Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mQw78SsHumjz6_wfANtq4ifPS0s.roa
File: mQw78SsHumjz6_wfANtq4ifPS0s.roa (raw, json)
Hash identifier: XYTTwggDyV5cV/ksEbiYCU4xJVL9clbhcMkWMaUIP6Q=
Subject key identifier: 99:0C:3B:F1:2B:07:BA:68:F3:EB:FC:1F:00:DB:6A:E2:27:CF:4B:4B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188330FCED2AC04174D5F0BB654C1F76F99
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mQw78SsHumjz6_wfANtq4ifPS0s.roa
Signing time: Fri 19 May 2023 08:10:53 +0000
ROA not before: Fri 19 May 2023 08:10:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.229.0/24 maxlen: 24
88.209.248.0/24 maxlen: 24
88.209.249.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.207.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
5.182.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 May 2023 13:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:0f:ce:d2:ac:04:17:4d:5f:0b:b6:54:c1:f7:6f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 19 08:10:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=990c3bf12b07ba68f3ebfc1f00db6ae227cf4b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:18:41:2c:63:8c:c9:b0:e2:22:f8:ed:22:5a:
35:99:24:e1:82:ea:16:f2:92:60:86:37:b1:97:b7:
d2:a6:13:02:58:b8:bf:21:07:9d:a1:e7:87:7c:60:
7e:a4:60:15:38:c1:a1:1f:ea:84:ff:9d:ef:83:4e:
32:16:f2:e5:43:08:8e:98:44:5a:a6:16:47:d8:d8:
05:37:17:ed:c2:1e:42:7f:b4:c6:14:df:e1:63:e0:
53:73:e5:2f:dd:b8:fe:d8:82:48:f9:48:f3:65:28:
8b:fd:b1:7c:43:36:1a:c1:96:54:f5:fb:5a:b1:a4:
5a:05:3f:09:ed:a1:9a:87:42:d7:ae:b8:43:1c:62:
a7:e4:21:82:20:00:a9:85:c7:30:83:56:c3:50:f9:
e8:8d:59:83:9f:49:5f:6b:4f:95:86:13:ad:aa:c0:
97:c6:b6:7a:96:cb:e0:71:94:56:bc:24:b7:2f:2d:
62:95:1b:5a:f9:ff:bd:f6:ba:d6:b8:88:77:f2:5f:
cf:56:1e:b8:4d:1c:b1:7b:d1:c3:42:57:0b:5f:3c:
f1:3c:cb:88:d3:26:d4:3f:53:e8:47:f6:83:ff:2a:
e3:cb:bb:c2:23:b2:3f:34:8f:de:dd:77:14:61:bd:
9e:96:de:74:d6:36:fb:70:0a:28:8c:45:1c:5b:f9:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:3B:F1:2B:07:BA:68:F3:EB:FC:1F:00:DB:6A:E2:27:CF:4B:4B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mQw78SsHumjz6_wfANtq4ifPS0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.113.0/24
88.151.58.0/24
88.151.61.0/24
88.209.195.0/24
88.209.207.0/24
88.209.209.0/24
88.209.211.0/24
88.209.216.0/24
88.209.220.0-88.209.222.255
88.209.224.0/23
88.209.229.0/24
88.209.248.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:ec:a7:c1:81:49:74:b7:ec:10:5b:2e:bd:a4:51:2f:11:03:
a4:2e:ca:db:1e:4d:e6:1e:25:3c:4e:8a:ea:87:32:d3:1c:dd:
47:41:8e:42:95:67:be:8c:43:ca:d3:32:75:90:ad:89:9b:0c:
46:da:4f:bb:ee:33:f4:11:a1:f2:5a:67:75:66:ab:2a:53:e7:
1a:49:9a:04:e7:94:1c:fd:3b:ee:22:a6:50:72:41:93:fd:2c:
8d:f4:8a:8d:46:7b:ad:bd:94:3e:72:6e:21:44:1e:c4:4d:b1:
d2:0f:21:3c:01:a7:b1:c2:c8:ae:db:73:35:4e:4c:c3:6b:3a:
b7:b3:54:a5:78:fe:b2:10:90:94:1a:c1:f5:d4:4d:ce:47:b4:
0b:c6:bb:63:fb:83:2e:fe:c0:68:72:4f:dc:8e:4d:ae:38:a1:
a1:d9:89:71:87:54:82:c8:d9:ea:97:66:c5:dd:46:a6:cb:ee:
7d:be:12:0d:be:de:36:6c:18:cb:df:94:c3:fb:6a:f1:a4:9a:
c7:96:a6:aa:36:6b:40:8b:ed:aa:a5:a0:51:f0:24:09:30:65:
be:de:88:fb:c8:05:87:5a:0d:b1:23:3b:70:3b:10:73:75:78:
2e:c4:55:0e:0b:92:d0:3d:c1:a4:a5:e0:6d:81:e6:61:60:10:
43:de:d9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org