Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jVzRnUEECbftuXLVVs3pr6DPB-s.roa
File: jVzRnUEECbftuXLVVs3pr6DPB-s.roa (raw, json)
Hash identifier: 2nYgBsqMoMy+JmQjtC1kCas2/NXlKF+PVE8RJSE6l9A=
Subject key identifier: 8D:5C:D1:9D:41:04:09:B7:ED:B9:72:D5:56:CD:E9:AF:A0:CF:07:EB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019388135C17D379BDA3E107C8C12DC781BA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jVzRnUEECbftuXLVVs3pr6DPB-s.roa
Signing time: Mon 02 Dec 2024 15:53:10 +0000
ROA not before: Mon 02 Dec 2024 15:53:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 09:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:88:13:5c:17:d3:79:bd:a3:e1:07:c8:c1:2d:c7:81:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 2 15:53:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d5cd19d410409b7edb972d556cde9afa0cf07eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:c0:62:eb:2a:e5:ff:33:94:67:f4:d3:2b:
6f:21:23:89:36:71:26:2c:85:68:03:57:cb:7b:71:
15:1f:db:fa:87:6c:83:a6:28:6f:14:8b:6d:5f:9b:
14:4a:52:f4:2b:28:76:6d:ed:3f:85:2b:cd:f8:99:
67:20:f9:a3:0d:7f:36:b4:fe:f5:4f:bd:0d:94:a2:
8b:8c:3b:31:31:8f:59:0d:f8:b6:a3:12:f1:44:6b:
fe:b4:77:48:3f:d7:58:91:4c:bd:79:3f:02:1c:79:
53:06:d9:75:9a:c3:27:f2:4b:20:3d:aa:1b:15:a6:
31:47:a8:b8:b5:b2:c3:19:1d:12:79:96:9b:ce:84:
65:d3:49:79:54:ea:93:23:23:d8:96:6e:85:c0:94:
6b:ed:57:df:39:0d:95:bf:65:9f:99:e7:d3:5d:16:
34:61:2a:2e:33:b3:02:b5:34:02:78:2b:c6:4b:44:
08:5a:b3:ff:86:ef:0a:8d:3e:1c:3f:d3:a4:2d:9c:
07:bf:9a:3a:b8:c2:84:fe:f0:33:62:3a:8f:0a:19:
64:22:b4:39:41:0a:b5:a4:26:89:5a:54:c2:88:6c:
d9:80:79:26:4b:18:0a:41:e5:5d:d8:5c:8e:ef:93:
15:41:4e:5a:39:ca:19:66:64:03:2c:5c:57:61:43:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5C:D1:9D:41:04:09:B7:ED:B9:72:D5:56:CD:E9:AF:A0:CF:07:EB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jVzRnUEECbftuXLVVs3pr6DPB-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.220.250.0/23
185.225.0.0/23
185.227.146.0/23
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
67:63:8e:61:25:f0:bb:57:97:ce:32:7c:08:36:7c:88:62:4c:
f8:86:85:3f:5e:41:4d:f9:08:4f:53:fb:b9:17:0b:ab:92:ff:
91:88:28:1c:04:76:bb:e4:e7:38:f9:12:68:f9:a8:5e:40:34:
6f:55:5d:bd:35:8b:8c:16:08:14:8a:50:cb:e6:db:7f:9d:c1:
10:2c:51:63:35:07:f1:48:33:b1:89:bc:7e:85:05:58:a3:ed:
cf:b9:bd:a5:87:79:82:e4:12:90:c3:1a:72:24:29:79:3e:43:
fb:0c:1b:66:be:3b:69:fd:ad:4e:1a:f1:6f:80:8c:47:a4:bc:
3e:41:64:36:df:b4:f4:de:6b:ba:cd:85:06:1c:58:f3:ea:3f:
90:7f:8e:ce:24:49:85:35:02:94:a9:c3:59:88:28:74:53:64:
1b:b5:65:9d:99:20:94:29:30:96:98:08:9b:f5:ab:05:c7:11:
8a:86:01:52:49:98:d7:63:a7:e4:30:be:08:9c:17:24:7d:f5:
c2:1c:1e:94:0e:d1:8e:c5:17:54:b1:ba:e6:0c:42:3d:7a:ae:
69:2f:aa:cd:90:21:36:d0:0f:95:07:2b:e9:42:97:0e:53:b9:
31:24:fd:18:f7:e9:c9:85:22:fd:39:a9:76:73:f5:18:ba:9c:
53:b8:50:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:00:30 2025 by rpki-client