Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mvR0b8Wy5LfBrZdMfOhKbs4GZxw.roa
File: mvR0b8Wy5LfBrZdMfOhKbs4GZxw.roa (raw, json)
Hash identifier: 7ey/DaYfj8VKA6Kr2EpYrfyQiCBrJjtNBDcKDWOSMfQ=
Subject key identifier: 9A:F4:74:6F:C5:B2:E4:B7:C1:AD:97:4C:7C:E8:4A:6E:CE:06:67:1C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01887074390542712A0D0B301993B568D62B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mvR0b8Wy5LfBrZdMfOhKbs4GZxw.roa
Signing time: Wed 31 May 2023 06:17:24 +0000
ROA not before: Wed 31 May 2023 06:17:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.245.0/24 maxlen: 24
88.209.248.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
2.58.168.0/22 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:70:74:39:05:42:71:2a:0d:0b:30:19:93:b5:68:d6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 31 06:17:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9af4746fc5b2e4b7c1ad974c7ce84a6ece06671c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:7a:69:a1:62:19:7b:78:9e:ea:0c:56:1c:
bc:a8:7d:b7:c0:38:94:21:6e:ef:bf:13:aa:83:34:
29:5e:4e:f5:ec:10:fb:bb:00:01:ba:d2:ea:20:a5:
fa:d6:a3:72:c6:2d:32:8d:96:f7:70:44:28:a7:ed:
53:a4:de:f8:ef:56:b3:60:b4:3d:62:4f:9c:d4:bf:
66:df:de:85:6a:dd:f0:bb:07:5a:cb:3b:73:ac:f2:
08:57:df:cc:b0:1d:c3:22:01:b5:af:2c:71:55:61:
a0:61:04:9c:23:55:86:d4:6e:8f:1d:0a:05:d3:ea:
fa:fe:04:08:5b:50:61:b3:06:47:80:4e:0c:a8:01:
90:db:af:28:bd:ee:d4:e2:49:df:2c:df:f1:40:a9:
3b:65:22:28:32:0f:82:67:c6:77:5c:a5:12:af:6d:
e5:94:15:49:e5:12:0f:46:73:1a:2c:c3:5e:e5:d0:
c3:1a:9b:d3:84:53:b0:c9:ad:d6:74:aa:d6:3d:7c:
ac:a0:03:14:31:46:85:f2:09:8b:50:c4:62:25:9d:
67:3d:0e:b9:4f:cf:b2:59:38:32:6b:d5:c6:ae:cf:
21:60:0b:bf:a2:ef:b7:fe:70:e2:9c:45:45:22:84:
4a:69:64:82:2f:b4:17:9e:cd:86:f1:c7:83:7c:60:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F4:74:6F:C5:B2:E4:B7:C1:AD:97:4C:7C:E8:4A:6E:CE:06:67:1C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mvR0b8Wy5LfBrZdMfOhKbs4GZxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/22
88.151.58.0/24
88.151.61.0/24
88.209.195.0/24
88.209.211.0/24
88.209.220.0/24
88.209.222.0/24
88.209.224.0/23
88.209.245.0/24
88.209.248.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c4:83:f9:7b:01:57:52:c3:f0:22:0c:51:a7:7a:e1:c4:54:
cb:e8:fe:51:3e:a7:cd:59:83:3b:a5:d7:8e:9b:54:40:0e:26:
8b:89:4e:9c:0b:14:35:60:6c:d5:9d:94:7d:08:16:66:18:d2:
fa:2b:45:56:76:c0:dc:13:ca:cc:07:13:88:06:e9:78:e4:8d:
40:76:d1:c6:44:4e:9f:18:0e:e0:91:a7:1d:f4:c8:51:22:60:
75:4c:cd:e0:cb:f2:09:50:cc:da:66:dd:04:8f:91:fc:32:4f:
d7:5f:ae:34:16:b6:42:2a:d9:89:42:01:d2:58:c6:a3:b3:e9:
68:49:aa:c9:4c:86:b2:86:25:86:c6:20:b7:fc:2b:8b:2d:81:
8f:b2:33:46:9c:6e:e2:fa:aa:7b:2d:58:d6:76:ed:b9:e3:61:
ea:59:e9:2e:e5:1a:9d:0d:2e:bc:f0:1e:7d:2f:c8:1f:21:10:
2b:e3:c5:82:7f:fa:d4:17:eb:94:61:03:09:2c:eb:37:b1:74:
60:58:63:ab:59:ea:72:0a:3f:df:7a:2e:20:99:24:4f:5b:9c:
20:30:5f:97:0d:c0:1a:ea:35:bb:c1:8c:ff:c0:8c:35:48:25:
9c:74:6f:87:b1:06:7b:c8:b4:29:d2:80:c3:ca:c9:a7:1c:4d:
63:b2:ad:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org