Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HSREvpDgST6Vq8i9mdRiPTKspJY.roa
File: HSREvpDgST6Vq8i9mdRiPTKspJY.roa (raw, json)
Hash identifier: eg4/Dw0gknLxq3Nzdd6WlQak5ksqt80GL8WPdkVBK8Y=
Subject key identifier: 1D:24:44:BE:90:E0:49:3E:95:AB:C8:BD:99:D4:62:3D:32:AC:A4:96
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018AAC37754BDF2B06017964FC94BF84A517
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HSREvpDgST6Vq8i9mdRiPTKspJY.roa
Signing time: Tue 19 Sep 2023 06:53:50 +0000
ROA not before: Tue 19 Sep 2023 06:53:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.245.0/24 maxlen: 24
178.210.228.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.63.0/24 maxlen: 24
77.242.158.0/24 maxlen: 24
2.58.169.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:37:75:4b:df:2b:06:01:79:64:fc:94:bf:84:a5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 19 06:53:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d2444be90e0493e95abc8bd99d4623d32aca496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:09:7e:8c:90:f5:5b:9d:2d:1e:4a:d6:72:
14:b6:f4:60:87:7e:c1:21:c2:17:fd:8b:b5:4a:32:
cb:d5:94:d4:7d:98:f5:03:5c:58:11:6f:2c:df:38:
b3:bb:53:af:e0:06:47:ca:37:31:0f:40:e9:07:10:
d3:f4:d0:9b:9f:83:1c:f5:31:14:eb:bb:fd:ca:ad:
cc:bc:3a:1d:ce:bf:79:68:29:0f:a6:f9:97:9a:74:
2a:94:c2:57:d9:17:04:36:29:17:31:39:dc:29:12:
22:9c:ac:f8:a4:29:29:1d:16:73:9c:30:22:a4:88:
12:4c:82:30:6b:a2:33:df:5c:11:91:02:e2:60:b0:
ff:7a:87:3b:c1:b5:8d:e3:c6:64:61:c1:85:dd:16:
5e:62:4e:b0:09:96:ec:15:1e:73:db:77:18:ae:88:
78:d9:7a:dc:78:a5:b8:24:d2:f2:d3:ad:a0:c2:fe:
77:ea:89:a5:f3:d1:70:cb:30:f3:8e:cd:9f:ee:b0:
83:5a:0a:2a:af:fd:7d:ad:54:57:ce:62:b3:c6:4b:
3a:99:a4:2c:51:54:4e:c2:19:f7:3f:76:81:42:30:
89:f7:61:5e:9d:da:1e:42:31:3d:0c:b1:f8:f9:78:
1f:3d:2d:46:e4:16:12:31:4d:e7:17:b9:94:f7:db:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:24:44:BE:90:E0:49:3E:95:AB:C8:BD:99:D4:62:3D:32:AC:A4:96
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HSREvpDgST6Vq8i9mdRiPTKspJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.169.0/24
77.242.150.0/24
77.242.158.0/24
88.151.56.0/23
88.151.63.0/24
88.209.211.0/24
88.209.217.0/24
88.209.245.0/24
178.210.228.0/24
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
01:50:be:77:15:3c:17:22:23:9a:cd:47:00:d5:88:6f:fd:33:
36:d2:4b:32:0a:b1:cd:34:93:0b:20:7a:4d:7c:a0:aa:79:7c:
8f:52:97:76:98:03:27:3f:db:1c:e0:7d:a0:fe:e2:cd:13:58:
78:be:c2:8f:c9:36:88:d6:c6:c5:78:cf:f8:a3:e8:6c:d8:23:
d7:b6:75:5b:75:0e:cc:9e:e2:48:d4:ea:59:ad:9f:f6:d4:40:
d3:5e:15:63:31:3e:da:08:fd:cd:b7:b1:b1:da:2f:ab:6e:b2:
81:f0:fe:7c:60:cc:64:d0:65:04:85:5b:f1:cb:2a:6b:5a:34:
ef:7c:68:99:2d:55:e5:f1:72:32:c7:d9:bb:74:61:fd:47:11:
49:e9:5e:47:6f:5b:12:4e:69:62:16:a3:e7:f3:31:14:33:1f:
91:c5:f9:57:13:a9:e6:59:22:9b:8a:6f:44:76:b8:6b:d2:20:
65:d3:17:b9:ae:0b:66:c4:2d:a4:93:7c:c4:3a:91:06:4b:ad:
db:35:06:af:8d:82:61:d2:e9:06:ba:28:1f:0b:d7:b2:55:19:
38:11:fb:40:2e:24:45:b0:9d:e1:ec:eb:1c:1d:88:95:ef:c5:
50:1d:8d:4c:44:da:0d:cf:b9:ef:09:b2:a8:cb:a5:b3:9f:7a:
77:76:cd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 15:05:11 2023 by rpki-client on console-ams.rpki-client.org