Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1Ha52ZAGBI6iJPHeSk7-thJJLjU.roa
File: 1Ha52ZAGBI6iJPHeSk7-thJJLjU.roa (raw, json)
Hash identifier: MfB257DkGdtrbApwhmNKp9CsbWHU2bnNSF9xKvtcz8k=
Subject key identifier: D4:76:B9:D9:90:06:04:8E:A2:24:F1:DE:4A:4E:FE:B6:12:49:2E:35
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018BA46D1D01B52E17E297888A654BF21E2D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1Ha52ZAGBI6iJPHeSk7-thJJLjU.roa
Signing time: Mon 06 Nov 2023 11:38:16 +0000
ROA not before: Mon 06 Nov 2023 11:38:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 83.137.158.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
178.210.225.0/24 maxlen: 24
178.210.224.0/24 maxlen: 24
193.138.125.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:6d:1d:01:b5:2e:17:e2:97:88:8a:65:4b:f2:1e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 6 11:38:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d476b9d99006048ea224f1de4a4efeb612492e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:e3:2d:26:08:28:aa:4d:45:58:03:d4:4f:
bc:d8:fa:d1:f5:7c:ff:68:8d:cd:83:9a:03:f5:d4:
7f:f6:4b:b3:9e:e0:90:ea:5f:4b:04:e7:21:8c:3b:
ae:58:8f:77:dc:8d:76:26:a3:50:ea:e0:a6:9e:07:
12:82:3b:c1:f9:88:ea:2a:47:11:75:c8:05:8d:61:
89:d6:53:4f:6e:d4:9c:4f:ea:86:a0:71:7d:d7:d0:
d1:e7:06:f4:15:6d:29:2d:1c:98:d2:33:8f:bd:3a:
73:5b:30:ae:69:35:ef:6e:0a:1d:f9:14:e4:30:82:
be:28:eb:58:f6:69:f4:50:6d:27:0b:d1:a0:95:d7:
69:f1:0f:63:fd:d7:c9:3c:67:23:d5:e4:cd:f6:f1:
0f:7a:22:ef:be:6a:43:90:39:14:c4:e7:d5:54:1d:
cb:d9:ea:b7:80:96:38:18:7d:5a:71:dd:07:49:35:
b0:0d:54:25:44:8a:6e:5a:f4:d0:c5:65:a9:7e:a2:
ee:d5:cb:54:14:57:71:f4:40:54:41:82:e8:13:d7:
75:e5:3b:19:83:e7:12:80:f0:7d:50:a0:59:40:5f:
7c:1b:01:57:27:21:7d:c6:99:02:30:af:4b:00:22:
b4:1b:dd:9e:5f:84:19:39:62:99:d9:7d:5a:0a:3d:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:B9:D9:90:06:04:8E:A2:24:F1:DE:4A:4E:FE:B6:12:49:2E:35
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1Ha52ZAGBI6iJPHeSk7-thJJLjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
83.137.158.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
92.52.208.0/21
92.52.219.0/24
178.210.224.0/23
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
63:77:51:b1:a8:04:92:7c:3e:d7:6d:04:68:59:0b:ca:80:81:
15:0e:fe:63:ca:0b:b3:20:0f:eb:4f:89:3e:bb:58:ca:5f:fe:
cc:c0:5c:1d:be:ef:68:30:88:a3:0a:eb:22:9b:8a:58:e8:61:
2f:6e:bc:b7:d0:20:31:a0:e8:d3:05:3d:73:88:e8:61:c0:56:
d4:29:af:0a:c2:4e:d3:b4:09:89:9a:6a:df:f1:ee:26:7b:e9:
cc:67:fc:b0:4e:86:c5:0a:ea:60:4d:cb:16:7c:cf:20:4c:e0:
93:63:8d:f9:65:48:0c:6c:8e:28:4e:61:86:2f:85:42:37:e1:
eb:a9:1e:bf:be:08:09:ef:ba:06:af:99:c1:f3:fe:1e:b6:be:
fd:42:10:a3:b8:a2:a9:06:9c:91:b0:f0:a5:57:0b:cd:c7:2a:
d6:5e:40:b3:71:7d:dd:e8:66:86:7c:30:6a:84:c3:b4:df:f4:
38:94:9b:27:6d:7c:94:c8:52:4a:e9:72:63:30:b8:3d:3b:5b:
ee:73:6a:95:39:f8:57:c4:8e:d7:2a:36:93:6e:de:93:5c:7f:
e5:64:13:ef:ec:f5:40:2f:0f:f4:0c:86:dd:f9:5b:52:66:d3:
cb:c5:6e:d0:3f:d6:e5:bd:8a:db:ad:d8:fb:92:28:62:00:e7:
96:69:52:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 15:45:16 2023 by rpki-client on console-fra.rpki-client.org