Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vUDBDZyYfdwYqWnsPAVbwcpTTJU.roa
File: vUDBDZyYfdwYqWnsPAVbwcpTTJU.roa (raw, json)
Hash identifier: fRzwGZ/bimUPD2cj9XsfDXxWVcyRDk5Gybnff16Or/g=
Subject key identifier: BD:40:C1:0D:9C:98:7D:DC:18:A9:69:EC:3C:05:5B:C1:CA:53:4C:95
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018EBD418995C438E799B8113BADFB979CD8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vUDBDZyYfdwYqWnsPAVbwcpTTJU.roa
Signing time: Mon 08 Apr 2024 10:29:32 +0000
ROA not before: Mon 08 Apr 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.81.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.223.82.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.234.20.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 19:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:41:89:95:c4:38:e7:99:b8:11:3b:ad:fb:97:9c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 8 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd40c10d9c987ddc18a969ec3c055bc1ca534c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:ac:85:1f:9f:0c:0e:1e:70:55:3d:f1:41:
c3:88:33:d2:8d:0e:2d:06:b4:62:77:36:97:c3:a6:
56:c4:04:dc:66:c3:fe:44:5b:b4:4c:36:3a:00:12:
a2:e8:3a:ce:1a:e6:15:e9:3d:f1:c1:2e:37:e5:87:
5a:04:87:40:18:ef:21:1f:e1:53:8a:cd:53:c4:11:
fc:5e:0a:d1:d4:41:11:1a:5d:ef:66:ce:cc:ba:9f:
f0:01:2d:27:5b:03:69:ee:17:e5:d3:0c:32:28:0b:
66:75:ba:05:fa:4e:dc:a1:f3:73:6b:0e:5a:b0:d1:
55:ea:a4:2c:5d:aa:9a:e7:d3:5e:65:f9:80:be:c6:
92:87:a3:1b:05:5b:ff:39:f1:ff:15:83:43:82:7f:
f0:6c:4f:89:b0:04:32:15:e4:d9:91:00:28:89:57:
15:0b:8e:53:5f:5e:96:d2:7a:2b:32:68:5c:aa:83:
fa:04:48:cb:ad:24:1c:5b:c3:bb:40:2b:9c:80:6b:
2b:56:55:79:3a:33:80:8e:36:e2:02:2c:3f:05:98:
90:39:88:dc:8a:e5:14:13:d9:25:22:ad:bd:85:98:
2a:08:8a:70:08:28:c3:1d:29:f7:3d:a3:7b:13:50:
b4:47:6b:f8:eb:6f:a7:f2:af:cc:4c:71:ba:70:b5:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:40:C1:0D:9C:98:7D:DC:18:A9:69:EC:3C:05:5B:C1:CA:53:4C:95
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vUDBDZyYfdwYqWnsPAVbwcpTTJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.81.0/24
185.220.250.0/23
185.223.82.0/24
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
185.234.20.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:95:cb:22:54:5b:b7:ac:b6:2a:76:6c:2a:3b:21:d2:46:63:
dd:ac:6a:b7:45:62:7e:68:2c:08:45:f6:4b:31:a5:ea:63:a7:
9d:11:52:4b:0b:94:44:8c:93:32:76:c1:28:df:e8:ac:0c:83:
d0:a4:db:80:b9:fa:b6:c6:dc:61:4e:82:39:1e:2e:9f:f7:e5:
59:a3:61:cc:fc:9c:6b:dd:a5:17:4a:4a:93:63:90:62:27:8a:
c6:a1:ad:03:2c:c5:e9:79:02:69:c5:64:e1:04:14:c9:4b:d5:
c2:0f:2b:f7:b4:e9:1e:8d:f0:c9:8d:e2:fb:e2:07:e8:0b:32:
68:a9:14:f5:16:83:eb:8a:08:8a:39:2d:71:7c:64:aa:1d:97:
c9:89:20:bb:4b:f6:86:02:08:ce:d6:dc:ab:0d:61:05:8f:15:
fc:85:60:6e:a5:99:e1:b2:de:fa:9b:36:db:77:92:f7:1c:b2:
02:64:91:22:9d:36:ff:9c:43:c4:36:bd:9f:99:45:54:94:82:
c6:99:98:ae:9b:f0:00:6d:e2:a6:47:fd:d1:35:ea:74:05:53:
a0:8a:a6:0c:73:a8:33:f7:ad:b1:67:ea:2b:e9:5c:40:43:b7:
06:00:5d:e7:37:3f:a9:1a:00:3d:e8:92:79:b1:3c:5f:0e:2f:
ee:5c:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org