Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/188dl57BwIOYwex0bQpTsmHDhbQ.roa
File: 188dl57BwIOYwex0bQpTsmHDhbQ.roa (raw, json)
Hash identifier: 1qLATi+qfXsfTjcpimdNZLFuN+iKduEB16lYNf5OQO4=
Subject key identifier: D7:CF:1D:97:9E:C1:C0:83:98:C1:EC:74:6D:0A:53:B2:61:C3:85:B4
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018AB65AC798086B090A62C274E3CB5AF37E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/188dl57BwIOYwex0bQpTsmHDhbQ.roa
Signing time: Thu 21 Sep 2023 06:08:37 +0000
ROA not before: Thu 21 Sep 2023 06:08:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.210.228.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.63.0/24 maxlen: 24
77.242.158.0/24 maxlen: 24
2.58.169.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:5a:c7:98:08:6b:09:0a:62:c2:74:e3:cb:5a:f3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 21 06:08:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7cf1d979ec1c08398c1ec746d0a53b261c385b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:96:33:92:a7:f4:de:6f:76:48:80:9e:7a:
20:ec:1a:f4:f4:d4:55:8a:96:7c:03:15:d5:1c:f8:
f7:60:ba:33:01:10:21:c7:b6:95:a3:3d:a7:ed:fa:
e4:07:09:f4:11:42:eb:a2:65:31:50:e3:fe:61:2f:
ae:00:7d:21:25:4c:64:2e:b6:f1:e6:aa:65:9b:12:
11:ab:e9:91:77:d7:9d:a2:81:32:e1:eb:97:65:ec:
08:9d:7a:74:04:9b:b5:1d:d6:9f:a1:a5:b5:ed:c5:
54:77:fd:12:0c:6e:2d:2b:e5:b0:86:11:75:6c:50:
55:8c:20:a9:a9:c6:b1:21:e9:10:a9:a6:e2:10:93:
34:36:29:d2:43:d5:23:8b:73:b5:e6:ae:b8:fb:80:
fa:15:42:90:0e:bd:6a:c8:1e:9d:3f:16:c0:1b:39:
a9:74:64:2c:db:f1:a5:05:9f:01:49:75:98:7e:1a:
b0:67:06:8d:0d:73:39:01:af:aa:89:c3:07:8c:7e:
79:00:c6:45:36:b7:b0:d9:47:5c:a3:19:16:8b:66:
84:4b:52:a1:56:5c:88:cf:f6:cc:31:eb:37:c4:13:
76:25:20:4a:c5:4c:4e:a6:7f:ab:23:f6:99:1f:8d:
18:1b:ac:75:54:e7:33:e0:41:87:1e:81:aa:79:59:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CF:1D:97:9E:C1:C0:83:98:C1:EC:74:6D:0A:53:B2:61:C3:85:B4
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/188dl57BwIOYwex0bQpTsmHDhbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.169.0/24
77.242.150.0/24
77.242.158.0/24
88.151.56.0/23
88.151.63.0/24
88.209.211.0/24
88.209.216.0/23
178.210.228.0/24
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:6a:18:23:88:c5:d4:b3:c0:b8:86:1c:22:88:69:fc:b4:9c:
f4:98:13:64:cd:d3:6a:00:d9:69:55:85:d8:76:d6:d8:52:29:
e9:49:ca:5d:81:ba:4a:b2:db:1e:09:c6:85:22:da:58:a9:f6:
f7:a9:d4:8b:8c:d2:e8:a1:f9:2c:57:fe:ac:27:62:12:55:d3:
86:1f:a5:ce:8d:b2:af:a1:3e:ae:e1:7d:fd:6a:76:59:b1:32:
f0:7f:ff:9c:6c:34:6a:d8:c6:82:4e:2f:23:6d:50:1f:b5:6a:
78:c1:9c:05:58:41:3b:4e:5e:d6:70:42:3b:96:d1:18:6c:70:
a5:51:ce:f2:4a:0a:65:49:9c:c6:fa:44:6d:a8:c3:c6:59:0e:
36:f7:cf:3e:57:06:d4:7a:8a:19:86:82:ea:e3:0f:6d:2c:dd:
dc:10:2b:f6:ae:e3:91:dc:07:be:3f:c2:3f:fb:2e:59:12:83:
64:bc:7a:06:45:b7:69:42:7c:49:b7:08:94:ba:9a:85:80:e1:
24:ff:36:ce:96:19:19:9e:34:0e:d3:52:e2:fd:af:f2:a9:cf:
b7:ec:4b:60:25:3b:30:68:7c:4f:60:bc:dd:ec:70:d8:5e:c4:
f6:a6:3d:74:4d:00:58:aa:8b:3c:1b:8a:17:4c:23:c2:03:ba:
13:31:29:ac
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 21 10:26:41 2023 by rpki-client on console-fra.rpki-client.org