Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tAn1Lncxgf26tP8-g0H7ZoupRcc.roa
File: tAn1Lncxgf26tP8-g0H7ZoupRcc.roa (raw, json)
Hash identifier: 8/MAg1FYilZy+B/jwfF3d1htVlVJIIkED5nI5yrRW9E=
Subject key identifier: B4:09:F5:2E:77:31:81:FD:BA:B4:FF:3E:83:41:FB:66:8B:A9:45:C7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018D7E4A3151E98948997E85178E0D2E3F5E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tAn1Lncxgf26tP8-g0H7ZoupRcc.roa
Signing time: Tue 06 Feb 2024 12:00:07 +0000
ROA not before: Tue 06 Feb 2024 12:00:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.121.12.0/22 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.209.74.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
185.240.120.0/23 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 10:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:4a:31:51:e9:89:48:99:7e:85:17:8e:0d:2e:3f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 6 12:00:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b409f52e773181fdbab4ff3e8341fb668ba945c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:2d:9e:fa:45:84:93:bc:3b:b7:e8:78:91:
76:aa:7a:e2:20:cf:c7:48:1e:c8:ad:89:26:92:cb:
47:2c:5a:22:58:29:66:94:0c:f7:a9:29:45:51:4d:
18:d4:14:1f:3e:3f:d4:2c:15:59:cd:a0:0d:6a:eb:
f0:52:4f:5e:97:a2:16:a9:0f:85:29:31:23:51:cd:
6b:6d:9c:63:ce:7a:af:13:46:39:32:6f:f6:ca:80:
c0:78:ef:dd:29:3f:cf:2d:36:5c:5a:f0:c5:36:86:
a9:30:13:ae:f0:85:6c:dd:b3:cc:34:0d:d1:e5:ef:
05:65:5c:4e:b4:3f:79:b4:16:f5:d8:14:89:f7:89:
5e:b5:f6:b4:9f:de:f0:60:1d:60:dc:a8:4b:f0:54:
81:17:df:fe:84:b8:26:e2:96:a7:28:ca:ca:16:0a:
f0:57:a8:9a:30:f0:be:17:a9:a4:60:58:57:0b:7f:
f0:f1:98:de:96:05:de:31:a2:70:1f:0d:b9:19:5e:
7f:b1:61:f9:eb:1b:f3:73:9a:bd:34:6b:35:30:0c:
58:07:a7:ad:43:6c:b9:c6:3a:7b:ac:2b:09:b6:c0:
ad:e2:c3:bf:c0:bd:22:9f:3f:ba:7d:76:86:8f:b1:
a5:3a:b7:68:cd:28:68:73:63:ce:5f:fd:db:c2:44:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:09:F5:2E:77:31:81:FD:BA:B4:FF:3E:83:41:FB:66:8B:A9:45:C7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tAn1Lncxgf26tP8-g0H7ZoupRcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.12.0/22
185.199.159.0/24
185.206.248.0/23
185.206.251.0/24
185.209.36.0/23
185.209.74.0/24
185.210.152.0/22
185.210.235.0/24
185.218.101.0-185.218.102.255
185.223.76.0/24
185.223.80.0/24
185.225.2.0/24
185.225.22.0/24
185.226.105.0/24
185.226.107.0/24
185.227.145.0/24
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f8:64:1d:f6:cf:c2:f2:8b:b1:f2:ce:8b:27:65:d5:ee:20:
0d:96:d6:d9:94:bb:27:f4:75:8b:f3:ec:91:ba:04:47:05:12:
55:86:4e:6d:28:fd:51:4b:fc:b6:9d:71:b6:df:2e:76:9f:11:
b5:96:26:16:e6:92:f0:35:14:e3:fb:da:e8:49:d2:d6:48:73:
52:fa:85:6d:a8:06:c3:7a:2c:de:3a:34:f6:5b:e8:7d:c1:94:
2f:3b:19:20:10:22:23:7a:1a:eb:82:d8:1f:4a:d9:99:1b:a4:
fe:8f:0a:18:49:14:e8:47:3f:dc:1f:3f:3a:95:7e:7c:8f:89:
9e:07:ff:b1:a3:57:b7:2a:93:b2:9f:d3:8f:86:48:31:3f:32:
34:a4:ea:3d:83:9d:dd:de:ec:96:53:e6:51:21:27:d6:78:71:
a1:ff:58:34:d1:7d:19:46:ee:f8:0f:16:e1:5c:ae:41:de:6a:
db:a8:9a:9e:bd:01:6e:29:d5:48:a0:92:06:39:f5:fe:48:9f:
c9:fa:d9:eb:7e:c6:2f:95:5f:ab:07:7e:88:46:06:4e:3a:33:
6a:72:69:02:e8:e1:b1:f0:eb:ec:c2:f4:ce:dd:a6:25:ef:9e:
7d:cd:3f:f6:1f:af:85:35:d3:64:3b:20:1b:cc:7a:b8:05:ab:
d2:4e:65:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org