Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/E7Yhm8cPG1SbLqN8ALW8CADgVQ8.roa
File: E7Yhm8cPG1SbLqN8ALW8CADgVQ8.roa (raw, json)
Hash identifier: REXqc+1uiMbexJvYK+5NjWS28oyda9riUiESpmPjUt0=
Subject key identifier: 13:B6:21:9B:C7:0F:1B:54:9B:2E:A3:7C:00:B5:BC:08:00:E0:55:0F
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01886728E09E7DF80AEBB638A4755C9378C7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/E7Yhm8cPG1SbLqN8ALW8CADgVQ8.roa
Signing time: Mon 29 May 2023 10:58:32 +0000
ROA not before: Mon 29 May 2023 10:58:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.245.0/24 maxlen: 24
88.209.248.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
2.58.168.0/22 maxlen: 24
5.182.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:67:28:e0:9e:7d:f8:0a:eb:b6:38:a4:75:5c:93:78:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 29 10:58:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13b6219bc70f1b549b2ea37c00b5bc0800e0550f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b9:a4:80:73:92:4c:9b:fb:03:cf:d4:be:1a:
57:55:da:0a:3b:35:e1:a0:a8:42:9d:3c:65:e8:5e:
31:0f:23:01:80:b0:5a:5b:83:68:cd:fd:48:30:9e:
5f:13:62:4f:d4:b4:11:a5:3a:d3:0c:2b:7a:79:e4:
ce:6b:c0:93:3e:aa:84:1f:22:33:53:ef:3c:0d:6b:
b4:1f:4e:3c:a0:4d:08:d6:7d:03:db:19:66:11:e0:
8a:73:91:54:9f:2d:97:2f:b0:4e:78:ee:8e:e6:8f:
e1:e6:16:b5:82:c0:88:f8:88:c1:f6:31:3b:e3:ea:
ea:74:77:1e:b4:f9:64:b1:eb:27:c4:57:15:a3:5b:
8c:df:e6:3e:c2:dc:bb:d2:08:42:4c:32:e4:33:1a:
ec:3b:8b:3d:99:9b:7c:e2:7d:7f:06:b3:a2:e9:36:
1e:b7:d5:d6:79:6b:a1:5f:a4:b1:84:6f:47:3f:b3:
19:fb:49:3f:2a:13:a5:11:dc:e3:46:d1:b8:3d:09:
01:8e:33:61:ef:ec:40:ab:36:a7:16:af:4b:73:f3:
9c:24:b3:d6:a8:d1:eb:09:bb:e8:ad:07:47:64:33:
f3:bf:9f:32:5e:0d:c3:96:ed:6f:0e:5c:dd:fb:c2:
4a:d5:a6:8a:00:81:2d:50:5e:35:a6:c2:04:be:18:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B6:21:9B:C7:0F:1B:54:9B:2E:A3:7C:00:B5:BC:08:00:E0:55:0F
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/E7Yhm8cPG1SbLqN8ALW8CADgVQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/22
5.182.113.0/24
88.151.58.0/24
88.151.61.0/24
88.209.195.0/24
88.209.209.0/24
88.209.211.0/24
88.209.220.0-88.209.222.255
88.209.224.0/23
88.209.245.0/24
88.209.248.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:28:52:ff:4c:33:c1:13:44:3f:30:7a:f0:07:00:9e:e7:eb:
1e:eb:49:6e:a4:13:6b:64:3b:cf:db:fc:bf:67:c0:30:8c:2f:
ba:c2:d6:9c:a1:01:4e:4d:37:eb:2a:c8:2c:87:8f:30:c5:06:
27:54:15:40:13:2a:04:be:f7:47:0d:ef:b3:3b:3f:93:e6:2e:
e6:6b:c7:e6:df:ed:a7:01:2a:9d:1e:f3:ea:1c:c6:0e:a4:9d:
7a:f6:7a:6b:d2:b1:ee:19:d1:55:56:47:33:fc:a1:93:f4:17:
69:85:a6:60:0e:26:aa:64:7b:66:80:80:ba:08:a1:2b:2f:c8:
36:c2:89:be:50:6a:d0:3c:07:ef:f7:59:f2:c9:36:7c:b8:ad:
01:0e:c1:49:2a:a4:19:f7:c2:fe:5b:37:2d:51:ef:75:71:6b:
5f:50:d4:2f:52:99:70:f8:95:64:fc:38:a2:56:f9:12:e5:93:
b1:28:6c:23:4e:2d:1d:15:97:1d:6e:dc:b7:91:4a:a4:f0:0d:
10:77:82:c6:a7:fe:4d:a4:8d:c3:95:44:08:11:b1:9d:9e:47:
d8:10:16:b8:ac:c3:4d:15:e5:00:61:c1:c4:89:c6:94:94:3d:
79:fd:49:3c:06:ad:c0:b2:1d:44:be:a0:79:cd:83:5d:ed:6d:
48:76:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org