Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/kUioGS1L4Petqt714hmGlaK0yao.roa
File: kUioGS1L4Petqt714hmGlaK0yao.roa (raw, json)
Hash identifier: rT/fdZMtxV/fuWcBjdNN67T/fUvwuuDkIz7iEBXOG2w=
Subject key identifier: 91:48:A8:19:2D:4B:E0:F7:AD:AA:DE:F5:E2:19:86:95:A2:B4:C9:AA
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 0190594AE4AB5B6DBD8DB3821F0D870077BD
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/kUioGS1L4Petqt714hmGlaK0yao.roa
Signing time: Thu 27 Jun 2024 10:43:18 +0000
ROA not before: Thu 27 Jun 2024 10:43:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43641
IP address blocks: 45.11.56.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
45.134.174.0/24 maxlen: 24
45.134.175.0/24 maxlen: 24
91.222.172.0/22 maxlen: 24
91.234.198.0/23 maxlen: 24
91.234.199.0/24 maxlen: 24
176.97.120.0/23 maxlen: 23
176.97.125.0/24 maxlen: 24
176.97.126.0/23 maxlen: 23
176.97.126.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
194.42.206.0/23 maxlen: 24
195.26.86.0/23 maxlen: 24
195.66.212.0/24 maxlen: 24
195.160.220.0/22 maxlen: 24
2a09:2dc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 06 Sep 2024 15:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:4a:e4:ab:5b:6d:bd:8d:b3:82:1f:0d:87:00:77:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Jun 27 10:43:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9148a8192d4be0f7adaadef5e2198695a2b4c9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:73:f3:e5:cd:64:54:28:b8:0d:84:5e:dd:
09:f4:c6:de:5f:53:6e:eb:3e:c0:17:bc:17:f4:19:
d4:1b:52:c9:bc:ca:58:57:30:78:49:44:19:9d:3c:
37:f3:57:ef:43:bc:aa:6e:48:6e:72:b0:e5:be:44:
e7:51:75:55:06:3b:c6:ae:82:ec:6a:03:c6:30:f1:
a3:f8:f9:c5:38:3d:d7:be:1c:8c:a7:57:71:c1:64:
87:4c:62:e3:29:25:01:54:71:70:20:0e:94:4f:77:
b9:4c:ee:fa:b0:16:2f:a2:61:97:4d:ea:a3:11:1c:
64:9a:7f:21:23:4f:03:d8:be:62:ec:5d:41:da:46:
77:2e:1c:02:7b:b5:a3:53:cb:ad:f2:cc:39:9b:46:
77:8d:e2:44:49:f2:5f:98:9e:6e:86:b1:a1:17:9f:
eb:a0:13:63:0e:65:68:42:82:5f:04:dd:91:39:33:
dc:d7:63:a6:0c:9c:34:ee:70:79:12:83:bc:05:f2:
b8:00:55:df:70:94:be:8d:00:3e:29:3b:25:b0:0e:
e9:a4:23:51:b3:a1:71:bd:23:2f:2f:9d:b9:ae:05:
50:77:ae:9e:f4:bb:4c:93:9e:b1:64:89:37:de:c3:
d7:ff:36:9b:9e:62:8f:29:13:31:b7:7e:38:ef:a9:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:48:A8:19:2D:4B:E0:F7:AD:AA:DE:F5:E2:19:86:95:A2:B4:C9:AA
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/kUioGS1L4Petqt714hmGlaK0yao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.56.0/24
45.11.59.0/24
45.134.174.0/23
91.222.172.0/22
91.234.198.0/23
176.97.120.0/23
176.97.125.0-176.97.127.255
185.254.199.0/24
194.42.206.0/23
195.26.86.0/23
195.66.212.0/24
195.160.220.0/22
IPv6:
2a09:2dc1::/32
Signature Algorithm: sha256WithRSAEncryption
31:33:35:cd:18:ef:b3:8f:85:d8:d5:bc:c0:5f:aa:9d:de:ec:
30:27:40:dd:10:b1:78:60:3a:b7:78:f7:f0:de:12:78:8e:31:
74:94:38:4c:ed:d0:bf:b6:c2:2b:fb:6a:96:75:29:5f:a4:8c:
bc:14:85:d7:a2:7f:9b:ac:d5:90:80:dd:9a:c7:00:a8:c8:91:
5d:ea:d0:9f:15:06:ec:bc:b6:6d:d7:01:d0:da:bc:8d:19:53:
f5:d2:45:96:a7:dd:12:11:8d:4f:26:33:eb:b8:cb:d4:0e:a5:
ac:89:8f:e8:e3:39:d6:b9:5c:d6:c3:54:62:aa:50:2f:0e:a9:
84:55:6d:1f:5d:08:76:19:70:cb:c6:29:4b:fc:da:88:24:ef:
c0:3f:ab:dd:74:06:fa:29:0e:cc:c1:28:e3:4f:9d:1c:eb:d9:
85:20:e3:ec:9b:e4:e6:e7:89:03:73:95:31:18:b1:10:0c:e6:
ea:18:8b:5c:7e:36:f3:aa:84:69:09:6e:04:1e:7b:bb:b0:6c:
ea:06:18:dc:0e:f2:f6:9f:0f:27:42:8f:e8:5e:71:67:2b:58:
b5:06:5e:68:41:9c:00:08:83:fc:a3:0e:d3:c7:d4:0f:e6:de:
5d:5a:4b:07:c3:a1:77:05:ea:18:90:3a:54:0b:70:9b:70:4f:
af:f5:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 18:41:19 2024 by rpki-client on console-fra.rpki-client.org