Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zgHnYQaJYECKTCtJlXTnHJwS42M.roa
File: zgHnYQaJYECKTCtJlXTnHJwS42M.roa (raw, json)
Hash identifier: T9PlHWZ/fDiEw6eBczoYwtOltStuXo3mcPYWuLRNcfM=
Subject key identifier: CE:01:E7:61:06:89:60:40:8A:4C:2B:49:95:74:E7:1C:9C:12:E3:63
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C966DA9B455F0AFC4979E854F9CEB0BAF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zgHnYQaJYECKTCtJlXTnHJwS42M.roa
Signing time: Sat 23 Dec 2023 11:26:58 +0000
ROA not before: Sat 23 Dec 2023 11:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.227.146.0/23 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.210.235.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
45.8.21.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 27 Dec 2023 10:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:6d:a9:b4:55:f0:af:c4:97:9e:85:4f:9c:eb:0b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 23 11:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce01e761068960408a4c2b499574e71c9c12e363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7f:7d:01:0a:44:d2:f3:bd:a5:c9:fc:ef:32:
5a:8c:25:f4:b2:39:c4:64:84:f6:c9:d4:48:cd:22:
a0:84:49:a6:60:be:6b:86:6a:34:4d:77:19:9c:dd:
ab:4d:e2:17:ee:73:e8:97:b4:89:31:44:18:ee:78:
1f:c9:1f:df:6a:82:de:4f:f3:33:6c:d1:8b:54:a4:
d2:ef:4f:da:76:b3:c7:83:cc:1c:ff:41:34:d9:86:
32:45:a9:e5:08:19:f7:6f:fe:38:66:75:a0:f6:29:
05:03:6a:6e:bf:52:09:b0:b8:50:34:1a:92:76:20:
48:4a:e4:a2:e0:e7:42:42:a6:af:02:64:fc:d4:9a:
23:7f:1f:4b:2d:bb:c5:bf:68:71:e9:1f:c9:d9:2a:
5a:ea:3d:a0:9f:cf:a6:c5:01:2b:40:a0:b7:dc:8c:
9f:d9:d7:95:78:fa:9c:3a:ac:d2:fb:b0:c6:13:60:
fa:60:2f:6e:27:72:2d:85:cb:38:54:ee:77:88:34:
82:fa:1c:a6:4a:db:43:84:30:72:a9:dc:01:da:3d:
ab:40:df:f7:db:89:c6:9a:a5:38:73:85:b8:e9:b0:
4b:b6:bb:58:02:bb:50:94:4f:c3:01:05:5f:93:33:
b3:89:81:db:9b:1e:3d:ec:19:13:20:2f:fd:36:ac:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:01:E7:61:06:89:60:40:8A:4C:2B:49:95:74:E7:1C:9C:12:E3:63
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zgHnYQaJYECKTCtJlXTnHJwS42M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.210.235.0/24
185.220.249.0-185.220.251.255
185.223.82.0/24
185.225.0.0/23
185.227.146.0/23
185.251.229.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
79:6c:28:17:dd:0c:1c:40:4b:86:09:29:fa:09:b0:23:3c:80:
70:39:fa:5b:65:4b:eb:f8:2a:ea:27:d5:de:74:a2:8e:f8:d7:
cb:89:41:da:f7:c5:01:02:5d:1c:e4:b4:ca:7e:a2:c8:2d:1e:
69:c9:d5:cd:e7:60:c5:d1:b9:1e:1a:68:12:22:96:4f:0e:59:
dc:bc:04:7e:39:59:47:c6:1a:16:4e:c3:93:33:e7:6c:f9:76:
03:d5:b6:80:5d:13:f1:2a:a0:b0:fa:de:f4:aa:96:0e:c1:0d:
d0:a4:99:d2:4b:46:5b:7d:71:47:5d:4a:52:ac:69:22:c2:1e:
eb:c5:e4:da:82:68:67:a4:a3:bf:e5:c7:22:7a:54:84:ab:ae:
da:38:84:6e:87:5d:e7:71:72:24:75:b6:f3:0b:2c:84:d7:20:
7d:28:98:6f:f7:07:58:0a:c6:2f:9c:6e:45:bf:21:9c:5a:f8:
39:6d:24:ca:10:41:ea:3c:be:97:73:5e:02:b2:35:a0:28:06:
61:a4:18:06:03:0b:24:91:d0:82:81:60:c1:ed:9f:cb:11:29:
d3:fa:5c:85:fe:8e:59:ba:73:5c:8f:24:8c:80:3a:c2:0b:eb:
40:4c:39:b6:57:bf:a1:44:b2:3e:cb:18:71:f4:38:ff:92:0c:
c7:b6:87:37
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYyWbam0VfCvxJeehU+c6wuvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMxMjIzMTEyNjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTAxZTc2MTA2ODk2MDQwOGE0YzJiNDk5NTc0ZTcxYzljMTJlMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi399AQpE0vO9pcn87zJajCX0sjnE
ZIT2ydRIzSKghEmmYL5rhmo0TXcZnN2rTeIX7nPol7SJMUQY7ngfyR/faoLeT/Mz
bNGLVKTS70/adrPHg8wc/0E02YYyRanlCBn3b/44ZnWg9ikFA2puv1IJsLhQNBqS
diBISuSi4OdCQqavAmT81Jojfx9LLbvFv2hx6R/J2Spa6j2gn8+mxQErQKC33Iyf
2deVePqcOqzS+7DGE2D6YC9uJ3Ithcs4VO53iDSC+hymSttDhDByqdwB2j2rQN/3
24nGmqU4c4W46bBLtrtYArtQlE/DAQVfkzOziYHbmx497BkTIC/9NqyKPQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFM4B52EGiWBAikwrSZV05xycEuNjMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvemdIbllRYUpZRUNLVEN0SmxYVG5ISndTNDJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQALQgVAwQA
udLrMAwDBAC53PkDBAK53PgDBAC531IDBAG54QADBAG545IDBAC5++UDBAHBOpIw
DQYJKoZIhvcNAQELBQADggEBAHlsKBfdDBxAS4YJKfoJsCM8gHA5+ltlS+v4Kuon
1d50oo7418uJQdr3xQECXRzktMp+osgtHmnJ1c3nYMXRuR4aaBIilk8OWdy8BH45
WUfGGhZOw5Mz52z5dgPVtoBdE/EqoLD63vSqlg7BDdCkmdJLRlt9cUddSlKsaSLC
HuvF5NqCaGeko7/lxyJ6VISrrto4hG6HXedxciR1tvMLLITXIH0omG/3B1gKxi+c
bkW/IZxa+DltJMoQQeo8vpdzXgKyNaAoBmGkGAYDCySR0IKBYMHtn8sRKdP6XIX+
jlm6c1yPJIyAOsIL60BMObZXv6FEsj7LGHH0OP+SDMe2hzc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org