Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/K7Jz0CAV9gIMRVeFDzZBFZi62Ro.roa
File: K7Jz0CAV9gIMRVeFDzZBFZi62Ro.roa (raw, json)
Hash identifier: sGsg5O2Kme+QRX+ADb3+GfVUecc32azQaY0M/qONGhA=
Subject key identifier: 2B:B2:73:D0:20:15:F6:02:0C:45:57:85:0F:36:41:15:98:BA:D9:1A
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0187C33FA7FB49449ECC8E653C424B924900
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/K7Jz0CAV9gIMRVeFDzZBFZi62Ro.roa
Signing time: Thu 27 Apr 2023 15:05:41 +0000
ROA not before: Thu 27 Apr 2023 15:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
178.210.224.0/22 maxlen: 24
193.138.125.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.158.0/24 maxlen: 24
77.242.157.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c3:3f:a7:fb:49:44:9e:cc:8e:65:3c:42:4b:92:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 27 15:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bb273d02015f6020c4557850f36411598bad91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:e2:56:f5:75:bc:db:52:3b:09:d1:5e:31:
bf:5b:94:83:ab:7a:4d:40:7e:b0:7f:21:13:25:d8:
d8:a9:4f:a6:b8:05:d1:d2:67:46:20:7d:f8:d2:73:
45:7d:83:05:d8:46:99:11:df:45:55:7f:3d:4b:4b:
75:0f:19:0d:50:41:98:28:6a:6e:4b:2e:02:a0:7b:
b8:26:64:05:ab:6e:07:f9:29:d1:fa:62:a8:b7:8f:
af:53:79:8d:6a:93:40:65:7f:e3:85:7b:be:50:c3:
2d:4a:e0:b5:a9:e4:de:4f:8d:32:c3:d0:2e:d9:cc:
68:63:c5:0d:ba:4c:a9:82:a9:cd:c9:08:e7:b4:a3:
59:ff:93:a0:a2:74:65:50:98:1c:9b:36:64:de:21:
9c:dc:0d:fc:8d:e7:7f:18:73:fe:bc:e0:09:50:2a:
9d:cb:20:ec:6a:fe:87:73:29:62:43:44:7e:7f:44:
70:4b:d1:33:5c:a5:36:73:ad:f8:85:a6:53:36:91:
3e:56:58:06:4a:7f:8c:6d:a2:3f:12:84:aa:2b:d8:
60:8e:4b:fb:38:e5:46:a6:b5:67:9d:2f:a1:3b:b0:
a3:f6:ad:f0:af:b6:03:15:45:f6:a4:26:0e:ce:6c:
3a:33:02:d5:80:79:f8:f2:91:12:d5:18:61:42:f6:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:73:D0:20:15:F6:02:0C:45:57:85:0F:36:41:15:98:BA:D9:1A
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/K7Jz0CAV9gIMRVeFDzZBFZi62Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
77.242.156.0-77.242.158.255
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.217.0/24
92.52.208.0/21
92.52.219.0/24
178.210.224.0/22
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
1a:43:80:05:cf:d5:a6:72:c1:95:5e:96:60:8f:e1:4a:b6:f3:
27:b3:a8:e8:46:8c:6c:b0:91:1d:80:56:a3:ed:5d:8b:9c:d9:
c9:f0:fe:d9:60:ff:52:b5:a2:c2:9e:6b:2a:bb:a5:57:4e:25:
e4:86:3f:1f:56:92:94:3f:7a:8a:c1:fb:bc:03:ca:45:b0:a1:
40:40:5c:26:af:ac:35:5b:e8:15:47:cf:17:c9:5c:9d:ca:81:
dc:e3:7c:81:d0:f5:37:8e:07:eb:7c:32:19:4c:a2:fc:25:85:
f6:26:87:fa:41:47:12:11:0c:23:2d:43:92:de:b0:8b:b5:6c:
aa:7d:41:7e:94:21:44:46:ba:29:74:f6:50:2f:65:3a:84:30:
94:53:85:d5:e4:3b:2e:4a:ca:f4:b8:10:2a:e4:66:b2:a2:08:
b5:e4:eb:ca:12:65:91:7a:39:b4:3b:ed:0c:92:75:ca:8b:ec:
2f:2a:9b:fb:51:e1:f5:86:7b:9d:a1:83:7a:53:ed:84:29:98:
9b:97:8e:de:26:62:bc:d4:7c:00:4f:2b:94:cf:15:82:bd:e7:
0c:39:0a:21:49:e7:29:e7:0b:37:3b:a5:31:62:cc:d4:df:99:
88:b6:84:89:ec:38:b9:98:f0:b3:b4:55:9b:29:7d:69:65:62:
45:6d:47:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org