Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Q37oy6PdsVXc21RS3pcUeB6d6Uc.roa
File: Q37oy6PdsVXc21RS3pcUeB6d6Uc.roa (raw, json)
Hash identifier: 9qQNl2ZbIOiLkX+kSYD1BIPFHXnjKB7EXaoFXeMcL40=
Subject key identifier: 43:7E:E8:CB:A3:DD:B1:55:DC:DB:54:52:DE:97:14:78:1E:9D:E9:47
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018842B1223A9206296B525EFBB39D75CC7C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Q37oy6PdsVXc21RS3pcUeB6d6Uc.roa
Signing time: Mon 22 May 2023 09:01:24 +0000
ROA not before: Mon 22 May 2023 09:01:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
2.58.168.0/22 maxlen: 22
178.210.224.0/22 maxlen: 24
193.138.125.0/24 maxlen: 24
77.242.145.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.147.0/24 maxlen: 24
77.242.146.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:b1:22:3a:92:06:29:6b:52:5e:fb:b3:9d:75:cc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 22 09:01:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=437ee8cba3ddb155dcdb5452de9714781e9de947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:db:e6:33:62:ee:75:cb:e0:1f:0f:01:f1:63:
37:ab:e2:07:c6:dd:6a:13:2b:9d:e9:a0:46:ea:6f:
de:96:a1:24:99:ba:b8:5b:3d:9c:af:ce:18:0e:f8:
8f:25:6a:be:35:b4:14:f5:ef:f6:34:c0:4e:72:b2:
fe:40:73:9d:df:8b:e8:79:2a:5a:2a:ff:c9:e7:e4:
3a:bb:7a:24:28:ee:29:a4:a8:88:fd:48:82:07:be:
82:86:f1:00:5d:24:4a:1d:35:dc:3a:15:74:98:49:
ab:6b:8c:a8:36:31:b1:e7:03:0d:45:ed:ad:f1:6a:
0b:51:a8:cc:10:48:86:77:e6:35:43:f1:4b:58:3b:
24:8d:b8:20:c3:f8:55:6d:8f:f1:d1:d1:47:a0:b0:
06:3e:f3:bc:08:02:02:10:57:f2:60:aa:a0:47:df:
70:95:4a:29:67:0d:6f:9b:a7:4c:2a:68:3c:56:11:
20:fe:ea:21:be:1d:b3:ea:40:88:5c:17:92:05:1e:
ba:33:29:e7:8a:e0:54:4a:a6:f5:81:68:ea:40:84:
eb:17:fc:ba:7e:44:60:20:a7:20:1b:da:40:15:38:
6e:73:f1:a3:c5:05:7f:e4:c1:b1:7f:4c:d4:58:2a:
1c:9f:67:9e:fb:de:4f:9f:48:77:ca:3c:5a:f1:28:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7E:E8:CB:A3:DD:B1:55:DC:DB:54:52:DE:97:14:78:1E:9D:E9:47
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Q37oy6PdsVXc21RS3pcUeB6d6Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/22
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
77.242.156.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
92.52.208.0/21
92.52.219.0/24
178.210.224.0/22
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
61:fd:d4:b2:31:55:42:ea:7f:c2:83:c7:e5:32:6f:e7:e7:2c:
dc:4e:34:c6:1a:34:31:a9:d9:4c:45:74:b5:75:9c:71:04:cc:
38:92:52:18:ad:89:a7:8f:4f:4a:ec:12:16:8d:eb:73:d8:13:
d6:ff:fb:b1:f0:6b:e5:93:eb:43:42:05:48:42:8a:96:41:f3:
6d:8b:fb:78:0b:54:45:94:b5:15:a4:fd:a7:a0:3f:8e:c5:b7:
10:18:55:9c:c0:19:43:97:e5:fc:0f:bb:7f:23:3f:19:ef:b1:
49:97:86:8f:37:cd:f2:e9:4c:b1:ba:0b:80:c3:3d:52:47:f0:
fb:2e:25:e2:a3:db:ee:04:35:82:eb:c6:0c:1e:9c:2d:0d:56:
19:8d:1c:ef:2a:4a:e6:d1:00:c4:0e:4f:bb:e2:af:54:ce:04:
ce:4f:68:e9:98:8f:11:c6:cf:8f:f5:b5:d3:5c:15:03:92:8e:
0d:c3:3a:c3:b9:19:dd:a4:db:e9:e5:d6:4a:d1:a5:4d:4e:7e:
9f:bf:9a:79:0a:fb:b1:81:1e:5a:91:5e:47:e8:65:ea:74:76:
cb:3d:64:73:bb:85:ff:0e:46:9b:12:fe:d6:8a:b7:00:f6:ed:
ff:67:79:ad:ef:1b:b0:26:ce:bb:77:85:e4:3c:99:cb:0d:54:
89:56:ef:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org