Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YF57_-Qfa5gpRkhepIINY8ZCv2I.roa
File: YF57_-Qfa5gpRkhepIINY8ZCv2I.roa (raw, json)
Hash identifier: p60QIvSmPTZFuhlhjLqbY8XYOFqWoxWQCKWcJCaUTJM=
Subject key identifier: 60:5E:7B:FF:E4:1F:6B:98:29:46:48:5E:A4:82:0D:63:C6:42:BF:62
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01881E07D420906AA7D0D8CEDB2E243C01E1
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YF57_-Qfa5gpRkhepIINY8ZCv2I.roa
Signing time: Mon 15 May 2023 06:10:09 +0000
ROA not before: Mon 15 May 2023 06:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.229.0/24 maxlen: 24
88.209.248.0/24 maxlen: 24
88.209.249.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
5.182.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:07:d4:20:90:6a:a7:d0:d8:ce:db:2e:24:3c:01:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 15 06:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605e7bffe41f6b982946485ea4820d63c642bf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:e8:ff:46:f1:48:1a:38:be:89:a5:0d:e0:
5a:74:7d:98:e0:49:ea:a3:cf:12:13:72:56:75:7f:
c3:27:3f:7a:bf:d9:d8:89:07:38:59:31:fd:34:08:
de:cc:a9:b9:42:9d:9f:f0:42:4f:d7:20:00:34:c0:
aa:37:84:c0:b1:da:5f:ac:1f:42:a2:4b:88:a9:df:
5e:22:65:99:89:dc:0e:91:ff:dc:da:f8:0d:b9:50:
08:15:1d:2a:aa:d8:b1:e1:6b:a5:91:f9:19:be:cc:
b7:4d:60:3e:2f:95:3c:3b:d3:ea:79:39:3e:5b:4f:
83:67:31:18:70:6d:c6:3b:1c:2f:00:84:61:b0:dd:
27:dc:9d:9e:1a:10:6e:cd:98:aa:2c:83:d6:09:b8:
b5:65:ee:62:4b:96:7a:cf:f9:ff:da:94:ae:56:f4:
ac:ed:40:ab:d6:ba:7d:3d:a0:c4:32:d0:c1:f0:08:
3d:a8:60:44:52:b2:06:ee:87:e2:7e:b3:39:21:f9:
b7:9c:a3:a5:4f:c4:25:48:45:8d:5c:22:f5:0b:e6:
16:ce:ee:f1:26:2d:d6:f3:81:f3:c6:e3:d7:51:76:
4b:aa:ae:b7:e7:57:fc:23:e6:f2:94:9e:4a:dd:d4:
46:e6:4b:c7:a6:55:4d:f9:a7:4e:ad:ab:4a:64:df:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:7B:FF:E4:1F:6B:98:29:46:48:5E:A4:82:0D:63:C6:42:BF:62
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YF57_-Qfa5gpRkhepIINY8ZCv2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.113.0/24
88.151.58.0/24
88.151.61.0/24
88.209.194.0/23
88.209.209.0/24
88.209.211.0/24
88.209.216.0/24
88.209.221.0-88.209.222.255
88.209.224.0/23
88.209.229.0/24
88.209.248.0/23
178.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
16:26:54:5c:0b:23:25:8b:64:43:fb:a8:70:0a:5f:df:e7:87:
0d:73:22:78:a9:29:49:fd:ae:35:22:c8:59:6c:a6:d7:30:b9:
bb:ec:53:2c:5e:93:11:db:a3:84:f4:a5:60:0f:b0:5b:69:60:
85:f3:89:00:52:77:84:2f:79:d6:6e:0a:d3:da:48:10:14:a7:
3f:71:30:33:6b:79:b8:aa:67:4d:01:5e:dc:b6:d7:90:c8:9e:
98:0a:38:c3:26:22:0a:7e:c1:81:df:75:ee:98:c5:8e:1a:42:
a0:22:4c:96:07:c5:ab:59:f6:c4:a0:0b:5c:d5:5d:21:b0:e1:
a9:28:cc:ae:75:f2:64:03:80:8e:9c:ac:09:9b:d6:01:93:9f:
4d:a6:8c:00:11:3b:b7:9d:28:fe:72:d0:cc:61:ae:2f:b7:d3:
b2:ba:7e:5e:c9:66:32:ee:dc:5d:0e:8d:fe:9a:d7:a5:e5:bc:
f1:b4:8c:bf:20:19:11:7f:19:ab:7a:5a:88:0b:60:fe:27:ba:
c9:b0:53:db:39:79:27:70:90:74:78:fb:55:f7:d1:45:45:11:
a9:d5:2d:bd:1b:6f:c2:9a:5a:2e:b9:14:e8:ad:ab:82:f8:8d:
32:8f:d7:eb:5c:27:e4:0b:49:9f:d8:17:c0:50:cb:34:05:b4:
be:f6:d4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org