Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zRUhK5zXsU1OTSg6sg5exl9AEDM.roa
File: zRUhK5zXsU1OTSg6sg5exl9AEDM.roa (raw, json)
Hash identifier: yxlGemQeSEV0S5nemEUjXGWMhlPQfIP4cVAwGZUAIn4=
Subject key identifier: CD:15:21:2B:9C:D7:B1:4D:4E:4D:28:3A:B2:0E:5E:C6:5F:40:10:33
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018DC75DF6E48745424D3A456F91D7A86440
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zRUhK5zXsU1OTSg6sg5exl9AEDM.roa
Signing time: Tue 20 Feb 2024 16:34:00 +0000
ROA not before: Tue 20 Feb 2024 16:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.223.82.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.227.146.0/23 maxlen: 24
185.251.229.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 00:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:5d:f6:e4:87:45:42:4d:3a:45:6f:91:d7:a8:64:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 20 16:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd15212b9cd7b14d4e4d283ab20e5ec65f401033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f4:e9:9b:fb:fc:e7:d5:36:6d:a8:ae:26:df:
c1:bb:5e:28:8f:84:81:20:62:b2:83:75:fd:ba:12:
2b:e8:35:bb:4a:0b:78:af:2e:eb:54:76:6c:03:9e:
27:24:b4:1b:3f:3c:2c:8f:59:40:a8:c4:b0:ea:ed:
5a:48:cd:28:38:76:8f:71:5c:0d:01:78:2e:58:cd:
35:aa:ad:8c:0b:55:15:66:0b:61:18:1a:aa:aa:78:
03:15:57:95:1d:15:03:50:a5:72:02:7e:9c:56:1d:
39:fd:6f:eb:7a:40:54:fa:76:c5:57:6c:29:e8:fc:
05:6d:49:3d:5f:24:65:20:40:9d:7f:0f:0f:de:72:
1e:2e:5b:20:ea:b3:ba:bd:87:e2:2c:52:5e:ef:62:
03:6f:28:51:88:88:ca:9a:e1:2e:a3:a1:f2:62:79:
62:b2:4f:45:c8:e3:6b:56:a1:ab:75:e8:00:8c:ac:
5e:7e:f2:f9:13:50:39:44:1c:a6:24:0d:2b:72:30:
53:74:e3:60:11:99:f1:26:2d:15:f1:f2:9d:04:2e:
33:36:01:0a:23:63:0a:5c:0b:ff:a2:3b:df:90:d8:
47:d1:0f:ac:ed:01:41:8d:5a:af:8c:3b:30:33:72:
75:20:fb:49:6f:3b:f1:56:35:42:59:f0:71:9e:38:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:15:21:2B:9C:D7:B1:4D:4E:4D:28:3A:B2:0E:5E:C6:5F:40:10:33
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zRUhK5zXsU1OTSg6sg5exl9AEDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.220.250.0/23
185.223.82.0/24
185.225.0.0/23
185.227.146.0/23
185.251.229.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:34:ec:6d:a2:58:0d:49:2a:df:57:85:45:8f:f7:66:30:48:
65:af:49:c1:d5:bf:3f:0e:4a:b7:ef:34:30:60:2f:92:5e:11:
14:3e:2f:d0:dd:23:09:49:6d:fc:fc:d4:b1:be:8c:f3:00:11:
e9:4e:b8:4c:94:df:9b:b9:47:9a:d6:2d:60:f3:f2:44:91:53:
04:44:0b:82:b1:91:f6:51:ab:20:9a:9a:da:41:5d:a6:1e:a8:
c6:07:9a:65:7b:74:11:90:04:7e:c1:6a:c6:b0:f1:2b:bb:5d:
5d:f8:e0:70:79:ce:30:78:a3:dc:a4:c2:15:88:77:e5:9d:df:
3a:f5:48:76:00:18:e8:67:2a:b2:c8:d3:bb:ac:94:68:41:4d:
99:fb:b7:cf:d3:29:70:85:97:91:f7:db:0b:87:d6:32:af:44:
e1:0f:65:bd:e8:9d:9e:0d:a3:b3:02:07:25:41:01:f4:74:8f:
c3:84:74:c1:6f:10:0f:21:9d:46:45:25:24:b5:4e:f6:f9:88:
2e:1c:6e:94:44:f7:0b:86:2d:38:28:c0:42:51:c5:a2:2a:02:
cd:a8:a7:6b:ae:a7:7f:c1:f9:a6:be:0f:42:41:d6:8f:25:ac:
57:e2:b3:af:6f:45:3c:fe:15:77:a3:fb:98:1e:cd:d4:7e:e9:
a2:f9:16:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org