Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Ca3BhjmfNFxWs-XcEohX_-rGn3E.roa
File: Ca3BhjmfNFxWs-XcEohX_-rGn3E.roa (raw, json)
Hash identifier: liLqcG9/LvRaq0wUJfrnMaD4ZUGXV4EVsers4sDDomE=
Subject key identifier: 09:AD:C1:86:39:9F:34:5C:56:B3:E5:DC:12:88:57:FF:EA:C6:9F:71
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018D3B2BA304D3DEFB963761ABA4206DBC79
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Ca3BhjmfNFxWs-XcEohX_-rGn3E.roa
Signing time: Wed 24 Jan 2024 11:12:11 +0000
ROA not before: Wed 24 Jan 2024 11:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 2.58.171.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
88.151.59.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.209.192.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.207.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.244.0/24 maxlen: 24
88.209.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 08:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:2b:a3:04:d3:de:fb:96:37:61:ab:a4:20:6d:bc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 24 11:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09adc186399f345c56b3e5dc128857ffeac69f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:3a:23:23:fb:79:92:9f:36:45:24:34:8b:
7f:e4:3d:92:0a:3e:6b:e3:87:48:28:08:55:2a:0d:
12:b4:e8:b0:ba:3f:76:96:2b:34:28:7f:24:0e:1f:
84:1e:76:93:e3:1c:60:ef:42:8e:2b:a4:c9:74:87:
7b:9d:60:22:52:0f:db:c2:d7:2b:26:bf:1d:b6:ab:
ca:a2:f6:7e:10:77:44:51:4f:75:7e:8a:5d:87:35:
16:62:d9:62:f3:27:a9:4b:9c:4f:12:80:90:da:d9:
8f:09:d6:23:39:63:bd:ee:2c:0f:e0:64:b6:4e:79:
84:fb:d7:cb:9c:db:d8:70:98:18:e3:39:92:23:ec:
11:0e:3b:93:77:c2:84:4a:e8:5d:ee:6d:85:dd:70:
9e:fc:33:2f:3d:19:69:b2:f7:0b:9f:dd:f1:d4:cd:
f4:24:19:63:91:61:e0:42:9b:6d:04:5c:9d:d9:5c:
37:a4:a3:e6:5c:01:d1:d2:67:c0:4f:dc:cf:fe:03:
dd:bd:6e:ee:36:38:56:e0:61:3a:11:f8:b0:96:53:
ab:eb:a2:71:96:74:cb:70:48:6f:f3:06:c6:ab:07:
72:cd:2c:b6:58:6a:16:91:51:f4:ba:77:14:97:fd:
2b:75:4f:a5:3d:00:58:4d:0a:1c:7f:eb:f8:ec:d8:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AD:C1:86:39:9F:34:5C:56:B3:E5:DC:12:88:57:FF:EA:C6:9F:71
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Ca3BhjmfNFxWs-XcEohX_-rGn3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.171.0/24
88.151.56.0/24
88.151.59.0/24
88.151.61.0/24
88.209.192.0/24
88.209.194.0/24
88.209.207.0/24
88.209.209.0/24
88.209.211.0/24
88.209.221.0-88.209.222.255
88.209.224.0/23
88.209.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:ae:01:3c:da:18:b6:76:32:67:ac:75:24:a8:46:5b:ef:ab:
2d:3a:92:e4:7b:48:f2:00:b9:cd:89:ac:73:ef:62:a1:23:cc:
3c:c5:24:5c:77:0a:4a:66:11:18:1c:6a:67:38:85:9b:18:35:
ee:ec:24:dd:25:41:12:f8:e7:f2:83:33:1e:10:af:7c:08:05:
0c:ab:97:75:f6:e5:d1:b8:e2:78:17:8a:90:e8:bd:2b:0c:2c:
cb:1f:b2:49:67:bb:d1:c7:91:03:5d:8b:f3:39:2d:89:8d:4f:
1f:05:7f:3f:2f:a7:6f:e5:c5:50:90:d3:75:da:27:05:87:ee:
70:01:76:3c:e3:6c:8b:ac:ff:38:5a:8c:29:83:ef:ae:dd:1e:
42:85:0a:52:72:7b:58:1a:02:e3:d9:3e:ed:c8:01:84:11:ce:
a3:fc:6f:ab:74:00:e7:74:f9:e3:3b:c6:a1:e2:34:09:7e:ac:
f5:61:bf:56:9f:f6:4e:43:2c:be:55:1b:7c:1c:d9:4d:6c:41:
37:2d:9e:73:00:dd:8a:55:c0:5c:41:ad:66:46:84:b7:f2:68:
f3:18:28:02:2e:55:be:2d:3c:f7:81:9e:46:6c:63:61:5a:45:
3b:ac:68:0f:83:6e:c3:d7:8b:f6:0d:cd:7b:cf:ee:37:bf:26:
a4:03:dd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 11:11:46 2024 by rpki-client on console-ams.rpki-client.org