Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7r9rfKHSgqOvAtbWgYCBym_QA3k.roa
File: 7r9rfKHSgqOvAtbWgYCBym_QA3k.roa (raw, json)
Hash identifier: lF5DBQyzoea0oTjm1GpNj1GHRlfUvDJ5ID0z6vqkgnM=
Subject key identifier: EE:BF:6B:7C:A1:D2:82:A3:AF:02:D6:D6:81:80:81:CA:6F:D0:03:79
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188C413AE0DDB2C4EBE69AD02EED39E90AE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7r9rfKHSgqOvAtbWgYCBym_QA3k.roa
Signing time: Fri 16 Jun 2023 12:00:03 +0000
ROA not before: Fri 16 Jun 2023 12:00:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.254.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
88.209.219.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:13:ae:0d:db:2c:4e:be:69:ad:02:ee:d3:9e:90:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 16 12:00:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eebf6b7ca1d282a3af02d6d6818081ca6fd00379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:d9:bd:6c:6a:d5:46:8d:74:c5:8a:6c:f9:
f9:08:f3:cc:45:31:72:7f:23:0a:b9:05:3a:95:86:
92:2a:53:52:d5:c3:3b:a3:05:a2:c7:09:63:34:4f:
73:65:5d:64:5f:de:aa:2f:ce:33:21:12:88:81:59:
ab:66:af:92:d3:01:7e:8c:c0:f7:5e:fd:a5:2f:af:
8c:db:aa:6e:0c:59:f6:5b:07:91:10:a1:29:f3:c4:
79:c5:9b:2f:ab:8d:08:29:87:e6:bc:b2:0b:b0:83:
e0:80:45:04:f7:71:cd:f5:94:d7:67:67:c5:6f:f7:
55:d8:95:51:d6:b7:bf:51:bd:43:d9:e8:4d:e6:18:
e4:ab:f5:08:17:3c:72:cc:9d:16:0c:e6:5b:1e:cf:
58:95:84:6f:31:96:20:ff:2c:7d:e2:4e:9c:72:54:
5c:48:0f:e9:9c:7d:8c:70:88:ef:b3:3f:91:c1:19:
97:30:57:ae:f8:2f:83:a0:7d:0e:97:9d:89:f4:e1:
48:e2:30:18:87:e2:03:ac:1b:0b:a0:57:85:a5:f2:
99:f0:5f:77:77:e3:5f:12:3f:d3:dd:bd:98:71:94:
09:37:df:08:16:0c:5b:b8:58:7b:db:88:82:2e:80:
3f:66:1d:6f:a5:ed:30:ba:d5:17:1f:a9:6f:ad:9c:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BF:6B:7C:A1:D2:82:A3:AF:02:D6:D6:81:80:81:CA:6F:D0:03:79
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7r9rfKHSgqOvAtbWgYCBym_QA3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
77.242.152.0/22
83.137.153.0/24
83.137.157.0-83.137.159.255
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0-92.52.218.255
178.210.232.0/22
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b0:93:29:4f:9a:0a:16:4e:45:8f:5b:a4:b8:7a:25:eb:c2:
55:09:6f:6b:4a:8f:6a:3b:e1:33:41:1a:0d:a6:25:0b:5b:a5:
95:ed:c2:61:e8:e1:ce:5d:50:b1:13:3e:0a:24:a8:fd:ce:27:
38:b8:a8:7c:04:4d:bf:07:39:03:10:ad:f6:6a:7a:6c:34:b0:
88:e4:12:2a:ff:38:ab:e1:6a:67:69:02:2d:e8:71:cd:6c:43:
46:a2:16:3c:91:7b:1a:f9:16:1b:8b:ba:9b:b2:4a:00:52:61:
90:30:0d:dc:5c:c9:20:8c:79:2f:ab:65:05:f9:63:c7:84:d6:
d7:1a:5e:11:b3:2f:7e:2a:06:7a:72:11:06:cf:b7:b1:a3:5b:
49:ef:01:ea:84:72:af:4f:08:72:ae:9e:7e:66:ac:26:72:d0:
2c:45:ea:0e:f7:c3:de:a7:9d:ee:77:8a:0d:a5:07:ea:aa:8f:
36:4f:96:3b:28:7b:62:17:78:a5:5e:12:10:96:2e:4e:26:9c:
b1:f0:1e:38:a2:b4:f2:e7:68:be:e6:ac:2c:5f:f3:8e:f3:f2:
25:9a:00:6a:25:90:cd:23:ef:3e:48:ae:aa:c4:63:97:7c:de:
15:35:65:ca:90:87:9c:44:a4:f1:46:74:15:1a:b8:96:18:c5:
eb:9f:48:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org