Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ntogaG3rmxgtq79zJF7b6q2CXU4.roa
File: ntogaG3rmxgtq79zJF7b6q2CXU4.roa (raw, json)
Hash identifier: 4xrZSpvAgRCMAlm4osP037FsJS79jCoCnw2u1bZykx0=
Subject key identifier: 9E:DA:20:68:6D:EB:9B:18:2D:AB:BF:73:24:5E:DB:EA:AD:82:5D:4E
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 01882BE517688111C9509AD5C8A59323966E
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ntogaG3rmxgtq79zJF7b6q2CXU4.roa
Signing time: Wed 17 May 2023 22:46:53 +0000
ROA not before: Wed 17 May 2023 22:46:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62164
IP address blocks: 45.11.88.0/23 maxlen: 24
45.11.90.0/23 maxlen: 23
185.149.232.0/22 maxlen: 22
185.149.232.0/24 maxlen: 24
185.149.233.0/24 maxlen: 24
185.149.234.0/23 maxlen: 23
185.229.243.0/24 maxlen: 24
193.39.184.0/24 maxlen: 24
193.39.187.0/24 maxlen: 24
45.81.148.0/24 maxlen: 24
5.181.164.0/23 maxlen: 23
5.181.164.0/22 maxlen: 22
5.181.166.0/24 maxlen: 24
185.202.174.0/24 maxlen: 24
5.181.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 May 2023 19:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2b:e5:17:68:81:11:c9:50:9a:d5:c8:a5:93:23:96:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: May 17 22:46:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eda20686deb9b182dabbf73245edbeaad825d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:06:66:5d:de:14:c7:20:c7:e1:2f:a7:05:
4a:02:50:69:f2:3c:ae:c4:00:e4:9b:87:21:16:8c:
f7:a3:c4:49:73:92:24:3c:40:a9:75:b3:d7:7d:38:
98:21:e4:96:9b:27:69:ee:59:df:f4:cf:de:cb:d3:
b9:cb:22:83:df:0d:37:ce:c5:1a:eb:10:57:61:59:
a5:17:de:2c:7d:66:64:46:89:fb:db:34:27:34:b4:
24:86:95:73:e1:93:c8:eb:b4:86:7c:d3:b8:52:90:
62:5d:b2:0e:46:60:19:a8:82:22:d7:a1:9a:b8:b0:
ca:56:64:79:07:f7:1e:b3:a6:dd:c1:cd:32:f5:88:
1e:b1:17:52:47:46:2c:8a:44:95:a8:27:16:4d:84:
b2:c7:95:64:5c:96:3a:36:d1:49:0d:d8:cd:5d:cd:
95:50:41:57:92:06:41:1e:69:85:23:e2:93:31:77:
3a:4b:f0:60:7f:9f:49:07:6f:d3:f9:cb:b1:3d:7d:
d6:d2:38:1f:0c:12:a6:3a:a7:d9:c2:d6:c3:22:87:
b4:4a:b7:38:97:56:b6:bd:9f:4f:f3:a9:ed:2d:20:
eb:5c:ea:eb:f6:ec:88:26:48:96:c2:c2:2f:5e:d6:
16:82:85:53:61:79:2c:81:9f:48:d1:eb:2e:28:55:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DA:20:68:6D:EB:9B:18:2D:AB:BF:73:24:5E:DB:EA:AD:82:5D:4E
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ntogaG3rmxgtq79zJF7b6q2CXU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.164.0/22
45.11.88.0/22
45.81.148.0/24
185.149.232.0/22
185.202.174.0/24
185.229.243.0/24
193.39.184.0/24
193.39.187.0/24
Signature Algorithm: sha256WithRSAEncryption
47:75:85:83:bb:bd:58:f7:43:e8:fa:0b:84:16:91:f4:16:d3:
3d:65:d8:aa:2c:a7:97:50:05:2c:96:ae:89:2b:85:39:86:1e:
a7:16:3c:15:25:4f:1b:c9:40:5a:13:34:2a:3d:de:70:27:a0:
07:49:b3:6f:d0:68:19:15:2d:66:a6:b8:4d:1c:62:0e:5b:cf:
72:89:16:28:0f:96:73:53:81:ce:fb:40:a9:bc:c2:0e:74:e1:
ca:ef:6a:a1:b9:d9:1b:72:4d:4d:e0:bb:1d:4c:76:93:8c:6e:
1a:02:9d:c8:c5:b6:62:b1:22:be:4c:e3:d7:37:76:e5:3d:20:
4e:be:c6:0a:6a:8c:6f:78:87:1a:cd:ac:b1:08:d3:95:58:dc:
93:2f:cc:02:41:ec:10:01:23:fe:f9:7c:9e:6b:2b:13:5d:20:
c7:9d:c4:e4:ed:74:0b:b8:65:66:8d:bd:ea:eb:cf:be:9e:47:
be:91:f3:4a:79:81:eb:df:3c:d0:49:e6:47:2d:f0:ae:ba:84:
b6:23:72:22:fb:5a:46:18:d7:9b:af:4c:2b:49:c2:f9:f0:06:
72:70:a6:fc:33:b7:d9:13:ec:8a:07:f2:b1:11:2d:76:10:ae:
ec:f0:08:30:6d:4f:4b:c7:5e:82:ee:10:96:05:69:2d:53:eb:
f7:d2:33:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org