Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vcvPe_UGlnDiJI0Z3ujWVNh8aNw.roa
File: vcvPe_UGlnDiJI0Z3ujWVNh8aNw.roa (raw, json)
Hash identifier: SzL5vKnfI2T5vV/3aqR//OjqmlCKSDZqehBIRTgSQu4=
Subject key identifier: BD:CB:CF:7B:F5:06:96:70:E2:24:8D:19:DE:E8:D6:54:D8:7C:68:DC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C79AA33A4EDCC63A6BC31AAAF89007D57
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vcvPe_UGlnDiJI0Z3ujWVNh8aNw.roa
Signing time: Sun 17 Dec 2023 21:24:06 +0000
ROA not before: Sun 17 Dec 2023 21:24:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.227.146.0/23 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
45.8.21.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 20 Dec 2023 11:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:79:aa:33:a4:ed:cc:63:a6:bc:31:aa:af:89:00:7d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 17 21:24:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdcbcf7bf5069670e2248d19dee8d654d87c68dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1f:18:b1:52:f5:81:36:23:72:00:89:2a:48:
df:93:4c:09:d5:1e:ba:79:39:82:bc:f5:c9:e0:2b:
3e:c7:7e:90:01:43:b3:02:cd:13:60:ba:6f:0b:93:
fd:0c:09:03:52:5d:c0:75:15:e0:e4:83:b8:55:ff:
6f:ea:d8:fd:e4:dc:c5:0b:23:dd:a1:5e:7a:eb:0d:
c1:9e:c2:f3:03:9c:9c:0b:fe:8d:ac:69:82:57:67:
7d:fe:a1:df:f7:35:f9:68:45:8b:cb:2b:9f:e4:af:
03:55:04:c1:d1:a8:56:aa:52:92:c4:b8:5e:53:47:
d6:98:e7:92:57:f8:d3:60:ed:d5:b1:e4:66:6e:53:
f9:21:7b:c7:ad:0f:7a:20:2e:6f:65:72:24:3a:a9:
ff:24:8d:fd:ad:ea:3b:65:d3:41:59:d2:1f:68:42:
f0:c9:97:3e:6e:9e:c4:d2:aa:b1:d4:31:83:dc:b2:
1b:52:b7:69:e3:d8:a5:67:85:6f:ba:7e:ae:7a:2c:
c2:81:dd:fd:c1:e3:38:ad:e8:8e:14:b4:ec:13:e9:
19:1e:d8:b3:5c:5e:b8:df:9f:f6:f9:d3:a4:86:48:
4b:55:12:ad:29:15:36:cb:f3:a1:dc:56:c8:fc:0d:
42:19:c3:f8:ec:72:c7:45:86:d2:13:81:2c:08:41:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CB:CF:7B:F5:06:96:70:E2:24:8D:19:DE:E8:D6:54:D8:7C:68:DC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vcvPe_UGlnDiJI0Z3ujWVNh8aNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.220.249.0-185.220.251.255
185.223.82.0/24
185.225.0.0/23
185.227.146.0/23
185.251.229.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:d5:9e:ac:86:54:ab:c5:42:44:14:76:31:a3:d2:4b:0e:1c:
8f:69:1d:31:a9:7f:52:96:a7:80:7a:b7:46:a5:a5:de:c0:73:
a4:da:79:7d:22:59:4c:3b:97:40:a6:a3:e3:72:d1:bf:b0:54:
45:0a:c7:3d:49:aa:a4:f2:bc:12:16:d8:eb:99:75:b2:0d:d8:
40:17:d8:ee:5e:f6:14:21:40:c6:2f:b7:a0:d2:8f:03:07:20:
45:3c:10:9c:78:58:a8:f1:63:80:4e:10:0a:54:eb:e3:1f:73:
3b:e9:e9:0c:2f:63:ea:a0:ff:75:f3:8e:24:02:23:55:e0:5e:
62:48:84:7f:8f:17:aa:a4:ae:ba:4c:0b:4b:4a:4c:69:aa:4e:
0a:b0:df:9b:83:18:fe:e9:8d:ba:dd:ac:99:cc:39:70:be:23:
09:8f:06:37:be:f9:a6:57:e5:3b:0d:a5:b0:e7:f9:b5:fc:85:
d2:1f:7d:5d:b0:3d:f9:5b:49:8c:5f:dd:30:a7:66:c9:62:92:
d7:02:f6:49:7b:a3:6e:24:2c:0a:16:a1:cb:0a:fe:6b:ee:12:
5e:3a:02:2a:bf:4f:d0:de:45:be:99:75:76:b0:f3:84:70:6c:
e1:4a:c7:c9:49:5d:d9:b4:5e:b5:76:24:cd:d5:07:c8:1b:fd:
fb:22:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org