Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/k30Tuvgw8k7bCRSEivlneQfCJAA.roa
File: k30Tuvgw8k7bCRSEivlneQfCJAA.roa (raw, json)
Hash identifier: va22I7eG7wS6E1UxXXbkokGZdoEEc89pSc00f6BP5p4=
Subject key identifier: 93:7D:13:BA:F8:30:F2:4E:DB:09:14:84:8A:F9:67:79:07:C2:24:00
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018AEF6B48152596732B1AF56E235B68DBA9
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/k30Tuvgw8k7bCRSEivlneQfCJAA.roa
Signing time: Mon 02 Oct 2023 08:04:59 +0000
ROA not before: Mon 02 Oct 2023 08:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.253.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
178.210.228.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.62.0/24 maxlen: 24
2.58.168.0/24 maxlen: 24
5.182.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:6b:48:15:25:96:73:2b:1a:f5:6e:23:5b:68:db:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 2 08:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=937d13baf830f24edb0914848af9677907c22400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:04:fc:06:68:29:05:43:b6:8b:f8:2e:21:
f5:fb:ec:aa:7f:92:14:9d:82:5a:0a:a8:f8:1b:c6:
cf:fb:fd:25:1d:2b:a7:9f:7b:81:f3:49:48:fe:41:
c0:60:ae:6b:d0:ac:61:fe:74:69:f4:f8:23:5a:38:
19:33:ee:09:8a:a8:85:e8:8a:7e:e9:df:93:08:e3:
ea:99:a9:25:1b:3c:f8:99:42:70:6f:4f:34:2e:09:
81:78:14:fd:bc:c8:26:4b:57:a0:f8:f3:31:96:71:
63:e9:5b:9e:c3:a0:c1:63:92:e4:b0:d5:a1:8e:38:
47:8a:0d:74:e9:9f:45:a3:64:da:c3:16:07:e0:be:
ea:c3:dd:31:0b:b0:a0:4e:a7:15:ad:ef:3a:8a:b4:
bb:b6:2d:ae:77:f1:f7:02:ca:12:6a:e9:e2:d8:11:
4c:6f:fc:08:a7:81:54:d3:99:73:92:e3:8c:f1:a3:
17:be:0b:52:af:fe:b5:74:7f:b9:de:20:01:5a:7c:
09:84:f7:db:7c:2e:6d:31:3e:ac:6b:14:92:48:9d:
dc:31:23:ea:1b:d9:b6:c1:da:6f:68:89:31:15:4f:
6a:6b:70:ac:d8:4a:bc:e7:10:60:63:be:d2:df:f6:
31:82:9a:fa:73:9e:28:ca:d5:63:d5:c3:97:54:79:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7D:13:BA:F8:30:F2:4E:DB:09:14:84:8A:F9:67:79:07:C2:24:00
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/k30Tuvgw8k7bCRSEivlneQfCJAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/24
5.182.113.0/24
77.242.150.0/24
77.242.156.0/24
83.137.159.0/24
88.151.56.0/23
88.151.62.0/24
88.209.195.0/24
88.209.211.0/24
88.209.217.0/24
88.209.220.0/24
88.209.253.0/24
178.210.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:81:e8:49:b1:65:03:0a:0e:70:86:63:58:fa:5e:53:e9:9e:
8e:69:68:ea:3b:76:e4:b4:00:06:a7:bc:09:ea:e4:a3:61:e4:
50:6c:d0:31:ac:64:f4:59:58:3f:9d:d4:49:a0:ec:87:e0:2e:
15:67:56:1f:87:20:f9:97:3b:6c:b4:3c:c7:73:34:de:4b:1b:
4f:83:ee:c5:19:c2:18:79:89:11:84:fd:67:ab:79:d0:56:b9:
a0:56:30:73:b7:14:80:6f:6a:5a:01:0c:bf:d3:bf:1b:b4:88:
e8:91:b8:70:b2:e1:e9:88:66:d7:34:a9:61:60:c5:83:65:80:
9d:ee:97:eb:c2:fd:0d:59:45:4d:8b:29:2a:1b:79:df:fa:60:
50:bf:7d:38:da:20:fc:96:37:f4:54:99:fd:5b:8c:0a:9c:83:
38:76:96:9d:07:e5:e8:e7:94:22:95:24:a8:b9:04:29:b4:4b:
9c:5f:72:ff:9b:3e:ec:67:5a:9d:0b:66:cf:5a:68:83:c8:7e:
fc:76:a8:72:84:0a:2a:3e:b7:16:6e:d8:5f:a3:2a:cc:a6:62:
5e:b5:d3:d8:8a:b2:a5:2d:43:22:81:eb:d1:ff:49:f0:7f:3c:
47:5f:b9:c7:41:4b:5f:8b:17:dd:75:93:b2:d6:3d:79:af:57:
05:bb:8c:e7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAYrva0gVJZZzKxr1biNbaNupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMxMDAyMDgwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzdkMTNiYWY4MzBmMjRlZGIwOTE0ODQ4YWY5Njc3OTA3YzIyNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBQE/AZoKQVDtov4LiH1++yqf5IU
nYJaCqj4G8bP+/0lHSunn3uB80lI/kHAYK5r0Kxh/nRp9PgjWjgZM+4JiqiF6Ip+
6d+TCOPqmaklGzz4mUJwb080LgmBeBT9vMgmS1eg+PMxlnFj6Vuew6DBY5LksNWh
jjhHig106Z9Fo2TawxYH4L7qw90xC7CgTqcVre86irS7ti2ud/H3AsoSauni2BFM
b/wIp4FU05lzkuOM8aMXvgtSr/61dH+53iABWnwJhPfbfC5tMT6saxSSSJ3cMSPq
G9m2wdpvaIkxFU9qa3Cs2Eq85xBgY77S3/Yxgpr6c54oytVj1cOXVHn2sQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFJN9E7r4MPJO2wkUhIr5Z3kHwiQAMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvazMwVHV2Z3c4azdiQ1JTRWl2bG5lUWZDSkFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAAjqoAwQA
BbZxAwQATfKWAwQATfKcAwQAU4mfAwQBWJc4AwQAWJc+AwQAWNHDAwQAWNHTAwQA
WNHZAwQAWNHcAwQAWNH9AwQAstLkMA0GCSqGSIb3DQEBCwUAA4IBAQBegehJsWUD
Cg5whmNY+l5T6Z6OaWjqO3bktAAGp7wJ6uSjYeRQbNAxrGT0WVg/ndRJoOyH4C4V
Z1YfhyD5lztstDzHczTeSxtPg+7FGcIYeYkRhP1nq3nQVrmgVjBztxSAb2paAQy/
078btIjokbhwsuHpiGbXNKlhYMWDZYCd7pfrwv0NWUVNiykqG3nf+mBQv3042iD8
ljf0VJn9W4wKnIM4dpadB+Xo55QilSSouQQptEucX3L/mz7sZ1qdC2bPWmiDyH78
dqhyhAoqPrcWbthfoyrMpmJetdPYirKlLUMigevR/0nwfzxHX7nHQUtfixfddZOy
1j15r1cFu4zn
-----END CERTIFICATE-----
Generated at Mon Oct 2 12:21:43 2023 by rpki-client on console-ams.rpki-client.org