Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HZK7ApEQ6liLQdw9AG6qIb_EEx4.roa
File: HZK7ApEQ6liLQdw9AG6qIb_EEx4.roa (raw, json)
Hash identifier: vtTbFgH8hNhNtodT1EgSwIPWokABTWapKo3bud4Rg8I=
Subject key identifier: 1D:92:BB:02:91:10:EA:58:8B:41:DC:3D:00:6E:AA:21:BF:C4:13:1E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018851B34963143C67F59B003A4643B3DB8A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HZK7ApEQ6liLQdw9AG6qIb_EEx4.roa
Signing time: Thu 25 May 2023 06:58:04 +0000
ROA not before: Thu 25 May 2023 06:58:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.229.0/24 maxlen: 24
88.209.248.0/24 maxlen: 24
88.209.249.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
5.182.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:b3:49:63:14:3c:67:f5:9b:00:3a:46:43:b3:db:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 25 06:58:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d92bb029110ea588b41dc3d006eaa21bfc4131e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:35:60:20:a2:ba:b1:2f:a1:b9:4d:ad:b8:e7:
38:11:65:23:27:bd:28:33:f8:47:a4:16:ed:88:5f:
81:72:f2:09:b6:66:17:35:da:1b:53:b4:ab:47:f3:
27:16:58:84:d4:0d:b9:f3:9a:17:3b:40:4c:b5:9e:
94:c8:c7:80:e4:d7:6d:5e:ec:6a:f7:8c:d3:e1:44:
21:c4:2b:71:03:7d:04:d4:87:db:a1:38:fb:2a:b0:
18:fb:8b:e4:da:ae:da:14:77:31:8f:72:4f:41:0c:
6e:da:fe:00:9f:fa:26:02:c4:76:6e:a8:7f:22:6d:
19:fc:95:15:7c:0c:a1:88:0d:3c:f6:63:cb:87:e1:
10:d2:06:28:0a:42:3f:d2:27:7d:b7:b9:e3:b7:44:
8c:37:4e:b8:aa:32:ff:6e:38:08:78:44:2f:d3:1b:
52:a8:8f:15:79:ab:e9:d0:74:bc:77:ec:77:94:6c:
5c:df:c7:fd:c2:ca:9c:bd:ea:73:94:55:c0:a9:f0:
81:c6:81:fd:cc:b3:f0:ff:11:7a:7a:98:5b:0e:d3:
f1:26:66:48:2b:f0:79:6f:42:6c:48:19:9d:f6:fe:
a7:bc:e9:d2:08:30:88:0a:66:4c:d2:79:1c:c5:3a:
6a:75:eb:37:7b:b9:bc:a7:5a:00:ad:f4:b6:d3:7c:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:92:BB:02:91:10:EA:58:8B:41:DC:3D:00:6E:AA:21:BF:C4:13:1E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HZK7ApEQ6liLQdw9AG6qIb_EEx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.113.0/24
88.151.58.0/24
88.151.61.0/24
88.209.195.0/24
88.209.209.0/24
88.209.211.0/24
88.209.216.0/24
88.209.221.0-88.209.222.255
88.209.224.0/23
88.209.229.0/24
88.209.248.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:e6:97:43:14:16:bb:85:d0:c8:1f:c1:37:83:c6:0a:24:14:
5f:4c:1d:54:73:ee:29:e1:6d:ca:1c:5d:40:34:5b:67:49:37:
7c:65:84:b0:5e:84:16:d9:60:78:58:0d:1c:1f:4d:f9:25:c0:
98:47:9d:f7:50:ef:24:e9:43:1e:e2:89:1a:78:40:7f:d4:a5:
ff:cf:13:94:e9:b5:52:cd:18:f0:5a:45:5c:62:61:29:c1:70:
4b:d0:6b:95:9f:41:d9:3e:cb:c8:66:53:d0:4c:51:07:6e:ce:
16:08:26:ad:c6:22:8e:fa:27:10:48:fa:98:77:3a:0e:54:9c:
9c:43:dc:db:20:a7:07:af:9e:13:84:9e:c9:5e:c5:01:c2:26:
83:c4:5d:e6:ca:24:e8:e3:61:60:81:ff:2f:9e:1e:1c:4a:4a:
01:87:4b:0d:06:12:4b:f8:90:9f:aa:96:b6:1e:7a:a2:a4:1c:
7f:ba:06:a9:d7:30:ed:a8:fb:cb:42:3b:3d:e2:53:ed:96:88:
59:b4:59:58:3e:ed:13:c9:11:c6:25:3a:c5:01:f5:a6:2d:9b:
7f:6d:59:08:4d:9c:02:91:0e:00:15:31:e8:5c:64:83:61:0b:
e7:26:02:03:74:74:01:b2:64:cb:e2:35:cf:e0:49:a8:02:8b:
0f:0b:e3:da
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAYhRs0ljFDxn9ZsAOkZDs9uKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNTI1MDY1ODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDkyYmIwMjkxMTBlYTU4OGI0MWRjM2QwMDZlYWEyMWJmYzQxMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zVgIKK6sS+huU2tuOc4EWUjJ70o
M/hHpBbtiF+BcvIJtmYXNdobU7SrR/MnFliE1A2585oXO0BMtZ6UyMeA5NdtXuxq
94zT4UQhxCtxA30E1IfboTj7KrAY+4vk2q7aFHcxj3JPQQxu2v4An/omAsR2bqh/
Im0Z/JUVfAyhiA089mPLh+EQ0gYoCkI/0id9t7njt0SMN064qjL/bjgIeEQv0xtS
qI8Veavp0HS8d+x3lGxc38f9wsqcvepzlFXAqfCBxoH9zLPw/xF6ephbDtPxJmZI
K/B5b0JsSBmd9v6nvOnSCDCICmZM0nkcxTpqdes3e7m8p1oArfS203zTlQIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFB2SuwKREOpYi0HcPQBuqiG/xBMeMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvSFpLN0FwRVE2bGlMUWR3OUFHNnFJYl9FRXg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQABbZxAwQA
WJc6AwQAWJc9AwQAWNHDAwQAWNHRAwQAWNHTAwQAWNHYMAwDBABY0d0DBABY0d4D
BAFY0eADBABY0eUDBAFY0fgwDQYJKoZIhvcNAQELBQADggEBAKrml0MUFruF0Mgf
wTeDxgokFF9MHVRz7inhbcocXUA0W2dJN3xlhLBehBbZYHhYDRwfTfklwJhHnfdQ
7yTpQx7iiRp4QH/Upf/PE5TptVLNGPBaRVxiYSnBcEvQa5WfQdk+y8hmU9BMUQdu
zhYIJq3GIo76JxBI+ph3Og5UnJxD3NsgpwevnhOEnslexQHCJoPEXebKJOjjYWCB
/y+eHhxKSgGHSw0GEkv4kJ+qlrYeeqKkHH+6BqnXMO2o+8tCOz3iU+2WiFm0WVg+
7RPJEcYlOsUB9aYtm39tWQhNnAKRDgAVMehcZINhC+cmAgN0dAGyZMviNc/gSagC
iw8L49o=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org