Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/iKNuDGSEwII2byG7QacFN_Tok_U.roa
File: iKNuDGSEwII2byG7QacFN_Tok_U.roa (raw, json)
Hash identifier: CwgAL4CBCT+ZdjO9bI71aOXgBMgMH2O/AbS73co5I0g=
Subject key identifier: 88:A3:6E:0C:64:84:C0:82:36:6F:21:BB:41:A7:05:37:F4:E8:93:F5
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 0190025097DE1AF2680C22DB766F8C85B316
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/iKNuDGSEwII2byG7QacFN_Tok_U.roa
Signing time: Mon 10 Jun 2024 13:22:34 +0000
ROA not before: Mon 10 Jun 2024 13:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43180
IP address blocks: 45.11.57.0/24 maxlen: 24
45.12.0.0/24 maxlen: 24
45.12.1.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
176.97.112.0/23 maxlen: 23
176.97.116.0/22 maxlen: 22
176.119.31.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
194.42.204.0/24 maxlen: 24
195.66.210.0/24 maxlen: 24
195.128.248.0/23 maxlen: 24
2a09:2dc2::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 03 Aug 2024 11:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:50:97:de:1a:f2:68:0c:22:db:76:6f:8c:85:b3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Jun 10 13:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88a36e0c6484c082366f21bb41a70537f4e893f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:37:62:41:21:8c:be:39:e5:75:0d:c4:6d:
e3:4c:06:3b:d5:08:90:b7:8f:d2:42:c5:53:1b:3e:
78:a0:2a:29:44:f9:a0:10:c1:6c:f0:8e:c1:58:f9:
7a:5f:fe:a1:4f:9e:f3:35:f2:ca:a8:ff:90:1e:55:
3e:18:8d:09:d2:c5:3d:4a:cc:56:57:a5:48:27:30:
f5:d6:9b:e4:37:fe:d7:ca:77:65:05:dc:bf:c0:34:
1d:83:98:2b:fa:e1:cb:16:a4:1e:f4:da:be:93:6c:
46:bc:b9:85:13:b0:8d:eb:d5:49:ac:3c:d0:b6:28:
7e:03:5f:93:f5:a1:3c:a5:5f:25:b4:49:91:a6:07:
29:30:2d:14:73:92:7a:c8:11:be:3b:a5:b8:cf:85:
33:df:ce:42:2a:08:74:a1:9f:a0:31:d5:c2:b2:ae:
26:7c:8b:37:c8:1a:bc:87:40:12:e7:2b:f4:59:ed:
c9:56:bf:3d:aa:b6:4e:2e:42:8f:55:92:6a:30:72:
17:a1:5f:be:fc:06:b9:2c:66:c7:c6:13:3d:7e:b6:
9d:52:92:c8:ea:4d:cd:d0:86:5e:1f:76:2e:b9:ea:
23:52:0d:f3:28:a8:6f:72:9d:d8:bb:17:dc:64:4d:
96:64:ea:76:39:7b:5d:ec:5b:4e:a2:da:10:6f:e6:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A3:6E:0C:64:84:C0:82:36:6F:21:BB:41:A7:05:37:F4:E8:93:F5
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/iKNuDGSEwII2byG7QacFN_Tok_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.57.0/24
45.12.0.0/23
45.12.3.0/24
91.208.115.0/24
176.97.112.0/23
176.97.116.0/22
176.119.31.0/24
185.254.199.0/24
194.42.204.0/24
195.66.210.0/24
195.128.248.0/23
IPv6:
2a09:2dc2::/32
Signature Algorithm: sha256WithRSAEncryption
9a:b9:8b:8b:9a:c9:56:4e:25:44:ec:16:5c:79:17:2b:8c:62:
89:75:5c:f4:dd:87:31:22:95:be:ca:56:c4:d8:8a:3c:73:30:
fd:07:89:f4:2a:93:22:b7:e0:82:2c:70:b9:68:82:f9:14:f2:
77:f2:81:72:d5:86:1a:99:17:17:96:8d:57:4e:a8:c5:8d:1f:
71:25:95:eb:09:7f:a9:a3:be:c1:47:f5:e7:d0:b5:0d:36:69:
ca:f4:ab:c7:3b:4d:c1:8b:63:17:9d:f8:4e:97:d0:f0:cf:30:
ad:00:5d:3d:1b:a2:e6:d8:dd:cb:26:62:35:1b:fa:8d:6a:af:
86:1f:b7:2f:89:d1:e0:c0:ea:5e:9a:51:ff:5b:a3:c9:32:3c:
34:81:b5:70:5e:d3:14:cb:97:c3:a0:67:3f:4f:a2:38:4f:fc:
6d:34:c3:6a:4d:bf:0b:ca:cb:46:9c:cd:7c:26:d0:1f:19:20:
92:b6:e7:03:a7:f4:7f:e5:82:74:c9:d7:c7:8b:35:68:08:4a:
b5:c5:85:c3:b2:13:d3:17:f8:20:47:e7:5f:4c:79:53:b3:07:
23:67:ed:26:c3:26:57:ba:16:25:2f:64:81:b4:49:f2:b6:09:
30:47:0d:f4:7c:5d:db:3b:8b:fc:88:e5:54:79:27:0c:21:3a:
80:9c:f3:ae
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 3 13:12:29 2024 by rpki-client on console-ams.rpki-client.org