Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/aBfuqZ2kbb3df_rzV5wgUUj0INY.roa
File: aBfuqZ2kbb3df_rzV5wgUUj0INY.roa (raw, json)
Hash identifier: lzaSTvQ0KIySHIhn3D79kWwknIQZ+qbedJe3gsXKzj0=
Subject key identifier: 68:17:EE:A9:9D:A4:6D:BD:DD:7F:FA:F3:57:9C:20:51:48:F4:20:D6
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188619439A7551BEE1AEAC9A07FCEDDA1C3
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/aBfuqZ2kbb3df_rzV5wgUUj0INY.roa
Signing time: Sun 28 May 2023 08:58:04 +0000
ROA not before: Sun 28 May 2023 08:58:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.229.0/24 maxlen: 24
88.209.245.0/24 maxlen: 24
88.209.248.0/24 maxlen: 24
88.209.249.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
2.58.168.0/22 maxlen: 24
5.182.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 May 2023 13:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:61:94:39:a7:55:1b:ee:1a:ea:c9:a0:7f:ce:dd:a1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 28 08:58:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6817eea99da46dbddd7ffaf3579c205148f420d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1c:4f:b1:94:a8:c0:fd:f0:27:c8:88:43:c2:
99:67:d0:74:89:37:3e:df:ce:7f:3d:80:6e:ce:0d:
df:2f:79:5e:83:26:35:4a:d2:69:66:e1:a7:c9:95:
b6:a2:c3:66:72:cc:4c:ea:9b:d8:a9:cd:6f:0b:cf:
55:24:4e:66:46:18:eb:b1:94:dd:10:fd:76:54:69:
13:73:00:9f:f6:7c:35:15:c3:bb:7a:13:d2:4c:98:
79:45:e2:55:1c:60:97:4a:eb:14:12:a9:55:b8:7c:
40:48:44:e5:5c:9a:4b:d2:b4:08:7f:51:95:85:a9:
df:7e:dd:7a:79:2f:e9:f2:28:9a:79:0f:03:8e:88:
b3:6b:b6:a0:84:96:bd:52:f4:63:94:08:3b:46:c0:
d2:80:b6:35:02:bf:09:5e:79:c6:f9:20:a9:3d:63:
93:a9:30:dc:cd:0e:bd:aa:77:a2:87:19:01:0a:24:
fd:84:8d:e4:07:0e:b5:bd:f0:37:67:ed:c1:68:84:
8a:2a:16:ae:80:eb:37:34:5a:42:f9:f7:d3:1b:e4:
7a:af:72:a2:ad:94:96:e6:0d:2f:64:dd:d1:64:3a:
54:fe:5e:ba:71:a9:13:31:83:76:92:6d:b9:b7:c3:
1d:a1:d9:9e:c1:a7:50:a3:cd:a5:fb:e7:7d:33:de:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:EE:A9:9D:A4:6D:BD:DD:7F:FA:F3:57:9C:20:51:48:F4:20:D6
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/aBfuqZ2kbb3df_rzV5wgUUj0INY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/22
5.182.113.0/24
88.151.58.0/24
88.151.61.0/24
88.209.195.0/24
88.209.209.0/24
88.209.211.0/24
88.209.220.0-88.209.222.255
88.209.224.0/23
88.209.229.0/24
88.209.245.0/24
88.209.248.0/23
Signature Algorithm: sha256WithRSAEncryption
10:87:75:14:9e:d5:d4:91:a3:cf:04:ac:b6:47:38:70:1a:76:
48:76:35:58:ff:78:63:31:a8:83:b6:db:46:28:c1:b8:02:d6:
79:97:e0:73:67:be:58:0d:9c:88:8e:3b:41:70:d8:fa:e8:09:
92:43:92:a7:b7:d1:bd:82:9b:60:ea:12:3c:80:4a:84:a7:61:
75:2b:62:89:55:f1:aa:fd:96:15:e6:6e:4b:73:3b:df:c6:96:
1e:3c:dd:18:94:82:a6:cf:2e:d8:56:ab:8c:b4:c5:be:3a:e2:
a7:3b:eb:d5:5a:7a:cf:3b:bd:84:0f:4b:1c:39:93:05:22:ce:
87:bc:b7:39:b6:b1:07:6d:19:e1:5e:f6:69:84:b9:0a:37:a5:
e2:3f:68:2e:21:27:23:66:96:bf:d3:18:8a:8e:05:f6:a6:ca:
01:4e:ab:a6:c2:69:af:84:f6:79:a9:9b:79:8c:53:f2:8d:20:
b9:92:63:f3:b4:96:9e:79:8e:81:a8:76:10:0f:0b:89:af:ff:
93:b1:9f:5f:de:61:df:55:b8:a3:30:1b:a4:2c:90:44:d3:93:
72:56:3e:5e:65:d2:8c:f8:9f:fc:d1:7f:34:19:17:34:02:21:
79:eb:0c:e1:9b:c0:8b:38:9f:75:71:1a:9f:c3:7c:3f:9b:c1:
6e:d1:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org