Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/k-poUn3LD3lntPXzuRZWSv6ffDI.roa
File: k-poUn3LD3lntPXzuRZWSv6ffDI.roa (raw, json)
Hash identifier: DJJilMBSiXFOtdNsf004aBSeEWDBlXsuTde+jdFNhDs=
Subject key identifier: 93:EA:68:52:7D:CB:0F:79:67:B4:F5:F3:B9:16:56:4A:FE:9F:7C:32
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0186A30965664BBAF9D4306A34E2448A884E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/k-poUn3LD3lntPXzuRZWSv6ffDI.roa
Signing time: Thu 02 Mar 2023 15:55:47 +0000
ROA not before: Thu 02 Mar 2023 15:55:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.253.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
45.14.9.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a3:09:65:66:4b:ba:f9:d4:30:6a:34:e2:44:8a:88:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 2 15:55:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93ea68527dcb0f7967b4f5f3b916564afe9f7c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:6c:25:7a:31:38:73:10:d8:10:6a:7b:75:
34:dd:6e:96:e3:1e:34:44:c6:c6:8a:8d:fe:25:3a:
e1:ec:12:1f:2c:02:00:1f:04:b9:e9:91:0e:2f:a1:
3b:99:84:31:ed:b5:ae:57:dc:d2:aa:93:c3:9a:79:
29:e0:6f:de:d1:71:b2:9f:53:d3:46:22:4d:ba:8c:
3e:9e:9a:c0:57:74:06:61:42:fa:db:bc:22:93:5e:
7d:56:9d:f2:13:9e:e8:ab:81:97:c1:7c:5d:26:17:
91:44:f6:5c:77:18:2a:54:d8:a4:6c:a8:70:ce:f8:
b2:ea:68:92:40:d1:27:d1:fb:b0:d2:8d:fa:f8:fb:
a6:19:b8:91:bb:ec:5a:b5:15:fa:67:74:1a:a5:9f:
74:1d:fe:98:7e:68:4c:62:6b:32:3c:b4:32:9a:71:
f2:cc:16:d7:e7:90:6c:51:d5:b4:20:7f:6c:ed:e2:
b5:50:0e:2e:76:d8:f5:fe:87:b6:98:1e:9a:26:87:
e7:28:38:96:97:fa:87:3f:ad:f0:1b:d7:55:83:6d:
f5:85:7a:11:c3:1c:77:63:97:d2:b7:8e:8e:47:36:
e8:aa:fd:a7:a8:2c:d0:74:07:22:25:b5:93:b8:55:
e6:ad:d5:b8:28:ec:7f:cd:6c:fc:1b:c8:11:34:52:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EA:68:52:7D:CB:0F:79:67:B4:F5:F3:B9:16:56:4A:FE:9F:7C:32
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/k-poUn3LD3lntPXzuRZWSv6ffDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
45.14.9.0/24
77.242.152.0/22
83.137.153.0/24
83.137.157.0/24
83.137.159.0/24
88.151.62.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.253.0/24
92.52.218.0/24
178.210.232.0/22
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b8:0b:c6:4d:09:cf:98:10:48:51:6d:b2:27:0d:b9:4b:c6:
80:02:b6:85:6c:1a:83:50:91:05:6b:87:7a:59:a8:f0:f9:96:
0e:28:15:06:ef:37:ba:08:0a:42:f6:7c:22:1d:51:3c:bb:54:
df:00:05:6e:e3:7a:a8:c0:74:77:42:fd:41:b0:66:24:04:40:
9d:17:d7:6a:5d:0d:3f:50:63:5a:b3:ce:e3:b3:cb:cd:18:65:
66:ee:1a:e0:9c:46:b7:4c:64:cc:44:e2:7f:52:46:2a:75:69:
01:0f:9b:c6:91:89:5c:38:63:97:83:cd:ef:df:29:a1:88:18:
7d:ad:e6:09:b1:02:bc:a5:46:8f:d0:ff:7f:d9:35:ec:26:d7:
32:6f:e3:16:6b:f1:e1:b8:8b:74:b0:c2:84:bb:13:c1:42:0a:
7f:34:c0:0f:c4:eb:18:19:07:31:13:a3:74:f5:7b:5c:0f:7f:
ec:ec:75:cc:d9:e8:ef:c7:4b:41:26:d3:5f:78:88:dd:40:c5:
0c:94:61:6f:7c:ff:14:45:62:f5:60:f4:f6:22:4f:84:6c:21:
bc:66:4c:5d:63:0a:6d:e5:38:2e:e4:50:3c:14:bd:78:ab:eb:
16:e6:aa:f6:cf:09:9d:85:b1:5c:a5:ec:f3:7d:44:21:54:ea:
d5:18:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-ams.rpki-client.org