Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6p-C5cHEIlaXEj-cU1Diqv425pM.roa
File: 6p-C5cHEIlaXEj-cU1Diqv425pM.roa (raw, json)
Hash identifier: ZvrayoJBRx9UcYwYozoU3RFJWluCOu+oLmrKiDFj34c=
Subject key identifier: EA:9F:82:E5:C1:C4:22:56:97:12:3F:9C:53:50:E2:AA:FE:36:E6:93
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018871EB642F5C506CF8BE7F871CF35073EF
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6p-C5cHEIlaXEj-cU1Diqv425pM.roa
Signing time: Wed 31 May 2023 13:07:11 +0000
ROA not before: Wed 31 May 2023 13:07:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.245.0/24 maxlen: 24
88.209.248.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
2.58.168.0/22 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 07:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:eb:64:2f:5c:50:6c:f8:be:7f:87:1c:f3:50:73:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 31 13:07:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea9f82e5c1c4225697123f9c5350e2aafe36e693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:03:2c:d7:68:55:6e:ac:ee:c7:2a:5c:41:
11:3d:54:dd:30:47:4a:35:49:38:19:99:b3:c6:89:
b3:a4:b5:09:c2:50:0c:b3:39:40:e5:3a:8a:f0:2a:
ad:88:65:60:40:63:49:8d:68:38:af:99:83:14:95:
52:ae:7d:92:e1:bb:8e:39:d1:0f:6f:2f:41:c6:52:
cb:0d:f1:d1:e1:b6:ee:ae:76:dd:f0:ac:08:21:94:
dc:ab:ec:23:e9:e7:29:f5:15:f5:7c:06:a9:cb:94:
2c:43:db:3e:ce:00:b4:25:9d:2f:0e:c3:63:01:6a:
9d:fd:e7:83:ac:46:3d:5e:34:d3:d6:6e:1d:40:ff:
5d:39:92:38:1b:7b:2d:c9:8a:58:ac:cf:66:e3:4f:
1a:4d:77:e0:e6:08:3c:66:4a:e4:b1:a8:4c:c9:99:
54:d7:a3:80:fe:9d:ee:ba:ad:27:ec:2c:1e:8f:a5:
2d:a7:e5:e2:b1:fd:45:59:ea:fb:6b:19:36:12:15:
35:45:83:81:8a:49:a2:a7:2a:ac:9f:87:0a:7c:92:
91:85:53:1d:a7:10:46:d4:e6:84:c3:e6:d5:2c:36:
3b:f0:2d:83:ef:62:cb:16:59:ea:49:e1:04:54:d4:
01:e6:f1:e3:3e:d5:11:20:a8:50:66:a8:a3:fe:3f:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9F:82:E5:C1:C4:22:56:97:12:3F:9C:53:50:E2:AA:FE:36:E6:93
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6p-C5cHEIlaXEj-cU1Diqv425pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/22
88.151.58.0/24
88.209.195.0/24
88.209.211.0/24
88.209.220.0/24
88.209.222.0/24
88.209.224.0/23
88.209.245.0/24
88.209.248.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:bf:01:25:45:51:f2:7a:0d:08:a0:32:d3:fa:81:4b:c9:47:
41:8e:c9:31:2f:47:0a:31:92:ff:ec:b6:12:e3:e1:dc:fb:2d:
34:c9:4e:9f:9c:fa:f0:e7:9a:53:f6:92:59:58:a6:f9:7d:f3:
ff:1a:a5:97:f4:20:08:57:5b:47:e3:f5:03:3a:3e:60:30:cc:
12:f3:88:b9:53:85:1f:e7:b0:7a:6a:d5:43:2d:73:50:44:e6:
a1:0e:20:88:02:57:32:72:5b:b8:72:66:2d:90:14:b1:e9:06:
88:b4:27:91:03:0c:22:0e:ea:e3:92:8c:2f:bd:19:70:c8:82:
63:63:cc:2b:6d:6a:77:dc:41:f0:4a:02:04:b0:50:26:6a:a9:
3d:3b:68:c6:07:67:c0:6d:e3:9e:ab:1a:f9:d6:64:d1:40:a9:
89:6b:d1:c2:74:94:cc:da:01:cc:e5:42:25:21:4c:52:28:be:
53:91:3a:90:67:ba:64:2a:88:12:3e:83:8a:d8:7d:12:21:c9:
4a:ed:0a:00:77:30:f9:ef:f9:a6:e2:a2:1c:cb:b1:d6:26:a5:
0f:86:9c:ef:28:12:55:97:ae:8b:35:71:23:70:6f:0f:1e:ca:
eb:f3:71:d3:c2:7f:3d:e9:42:c6:01:50:08:98:44:fd:86:8e:
2d:1c:38:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org