Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HsVddFwd6H1T7KSi2fvmoPK_7_c.roa
File: HsVddFwd6H1T7KSi2fvmoPK_7_c.roa (raw, json)
Hash identifier: tIcPinDbNSfzRnZ3za7ujQ/mMHdcDuuPBbY9UhTQSnA=
Subject key identifier: 1E:C5:5D:74:5C:1D:E8:7D:53:EC:A4:A2:D9:FB:E6:A0:F2:BF:EF:F7
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01888A2AAC17B35C8566E5BFE7BD66B7BB11
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HsVddFwd6H1T7KSi2fvmoPK_7_c.roa
Signing time: Mon 05 Jun 2023 06:07:12 +0000
ROA not before: Mon 05 Jun 2023 06:07:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 88.209.244.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
88.209.192.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.207.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.59.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:2a:ac:17:b3:5c:85:66:e5:bf:e7:bd:66:b7:bb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 5 06:07:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ec55d745c1de87d53eca4a2d9fbe6a0f2bfeff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:b8:b6:90:b5:9a:3c:01:eb:1d:08:98:62:
3d:83:25:85:25:1d:f5:ca:ff:50:53:e3:7b:b0:3b:
e7:8d:d9:e1:07:4b:92:c4:53:58:0a:b7:94:fd:84:
f2:a1:b4:34:c8:2b:e1:38:61:64:6e:63:e6:19:91:
9e:ab:d0:17:e6:6d:56:49:f5:59:f5:11:f7:8b:b4:
a4:a9:c1:77:74:68:32:ac:8c:fa:a3:6c:cd:8e:fe:
d7:59:ec:74:fc:e5:fb:ab:3e:a2:ab:b7:5c:2d:c0:
73:e7:42:50:c5:e0:dd:1f:28:fe:e7:e3:46:fb:24:
17:d2:b7:d3:7f:25:a4:89:b3:95:76:91:5c:7e:1a:
d3:80:c6:7d:dd:3a:82:fe:24:5c:ab:74:30:36:4d:
31:fd:95:7c:bc:d3:79:10:e4:61:9a:fc:98:7f:15:
9e:8c:1f:88:ac:69:82:e6:a5:e6:f1:9a:c2:fe:b0:
2b:fd:7e:58:ba:8c:9d:08:ec:be:67:63:3a:76:5c:
b2:6c:70:44:47:26:2a:ff:ce:8d:70:6a:f2:cc:bd:
e6:f9:dd:cb:a4:e6:53:94:7f:d0:f4:07:90:dc:2d:
bb:65:42:b3:0b:ef:a6:f2:00:29:41:4d:2d:c1:d6:
b5:d6:68:87:72:7b:4e:e2:d7:25:92:0b:62:5e:75:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C5:5D:74:5C:1D:E8:7D:53:EC:A4:A2:D9:FB:E6:A0:F2:BF:EF:F7
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HsVddFwd6H1T7KSi2fvmoPK_7_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.58.0/23
88.151.61.0/24
88.209.192.0/24
88.209.194.0/24
88.209.207.0/24
88.209.209.0/24
88.209.221.0-88.209.222.255
88.209.224.0/23
88.209.244.0/24
178.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
15:3c:84:e1:47:ba:db:36:57:79:39:a3:b6:6c:81:ec:99:f2:
21:23:fa:14:6f:a8:38:19:2f:49:c5:d4:5b:db:df:60:2e:ef:
a7:67:8d:22:e7:8e:97:da:61:fd:57:9e:7a:59:3b:dd:07:14:
ef:0f:77:f1:17:5f:97:31:0a:f8:46:e6:cc:c9:f4:0f:9d:af:
ca:1f:60:bd:47:5c:dc:da:c7:97:e3:16:6d:c0:37:52:a0:50:
8a:9d:1d:eb:da:b7:65:a3:85:8a:75:6a:2b:0f:1f:63:ef:52:
6a:ec:a8:28:bb:1e:57:e0:e0:bd:f4:d1:f3:eb:3a:d3:21:78:
14:87:d4:2e:f4:57:b3:f7:b5:99:7e:5e:98:70:50:7a:26:80:
71:d8:75:67:3d:c0:95:26:a5:71:8d:95:a2:a4:51:3e:32:5e:
f3:ae:e5:53:ce:09:fc:d2:88:0f:39:e5:3f:80:98:69:bb:27:
af:c6:ee:0e:ff:27:46:8e:24:b0:fd:6a:f1:a5:9d:6c:5b:18:
cb:8a:cb:8f:8a:6c:b4:6d:7d:fd:0c:77:7d:78:db:e7:b0:21:
07:bf:76:78:9e:8d:bc:17:97:6a:ae:ce:3c:3a:9c:fe:a7:a5:
1b:19:6b:e1:47:37:12:d6:23:3b:8f:99:b6:a3:05:34:32:9d:
43:b1:d4:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org