Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/aY4cY5W6rv_9-VMA_d7RoRyFJJo.roa
File: aY4cY5W6rv_9-VMA_d7RoRyFJJo.roa (raw, json)
Hash identifier: b8MIEG/eS/r8/CXLr2kAwvSYU33O05AtT0UwXWzlS7Y=
Subject key identifier: 69:8E:1C:63:95:BA:AE:FF:FD:F9:53:00:FD:DE:D1:A1:1C:85:24:9A
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018C62571FE8A9774D8BD970D57C290BB5A9
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/aY4cY5W6rv_9-VMA_d7RoRyFJJo.roa
Signing time: Wed 13 Dec 2023 08:42:06 +0000
ROA not before: Wed 13 Dec 2023 08:42:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.232.0/22 maxlen: 24
178.210.228.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:57:1f:e8:a9:77:4d:8b:d9:70:d5:7c:29:0b:b5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 13 08:42:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=698e1c6395baaefffdf95300fdded1a11c85249a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:de:25:5c:03:5c:b4:c4:96:ca:b8:3a:c8:
a6:f6:af:bc:6b:5e:c1:22:2a:50:6f:16:cd:f1:21:
da:ee:96:17:0a:3c:4e:c2:39:76:ae:32:eb:1b:a8:
c7:9a:a6:68:96:48:0e:f5:f1:24:1d:50:f9:ad:be:
fb:80:5c:df:6f:69:a2:45:9c:76:7d:73:1d:c2:cc:
35:bb:5d:b2:bd:8c:b3:19:ca:12:68:a1:4a:a3:ea:
21:20:8b:0f:54:ef:99:f5:c0:4f:0c:2a:04:ba:1f:
50:a0:8a:ed:e7:ed:22:c4:7c:c5:27:70:4d:7e:a8:
78:5e:19:6a:21:a7:06:cf:4f:6d:e8:97:c3:37:dd:
e8:e2:2e:da:db:c2:c1:9e:2e:b6:a8:f0:99:e1:29:
7b:d0:ac:8e:26:c4:8e:e9:89:51:23:34:ee:b1:62:
31:0c:d9:a2:b2:42:18:f3:bb:d8:c4:e8:70:b5:d3:
75:34:80:ff:9d:f4:16:f0:ec:57:b0:3c:63:0a:35:
3d:86:f9:4d:0e:65:1f:fb:55:c0:3e:c3:ae:63:04:
8e:01:7c:3f:b8:52:3a:2b:70:31:05:85:eb:fa:2a:
39:24:ce:9c:db:20:1a:47:d9:46:1a:53:aa:79:ac:
d8:59:bd:ec:03:e7:3f:80:f0:1b:a8:8c:0b:d0:79:
58:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:1C:63:95:BA:AE:FF:FD:F9:53:00:FD:DE:D1:A1:1C:85:24:9A
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/aY4cY5W6rv_9-VMA_d7RoRyFJJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.150.0/24
88.151.56.0/23
88.209.211.0/24
88.209.232.0/22
178.210.228.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:48:3b:2d:a3:4a:a0:f7:9a:52:52:d4:63:8d:2b:9c:6b:7e:
c9:51:6c:6e:79:dd:72:b4:b2:7d:67:ee:fe:df:3c:db:8b:f5:
bb:76:5c:70:17:b3:c2:a3:22:89:4a:ed:f4:56:da:04:58:f8:
39:20:aa:01:9f:0b:27:35:d5:28:ff:ed:cb:c1:12:45:f6:d0:
88:5f:98:fd:30:1e:23:5b:9b:1c:8d:ad:68:db:38:2f:a0:ac:
f5:93:c8:d0:7a:07:29:08:f2:76:cc:0f:2b:ca:c3:39:62:ce:
3f:32:ef:0e:67:aa:75:cb:0e:7a:aa:05:6d:05:ea:f7:ee:03:
f7:62:9e:14:1a:44:ce:04:ec:07:b1:c4:ce:34:c1:7c:5f:36:
31:fb:f0:1a:a0:0b:b5:b8:9a:0d:fb:37:91:74:05:cd:0c:19:
5b:09:e8:f0:8e:30:a6:23:7b:f1:df:96:8c:2a:66:20:bb:38:
d0:cf:db:13:43:6b:cd:54:dd:b0:92:a6:dc:ff:fa:1e:64:1b:
94:40:3c:76:0b:00:dd:3f:74:85:5f:5c:5c:ac:02:64:ea:19:
cf:49:c3:a1:ed:95:6a:55:75:49:27:15:6f:b0:f6:cc:c2:77:
3b:e2:a1:1a:77:e2:4c:3d:3d:de:b7:9d:cd:28:eb:6f:34:01:
46:31:44:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 22:12:49 2023 by rpki-client on console-fra.rpki-client.org