Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zPQH63hly6dvK47hEt2kAD32kCA.roa
File: zPQH63hly6dvK47hEt2kAD32kCA.roa (raw, json)
Hash identifier: wJvLnluDNaPJwOWs/yiAyHq4WzCrMXLfHItOT+TzAhw=
Subject key identifier: CC:F4:07:EB:78:65:CB:A7:6F:2B:8E:E1:12:DD:A4:00:3D:F6:90:20
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E763149331E99982D89513C59F3BCFC57
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zPQH63hly6dvK47hEt2kAD32kCA.roa
Signing time: Mon 25 Mar 2024 15:18:45 +0000
ROA not before: Mon 25 Mar 2024 15:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.81.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.223.82.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.230.65.0/24 maxlen: 24
185.246.113.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 13:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:76:31:49:33:1e:99:98:2d:89:51:3c:59:f3:bc:fc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 25 15:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccf407eb7865cba76f2b8ee112dda4003df69020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:24:45:a5:49:3d:a4:8a:0d:00:a0:d5:09:
83:9d:26:99:5e:a1:47:50:24:82:a5:1c:54:2b:53:
87:8c:20:2f:be:eb:03:33:9c:e4:ac:7e:8b:d4:b1:
a4:9b:cd:53:29:a1:51:e2:e8:7e:c8:05:59:95:59:
17:0f:16:99:85:01:92:5e:56:aa:9d:79:14:79:d7:
b4:49:09:82:8a:88:62:4b:e4:1b:c2:45:7b:6d:d6:
73:4e:8c:83:4d:49:44:c5:66:ab:45:48:1f:a3:55:
f5:3f:c7:38:e5:cc:72:c6:d7:b9:a7:6a:c1:f6:26:
f8:14:2c:f7:10:df:89:55:17:60:c3:01:0b:cf:1d:
a0:79:ad:01:a0:e6:82:a8:ca:de:13:0d:98:1e:e4:
d5:54:cf:bb:dc:c0:34:2a:ad:c5:c1:44:f1:fe:a0:
24:2e:73:2f:ec:a6:f1:6c:96:5d:18:90:12:13:86:
d6:41:96:d9:47:3e:e3:00:1a:ff:2a:c7:5f:b5:a7:
a7:1b:d7:75:88:40:13:7c:fb:32:bf:65:ee:2f:ab:
55:cd:1d:58:9e:ce:05:e7:26:5f:54:d3:4c:62:67:
92:1b:8e:be:de:c6:63:d3:a7:f4:a5:c6:1d:de:96:
d8:ef:70:fa:81:70:50:35:75:56:47:49:ee:e5:ae:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F4:07:EB:78:65:CB:A7:6F:2B:8E:E1:12:DD:A4:00:3D:F6:90:20
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zPQH63hly6dvK47hEt2kAD32kCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.81.0/24
185.220.250.0/23
185.223.82.0/24
185.225.0.0/23
185.225.22.0/24
185.226.104.0/24
185.227.146.0/23
185.230.65.0/24
185.246.113.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
90:52:cd:2e:9e:0f:8a:36:2b:d9:5b:3a:14:60:e1:86:ae:af:
d5:0c:28:1b:5a:94:cc:b0:00:7b:f8:f0:a7:85:7f:cd:58:a9:
88:f2:2d:fd:40:2b:4c:8d:76:21:80:5b:c8:e2:5b:08:85:8d:
2b:f6:ca:9d:2f:e0:a8:29:56:19:ae:2c:3e:73:2c:ca:60:7c:
ea:44:52:a6:62:b2:8e:f3:40:e1:6e:51:aa:6f:85:94:4c:96:
61:42:3f:d4:32:a4:fb:58:1c:89:83:1f:16:23:5a:fc:15:91:
e3:17:6e:a7:63:bb:0a:5a:4e:46:98:ae:36:6f:51:4d:ba:d1:
a3:5f:b7:9c:83:71:16:09:26:df:90:8a:5b:43:91:a7:3a:bb:
31:53:d5:7e:06:4e:08:68:13:39:07:5e:cb:b3:36:04:91:19:
30:f8:95:19:9b:1e:6e:74:93:18:eb:e4:d9:00:92:6b:10:17:
06:14:f7:41:0f:f6:44:d9:13:25:a6:e1:d5:c9:75:81:35:da:
0d:ec:d5:e9:dd:0d:28:73:5f:e7:5d:68:fd:ce:ff:a9:45:ff:
51:84:bc:2d:d9:09:67:32:fd:0f:43:33:08:17:83:b8:0d:67:
b8:ea:13:57:7e:4c:53:2a:b6:df:a0:5f:69:6a:0d:ab:41:b5:
ce:54:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org