Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_-g6FxX1ZtpqtuOlds9IXQBpIAo.roa
File: _-g6FxX1ZtpqtuOlds9IXQBpIAo.roa (raw, json)
Hash identifier: B17S7dOdl4Ju9s1e2gHdTQ9K0WI0q4lPBC5gM2UNH2k=
Subject key identifier: FF:E8:3A:17:15:F5:66:DA:6A:B6:E3:A5:76:CF:48:5D:00:69:20:0A
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CB1308D4092D1368C8F4137D1DAC84965
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_-g6FxX1ZtpqtuOlds9IXQBpIAo.roa
Signing time: Thu 28 Dec 2023 16:09:58 +0000
ROA not before: Thu 28 Dec 2023 16:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
178.210.225.0/24 maxlen: 24
178.210.224.0/24 maxlen: 24
193.138.125.0/24 maxlen: 24
178.210.240.0/22 maxlen: 22
178.210.238.0/23 maxlen: 23
178.210.237.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
178.210.244.0/22 maxlen: 22
178.210.251.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
178.210.254.0/23 maxlen: 23
45.14.11.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:30:8d:40:92:d1:36:8c:8f:41:37:d1:da:c8:49:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 28 16:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffe83a1715f566da6ab6e3a576cf485d0069200a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e9:f7:2d:0d:2a:49:32:58:1e:11:a5:e7:89:
d7:61:b2:55:09:68:51:bb:07:47:ca:d1:ff:a0:29:
af:02:55:2f:a8:a2:50:fa:e4:2b:6c:c1:45:8f:7d:
a9:56:f4:18:63:1b:7e:63:e7:0d:11:2f:94:f7:0b:
ba:b5:df:cb:aa:bd:4e:9b:60:51:63:bc:73:b8:9e:
d1:d8:55:5f:5d:55:be:51:e5:b6:be:4b:d4:61:e9:
fd:f1:48:6a:22:bb:9c:0f:34:af:88:8c:50:72:ac:
02:1e:44:44:40:a0:1d:a5:5e:ac:c7:63:b2:03:29:
eb:aa:78:8e:dc:c3:35:25:54:46:20:d5:53:ae:93:
50:56:dc:28:92:e2:1b:66:5a:85:7f:69:78:10:e0:
f5:31:57:e2:4b:92:8f:f9:59:f3:67:1a:97:89:ec:
b3:21:d5:23:cf:19:ac:38:7e:af:80:37:72:e2:75:
19:ba:d4:c0:01:c0:de:c2:e9:8f:5f:79:7e:f4:dc:
2e:6e:ca:0d:26:0b:c8:92:cf:22:ac:fb:66:5f:1f:
0e:f2:73:31:b0:00:24:6d:0a:2a:34:21:e6:f5:26:
c3:e4:52:a7:d3:96:dc:57:4f:0e:96:50:42:63:17:
76:90:10:62:4c:d9:3e:1e:5e:d2:59:56:5e:02:ef:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:3A:17:15:F5:66:DA:6A:B6:E3:A5:76:CF:48:5D:00:69:20:0A
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_-g6FxX1ZtpqtuOlds9IXQBpIAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
92.52.208.0/21
178.210.224.0/23
178.210.237.0-178.210.251.255
178.210.254.0/23
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
9a:fc:0b:e2:1a:73:cc:df:bc:7b:fd:5a:48:91:21:33:49:4b:
2d:88:ae:77:00:84:05:85:31:0d:16:20:11:57:ae:ae:19:14:
a2:4d:4d:67:5e:6c:a0:93:fa:d5:df:aa:ba:59:9c:99:83:03:
cb:34:dc:ed:88:89:6e:84:a0:0c:d0:35:12:69:cc:dd:78:a0:
f5:6f:ea:76:c7:35:36:09:ea:de:c1:01:b1:c7:8b:00:5a:e8:
76:db:eb:33:dc:62:5a:79:f9:33:80:6c:01:7d:e3:5d:c0:a0:
e3:f4:65:97:36:c9:0b:66:e8:43:da:e0:3d:e2:ad:dd:54:e8:
14:d0:48:81:31:e9:98:81:50:1b:b3:4c:4a:42:07:0f:0d:c2:
ff:ec:68:dc:13:c4:c4:54:37:e6:82:fb:45:91:55:83:67:12:
63:ae:14:53:16:b6:b6:90:ee:f4:79:dc:a6:ab:44:87:d0:79:
04:66:8a:a2:67:90:d1:1c:bc:7f:61:55:26:e9:9c:3d:8b:90:
05:f6:5b:9a:16:33:5d:49:9e:b0:03:af:7d:20:02:34:d8:be:
8b:2b:15:c7:ef:00:ed:a2:0a:31:07:e4:07:d6:3a:75:71:70:
9a:1d:a4:9a:92:8d:fa:6c:77:cf:5d:26:81:f6:f1:5c:fe:cc:
c4:4a:e7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:55 2024 by rpki-client on console-ams.rpki-client.org