:53:6a:32:
4f:c9:d5:a4:7b:e7:3d:d4:f5:af:c4:3b:98:bf:7a:
4f:23:4f:77:a2:ce:a2:79:0a:22:7d:3e:9b:18:83:
75:b7:53:21:83:50:a2:6f:62:1c:dd:ca:88:93:3b:
85:4a:92:74:3a:c7:ea:ed:e6:58:f7:27:d7:cd:a7:
46:43:41:ae:18:d5:d5:b3:7d:de:52:07:7f:2a:67:
43:15:8c:21:43:c1:6c:ad:2d:76:cc:d0:85:0e:f6:
d0:e5:e1:4c:53:82:ef:02:e8:07:e4:ce:b5:5c:7f:
6b:dd:46:f2:46:5a:f6:4e:16:55:57:33:51:5b:17:
e6:cf:77:1d:14:53:ec:a4:27:83:ec:f3:11:23:22:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6F:ED:5B:92:0A:50:5D:E3:DA:9D:22:7E:FF:50:43:14:E7:6D:83
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qW_tW5IKUF3j2p0ifv9QQxTnbYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.209.72.0/24
185.210.233.0/24
185.225.0.0/23
185.230.52.0/24
185.251.229.0/24
193.58.145.0-193.58.147.255
Signature Algorithm: sha256WithRSAEncryption
55:b5:d1:5a:b7:6b:4f:76:23:86:ac:a4:99:d6:33:b6:66:9a:
d2:b1:42:0d:0a:ba:ed:eb:c4:6c:23:e7:61:b8:7f:0c:74:f8:
35:9e:7d:98:b0:64:97:11:9b:93:22:e0:c3:de:28:7c:a5:12:
c0:cc:59:b3:04:e1:30:59:39:d3:34:3e:92:c1:8a:b5:66:26:
48:02:86:5c:a4:29:73:da:1b:46:f1:08:1b:2b:f7:c9:59:d8:
ec:81:6a:dc:50:a4:72:d4:88:c1:f6:c3:2b:7a:26:f8:2a:1f:
0a:82:86:b3:0a:30:44:ea:c6:a4:85:a8:59:c3:ff:f6:51:69:
b3:53:6f:cb:64:35:3c:86:da:2e:92:54:f2:08:88:da:00:12:
49:1d:28:ff:54:d3:3f:a7:ec:63:30:d6:0e:00:a7:11:a0:11:
62:f0:14:c8:d7:db:59:04:20:17:5f:e9:e5:1e:1e:e5:c9:fa:
4a:6d:c3:ec:a3:93:3a:72:09:39:1a:29:2b:81:eb:e7:72:ca:
0b:61:d1:79:76:19:9d:83:64:a5:10:bf:8e:31:7b:e2:e9:82:
12:4b:28:af:29:33:41:67:83:90:9f:59:88:36:b0:74:a3:12:
29:b9:e9:b2:18:22:f6:cd:0f:f9:ef:4b:60:e3:26:08:73:e0:
c7:1b:9c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org