Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/mO2xkOK_h_xm6otBqMxD7CLRnYo.roa
File: mO2xkOK_h_xm6otBqMxD7CLRnYo.roa (raw, json)
Hash identifier: k+zYwb4trSNA+aEmLcKPv+3qvBkoTT+sfl2p2CR7FoE=
Subject key identifier: 98:ED:B1:90:E2:BF:87:FC:66:EA:8B:41:A8:CC:43:EC:22:D1:9D:8A
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 0188304A4719EC5D6E6576EB8717F35244A4
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/mO2xkOK_h_xm6otBqMxD7CLRnYo.roa
Signing time: Thu 18 May 2023 19:15:54 +0000
ROA not before: Thu 18 May 2023 19:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62164
IP address blocks: 45.11.88.0/23 maxlen: 24
45.11.88.0/22 maxlen: 22
45.11.90.0/23 maxlen: 23
185.149.232.0/22 maxlen: 22
185.149.232.0/24 maxlen: 24
185.149.233.0/24 maxlen: 24
185.149.234.0/23 maxlen: 23
185.229.243.0/24 maxlen: 24
193.39.184.0/24 maxlen: 24
193.39.187.0/24 maxlen: 24
45.81.148.0/24 maxlen: 24
5.181.164.0/23 maxlen: 23
5.181.164.0/22 maxlen: 22
5.181.166.0/24 maxlen: 24
185.202.174.0/24 maxlen: 24
5.181.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 02:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:4a:47:19:ec:5d:6e:65:76:eb:87:17:f3:52:44:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: May 18 19:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98edb190e2bf87fc66ea8b41a8cc43ec22d19d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:61:1c:95:6d:60:56:d7:b6:c0:d6:ed:6c:
6a:0a:fc:3a:4b:ae:6b:fb:b1:d6:5c:53:9b:50:1c:
8b:6c:6b:15:b0:4c:e3:2e:e5:81:81:09:79:9b:bb:
01:43:9d:6d:9d:e2:78:8f:b4:e7:af:fd:63:8a:a2:
15:bb:32:3b:44:03:13:d4:08:1b:54:02:ed:cd:e6:
d6:a0:8f:2f:ff:b0:37:e3:bc:aa:48:6b:e5:d4:c8:
2f:4b:f0:d4:8d:cd:08:15:09:5b:41:cc:a8:ac:80:
b3:cb:0f:c1:68:47:04:a9:b1:8f:b6:50:8d:53:a3:
f7:b7:f5:4e:01:a8:e3:9a:f5:ff:dd:9e:e5:60:3a:
60:60:d6:6f:66:b9:9a:d6:ca:5c:1a:0a:96:f4:c5:
db:77:e1:50:dd:67:9d:6f:c0:c9:fe:d0:f1:aa:82:
5b:ff:41:39:d7:6b:01:0c:c1:29:fe:c3:ef:87:b6:
f2:ad:76:e9:62:58:7c:14:c0:e0:cd:4b:ad:d2:a3:
25:bc:0d:a8:8c:c8:27:49:c7:0a:69:db:c1:d3:d1:
c6:bf:97:66:8d:e3:94:a9:3c:41:e3:2c:56:d8:ae:
25:1a:e1:ac:1c:cb:12:01:2e:bd:19:ac:64:91:84:
61:13:18:04:74:8a:68:4f:fd:ca:a8:bf:3f:f1:a2:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:B1:90:E2:BF:87:FC:66:EA:8B:41:A8:CC:43:EC:22:D1:9D:8A
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/mO2xkOK_h_xm6otBqMxD7CLRnYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.164.0/22
45.11.88.0/22
45.81.148.0/24
185.149.232.0/22
185.202.174.0/24
185.229.243.0/24
193.39.184.0/24
193.39.187.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a7:39:c4:54:20:f2:f0:39:83:0f:f2:16:ab:69:43:74:08:
70:0d:c7:4a:fa:1c:e7:43:06:82:27:a7:15:80:9b:a6:83:b1:
0a:47:48:fc:83:c1:de:c6:4f:70:7f:d5:4a:36:7b:a3:8c:0a:
ef:db:d5:11:47:73:6c:23:d1:76:ba:b2:d0:ca:56:e1:88:2a:
fe:9e:f7:58:eb:bd:7b:ca:42:f0:d9:90:ec:74:87:6f:6f:40:
d0:fa:90:c3:99:d0:bc:60:64:ea:37:b5:08:e2:7f:5a:b4:9e:
6e:07:ad:33:01:2f:8a:00:ac:8b:6c:c8:c4:e9:c0:a5:0d:52:
86:1d:42:a9:7e:b7:bd:e7:15:e9:03:1c:00:24:e9:37:9e:4e:
da:4f:97:60:43:64:61:14:c4:75:e6:09:7d:28:d3:f0:c3:80:
a0:ab:cb:7e:34:e5:3c:b1:d8:b1:cc:d8:ea:af:f5:7a:1c:f6:
73:82:07:03:18:d5:98:ff:f1:e0:25:db:c0:aa:73:36:71:67:
9a:e8:9c:c2:fb:9a:c5:d9:34:14:fc:c8:19:c2:60:42:79:3a:
a2:95:77:ac:fb:2c:3b:09:7d:fd:0f:11:00:34:50:9f:00:c4:
b7:6c:28:1a:6e:10:f3:c6:2d:b5:e6:bd:9c:1b:3e:f3:0e:29:
c6:30:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org