Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/IkYYvdo0F95ZN86HWXgudxivJKw.roa
File: IkYYvdo0F95ZN86HWXgudxivJKw.roa (raw, json)
Hash identifier: 3J8nHg7ICY8DGsca+M1TKuyCpnTZQPxsMFxN4RAEy28=
Subject key identifier: 22:46:18:BD:DA:34:17:DE:59:37:CE:87:59:78:2E:77:18:AF:24:AC
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0189C74D970A786F3C8BDD284B9657F29867
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/IkYYvdo0F95ZN86HWXgudxivJKw.roa
Signing time: Sat 05 Aug 2023 20:04:58 +0000
ROA not before: Sat 05 Aug 2023 20:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30938
IP address blocks: 45.12.216.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
45.12.218.0/24 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
31.192.240.0/21 maxlen: 21
5.178.97.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.178.99.0/24 maxlen: 24
5.144.183.0/24 maxlen: 24
5.178.100.0/24 maxlen: 24
5.178.105.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
5.178.109.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 17:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c7:4d:97:0a:78:6f:3c:8b:dd:28:4b:96:57:f2:98:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Aug 5 20:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=224618bdda3417de5937ce8759782e7718af24ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:12:33:b4:d7:18:ff:d8:d6:77:43:0c:26:a1:
33:4c:1f:7e:85:59:2a:4d:4b:19:ce:94:fe:31:41:
99:21:3a:40:89:5b:1a:e4:cb:e7:b1:e6:ff:da:76:
89:fc:7e:f8:e9:49:72:72:0f:d4:83:bb:43:ea:29:
f7:4f:73:82:e6:67:f4:14:4b:28:d6:4d:8a:d7:19:
9c:d8:7b:e8:fb:8f:55:c3:c1:3c:d2:e0:02:71:4f:
51:c1:0f:b4:a9:d4:c0:e1:64:dc:a5:55:00:43:20:
b2:d1:65:7c:c4:d3:a0:59:bc:1e:ea:6e:8e:4d:a8:
ca:13:1e:21:d3:c9:7d:6d:7e:cd:66:57:bc:76:6b:
4c:f2:19:3e:3a:e6:e5:6b:dd:e0:f4:e5:79:33:b0:
52:28:dd:96:d0:df:5b:8d:18:26:36:69:f2:c3:c2:
1d:bb:a1:b2:75:5b:56:99:96:7d:b2:82:b0:69:79:
dd:66:fe:15:d5:39:5e:96:cf:ca:4c:30:e4:be:c4:
d5:8d:2f:36:d1:ce:d3:e8:ad:f0:aa:07:14:08:92:
d4:eb:e3:3d:9d:b3:b0:6c:59:77:a8:5a:7d:f2:60:
18:cd:d9:66:d5:ce:16:37:b6:de:b7:dd:1d:6c:bb:
28:1b:f8:de:e3:13:0a:9a:70:73:66:35:37:33:20:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:46:18:BD:DA:34:17:DE:59:37:CE:87:59:78:2E:77:18:AF:24:AC
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/IkYYvdo0F95ZN86HWXgudxivJKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.144.183.0/24
5.178.96.0/23
5.178.99.0-5.178.100.255
5.178.104.0-5.178.106.255
5.178.109.0/24
31.192.240.0/21
45.12.216.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:d0:18:dd:39:2b:de:f7:de:09:11:56:d2:f0:01:59:ac:a0:
fe:75:a9:93:44:a4:7e:f7:a7:48:4f:cf:82:76:1b:05:78:1e:
00:ce:e9:6a:72:d1:25:f4:77:16:b4:68:3c:9a:cd:a3:48:9a:
b0:8f:04:da:5c:db:fb:8e:9e:de:98:c9:ba:00:af:82:57:9a:
36:39:bc:ea:00:40:32:95:be:18:0a:90:35:73:b3:68:7e:5e:
b5:94:4f:7d:9d:67:98:1a:46:41:fc:4b:0f:e8:be:17:00:0e:
60:de:b0:14:3b:70:9c:d3:31:e7:2e:c9:5f:36:af:b9:d3:e2:
5c:95:e4:41:1f:80:f4:8e:dc:d6:37:93:c2:89:45:ba:29:07:
07:f7:4e:f5:3a:8f:c5:41:88:1c:27:03:cb:d7:43:b4:bf:9e:
e2:44:aa:59:20:21:39:50:68:7d:d1:1d:d1:47:fc:28:48:5a:
0a:c8:f3:7f:6e:7e:ac:5b:b4:e2:1e:78:e8:14:d6:c0:f5:9f:
0e:e4:58:56:28:9c:f9:af:0c:93:86:46:a7:e0:54:a5:c7:ff:
4a:17:7d:60:22:99:c5:45:28:69:62:b5:8c:71:f8:5e:3b:47:
91:e4:f4:16:e0:af:14:d5:18:e7:c4:8a:bf:1b:55:50:da:8d:
96:f4:3b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:14 2024 by rpki-client on console-ams.rpki-client.org