Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PG_vRaKq5NkTiD6f5orUqlzNagI.roa
File: PG_vRaKq5NkTiD6f5orUqlzNagI.roa (raw, json)
Hash identifier: 0lTnOipT3b0wGx1oHVQrmGNBj7YdcsjkEImvqLpsRbc=
Subject key identifier: 3C:6F:EF:45:A2:AA:E4:D9:13:88:3E:9F:E6:8A:D4:AA:5C:CD:6A:02
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01885CD3CDB02276A867FF3587F369EFFA5E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PG_vRaKq5NkTiD6f5orUqlzNagI.roa
Signing time: Sat 27 May 2023 10:49:24 +0000
ROA not before: Sat 27 May 2023 10:49:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.229.0/24 maxlen: 24
88.209.245.0/24 maxlen: 24
88.209.248.0/24 maxlen: 24
88.209.249.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
2.58.168.0/22 maxlen: 24
5.182.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 May 2023 13:51:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5c:d3:cd:b0:22:76:a8:67:ff:35:87:f3:69:ef:fa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 27 10:49:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c6fef45a2aae4d913883e9fe68ad4aa5ccd6a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:42:c3:c0:e1:67:ba:f0:d6:61:22:75:16:27:
a8:6c:de:88:06:05:90:ad:ce:01:41:56:a0:d4:a1:
68:72:5b:5f:02:c5:60:89:0c:80:a7:45:01:af:18:
90:dc:18:84:68:9e:1e:6f:13:50:66:da:fc:66:5e:
f1:f5:e7:6c:3e:4c:d3:0f:1c:f8:01:76:28:22:11:
70:fb:34:76:2f:17:2e:d7:84:46:b2:dc:d1:8f:94:
12:70:9b:69:fe:a3:61:b3:30:f8:1c:db:c5:b5:b3:
ac:84:f8:73:40:4f:87:da:76:d9:d7:35:c0:42:b8:
8a:36:4f:f2:43:cd:0e:1d:20:a5:dd:27:c7:57:44:
18:0d:c2:c1:5d:59:a5:3f:33:32:7c:f4:07:ed:81:
f1:28:6e:33:e2:18:bd:f3:85:2e:5d:8a:f7:f4:91:
32:b7:d5:2f:3b:19:28:0e:cc:52:54:9b:ee:fa:da:
a0:6b:f0:df:3a:61:1f:0f:dc:0f:13:4b:de:99:99:
ab:a5:cc:9c:77:e2:6b:b8:b5:1f:ee:be:d8:f3:22:
8e:fb:93:35:1e:d8:03:13:bb:45:9f:53:90:7c:8d:
1f:2b:cb:10:62:ae:ef:09:24:33:ce:0e:9c:cc:ad:
39:03:3f:75:27:dd:95:cc:a9:85:26:56:ac:8f:b8:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:EF:45:A2:AA:E4:D9:13:88:3E:9F:E6:8A:D4:AA:5C:CD:6A:02
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PG_vRaKq5NkTiD6f5orUqlzNagI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/22
5.182.113.0/24
88.151.58.0/24
88.151.61.0/24
88.209.195.0/24
88.209.209.0/24
88.209.211.0/24
88.209.216.0/24
88.209.221.0-88.209.222.255
88.209.224.0/23
88.209.229.0/24
88.209.245.0/24
88.209.248.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:5f:ba:a5:d6:cf:44:0e:16:12:c6:4d:f6:36:b6:3c:7b:33:
a5:1c:f8:53:e1:db:a4:ed:ec:84:7e:ab:0f:09:f9:9c:db:af:
cb:74:ea:75:f0:1b:89:03:cb:d4:36:f0:cc:13:de:a7:0f:d1:
60:62:c4:b7:3e:cc:1b:22:05:2d:3d:98:ff:16:b4:cf:6a:de:
99:e8:26:38:c6:e1:ca:03:87:a5:63:a2:34:c8:d5:2f:44:b8:
5e:65:36:2f:b0:49:f1:8a:fb:38:0c:b2:68:b8:f9:90:ac:fb:
6d:b8:8e:32:ff:85:da:db:c2:b7:16:67:93:55:44:29:52:ef:
9c:4b:36:61:f0:07:da:5a:a5:20:de:d4:01:56:d2:a5:72:42:
6d:0c:0d:58:e6:04:53:fa:da:a3:72:2b:bb:bb:80:08:fe:42:
c3:b0:22:be:2c:a1:3c:4a:3c:3f:29:fc:7e:99:15:c2:62:05:
58:df:f4:8b:28:12:bd:77:0e:64:df:39:24:55:b9:db:ae:10:
4e:4e:5d:d8:0a:62:c3:06:b6:67:e5:d7:44:d6:e5:5b:44:58:
8b:7b:31:8e:79:55:36:36:76:54:be:32:bf:e1:4c:d3:75:a6:
8d:d1:d5:09:93:b4:55:a3:f8:b1:28:1d:a4:26:c8:c5:1b:a5:
d1:73:88:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org