Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zwm1QPDfcmVWJVgWrMj2CY3EHS4.roa
File: zwm1QPDfcmVWJVgWrMj2CY3EHS4.roa (raw, json)
Hash identifier: jmCoHtEAoIcpWhmo7b05fvoQnTI+thq9HBDMwLeTDPQ=
Subject key identifier: CF:09:B5:40:F0:DF:72:65:56:25:58:16:AC:C8:F6:09:8D:C4:1D:2E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018D888B213C223CCD8B308F3A53DCF8C121
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zwm1QPDfcmVWJVgWrMj2CY3EHS4.roa
Signing time: Thu 08 Feb 2024 11:47:15 +0000
ROA not before: Thu 08 Feb 2024 11:47:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.194.176.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.223.82.0/24 maxlen: 24
185.223.83.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.227.146.0/23 maxlen: 24
185.251.229.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 14:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:8b:21:3c:22:3c:cd:8b:30:8f:3a:53:dc:f8:c1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 8 11:47:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf09b540f0df726556255816acc8f6098dc41d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:78:49:8d:46:ca:ad:a9:62:17:c2:ee:61:
63:43:8e:ce:48:14:3e:7c:7f:19:79:2f:da:40:1f:
cb:58:12:f2:c1:5c:10:13:e0:4a:91:1f:72:d7:a5:
5d:db:65:e0:e6:f7:5b:ab:78:31:9d:8b:f5:74:82:
83:6b:4d:07:4d:62:78:d3:ed:2a:57:ae:41:6e:6d:
a8:ed:4b:e9:d5:5e:17:e7:9e:3e:91:c8:44:97:37:
f4:97:52:ad:d8:41:55:bc:79:fb:c5:79:2d:85:56:
5f:40:58:41:84:56:08:53:b7:b3:9f:b9:8f:4e:29:
f0:a7:35:ea:7b:8b:2f:dc:e5:69:3a:72:4d:c5:38:
f3:97:f8:73:44:d2:60:b9:08:b0:02:64:55:02:ec:
d6:ef:58:27:8b:43:9d:35:47:59:a4:17:2d:30:c0:
87:3b:1e:a1:47:00:e4:c1:cc:a6:7a:70:bf:28:33:
30:d6:54:dc:cb:66:68:92:85:a8:78:62:e8:eb:be:
5f:25:33:31:ff:d1:80:6a:e6:5f:14:e9:74:63:88:
48:b4:26:0b:4c:4b:68:ce:e5:0d:d0:19:29:e5:9d:
07:39:b8:26:09:d9:71:e3:2e:dc:40:48:28:b9:7c:
f8:93:4d:0a:e4:58:76:45:50:80:06:9b:f4:cd:61:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:B5:40:F0:DF:72:65:56:25:58:16:AC:C8:F6:09:8D:C4:1D:2E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zwm1QPDfcmVWJVgWrMj2CY3EHS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.194.176.0/24
185.220.250.0/23
185.223.82.0/23
185.225.0.0/23
185.227.146.0/23
185.251.229.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:79:a5:72:94:3c:78:a6:a4:55:b8:a7:92:3f:76:bf:af:69:
3f:2d:76:36:6e:3b:44:d9:1d:01:28:ea:cc:f5:e3:3f:a6:94:
7b:9d:6f:43:fe:ea:4a:fb:4a:7e:c2:0f:a5:4d:6b:da:8c:8f:
0e:b7:47:8b:34:7f:88:36:4f:f0:23:42:94:46:45:61:6a:74:
40:db:8e:71:17:05:9e:6e:66:e0:36:65:d0:01:0b:60:f0:70:
bd:e1:fe:50:41:a4:0f:08:26:bf:08:60:97:0c:09:d5:35:31:
bc:f6:76:1e:3b:23:5b:d6:8a:32:4f:92:ff:9c:6a:a9:86:c9:
0a:7d:72:5c:2a:a6:45:71:c4:9f:ae:7f:cb:d2:4a:bd:c4:e1:
15:2d:7d:b3:89:49:57:54:82:7f:3d:46:61:c8:97:c0:5e:a1:
59:e8:3e:28:64:c3:f8:ae:2d:c5:37:d5:ac:0b:9b:2f:ce:12:
36:8a:78:35:48:67:69:aa:e1:84:d8:0b:1b:ba:b6:4a:0a:c3:
97:a8:d9:88:66:77:8a:38:1b:78:b1:d4:b7:8c:cd:df:c4:8f:
dd:c9:b9:df:37:94:5b:33:29:6d:00:8c:ee:36:5d:a6:10:24:
40:00:f9:b9:fc:d2:96:21:65:3c:a4:65:a5:80:61:90:4c:43:
96:e0:b8:91
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAY2IiyE8IjzNizCPOlPc+MEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMjA4MTE0NzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjA5YjU0MGYwZGY3MjY1NTYyNTU4MTZhY2M4ZjYwOThkYzQxZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIZ4SY1Gyq2pYhfC7mFjQ47OSBQ+
fH8ZeS/aQB/LWBLywVwQE+BKkR9y16Vd22Xg5vdbq3gxnYv1dIKDa00HTWJ40+0q
V65Bbm2o7Uvp1V4X554+kchElzf0l1Kt2EFVvHn7xXkthVZfQFhBhFYIU7ezn7mP
TinwpzXqe4sv3OVpOnJNxTjzl/hzRNJguQiwAmRVAuzW71gni0OdNUdZpBctMMCH
Ox6hRwDkwcymenC/KDMw1lTcy2ZokoWoeGLo675fJTMx/9GAauZfFOl0Y4hItCYL
TEtozuUN0Bkp5Z0HObgmCdlx4y7cQEgouXz4k00K5Fh2RVCABpv0zWFICQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFM8JtUDw33JlViVYFqzI9gmNxB0uMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvendtMVFQRGZjbVZXSlZnV3JNajJDWTNFSFM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALQgVAwQA
ucKwAwQBudz6AwQBud9SAwQBueEAAwQBueOSAwQAufvlAwQBwTqSMA0GCSqGSIb3
DQEBCwUAA4IBAQBbeaVylDx4pqRVuKeSP3a/r2k/LXY2bjtE2R0BKOrM9eM/ppR7
nW9D/upK+0p+wg+lTWvajI8Ot0eLNH+INk/wI0KURkVhanRA245xFwWebmbgNmXQ
AQtg8HC94f5QQaQPCCa/CGCXDAnVNTG89nYeOyNb1ooyT5L/nGqphskKfXJcKqZF
ccSfrn/L0kq9xOEVLX2ziUlXVIJ/PUZhyJfAXqFZ6D4oZMP4ri3FN9WsC5svzhI2
ing1SGdpquGE2AsburZKCsOXqNmIZneKOBt4sdS3jM3fxI/dybnfN5RbMyltAIzu
Nl2mECRAAPm5/NKWIWU8pGWlgGGQTEOW4LiR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org