Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x-WULuNoQ5SVcfkFsgHnwbqa8hY.roa
File: x-WULuNoQ5SVcfkFsgHnwbqa8hY.roa (raw, json)
Hash identifier: xIawZUl6AGQ3nCk/ReSUC4o3GmnBxJJ594tSeIBgxmQ=
Subject key identifier: C7:E5:94:2E:E3:68:43:94:95:71:F9:05:B2:01:E7:C1:BA:9A:F2:16
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188D7F4301D58DC544859757C3F7BC9639B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x-WULuNoQ5SVcfkFsgHnwbqa8hY.roa
Signing time: Tue 20 Jun 2023 08:38:04 +0000
ROA not before: Tue 20 Jun 2023 08:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.90.19.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
193.58.145.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
45.147.226.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
176.125.248.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
194.147.16.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 22 Jun 2023 21:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:f4:30:1d:58:dc:54:48:59:75:7c:3f:7b:c9:63:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 20 08:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7e5942ee36843949571f905b201e7c1ba9af216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:fd:64:0a:81:fc:7f:ac:81:2b:50:9c:8c:
d1:b3:ce:8a:6d:48:c0:64:68:8b:9f:9d:5d:b1:7c:
37:13:bd:34:8e:2b:59:b3:c5:0c:6a:ac:8d:31:39:
9c:ed:93:de:14:dc:fb:6a:ef:96:e5:f6:11:c2:e8:
88:17:b9:01:78:e0:4e:7e:4f:a6:a9:fa:aa:1e:d1:
27:6a:77:09:14:f0:51:da:50:c5:39:e2:ca:36:33:
61:bf:21:d8:ba:d7:a1:a9:aa:b2:50:47:b9:da:ca:
ea:0c:19:c5:4a:5d:f9:98:8e:5d:fd:31:df:51:7d:
ed:ce:e0:6f:3e:2a:d2:63:36:69:f1:13:93:b1:ef:
ef:dc:ac:4a:a7:c4:6d:b3:31:67:bc:91:ee:ba:f5:
3e:0d:31:f2:9c:06:86:85:81:d4:72:88:65:98:0c:
a8:10:5c:7f:f0:f0:9a:09:db:72:5a:cc:31:22:c9:
17:88:6a:fd:7d:61:43:c0:0c:93:a7:b2:82:d9:80:
93:8a:16:31:d9:5e:0f:b3:7f:97:6f:8b:c4:09:8a:
3a:b3:b9:49:7f:05:f1:7a:a6:53:41:b6:2c:5f:13:
99:4a:ea:db:3a:7c:ab:73:af:15:c4:4a:67:91:22:
0d:06:67:52:6c:bd:45:33:5c:11:4c:b4:62:e9:94:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:94:2E:E3:68:43:94:95:71:F9:05:B2:01:E7:C1:BA:9A:F2:16
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x-WULuNoQ5SVcfkFsgHnwbqa8hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.90.19.0/24
45.147.224.0/24
45.147.226.0/24
176.125.248.0/24
185.126.82.0/24
185.225.0.0/23
185.246.112.0/24
193.58.145.0-193.58.147.255
194.147.16.0/23
Signature Algorithm: sha256WithRSAEncryption
24:6a:c7:ca:df:e0:50:96:ff:af:76:13:a2:c9:3e:34:21:b1:
8a:e9:83:fd:b7:ba:53:41:3a:33:59:e3:ae:8b:e2:1d:83:1a:
55:c1:23:15:7f:bc:4c:c4:39:de:0f:ff:25:f5:42:67:59:1c:
d6:30:85:a7:e3:8d:49:b1:f9:ca:f4:0f:fb:ee:31:35:64:74:
b6:8d:c2:d7:ac:f0:63:59:84:52:eb:de:ba:96:34:9f:f0:32:
6e:7a:e7:5b:64:5e:c2:31:b7:3e:70:49:db:57:58:26:a6:eb:
c6:c6:8b:b5:ef:8d:d7:fa:f4:7e:a7:e3:ed:a2:20:f4:f2:40:
9e:5c:2d:78:2e:f4:d6:69:9b:60:67:6d:52:c1:9d:e6:5d:1d:
92:01:45:4b:86:8d:78:cc:92:75:82:15:15:5e:7a:d3:20:d8:
13:41:37:0c:3e:7c:54:17:93:d8:db:91:9e:57:92:3c:46:d6:
fe:ca:2c:ba:81:8c:0d:21:7c:0b:76:1d:eb:b5:35:a7:ec:8e:
19:3a:d0:0d:c0:8b:62:84:3d:83:9f:1a:7d:d3:28:bb:81:23:
26:2b:ba:ab:bd:80:da:c5:29:81:4c:d6:e8:6c:d3:c6:3a:4c:
d2:3d:34:2a:42:3d:c8:9b:37:dd:d6:a5:be:25:0e:d9:52:a4:
f6:92:82:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org