Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/myJhO0t6cdn8_4TZxZl5oFAlraQ.roa
File: myJhO0t6cdn8_4TZxZl5oFAlraQ.roa (raw, json)
Hash identifier: ZfzWXTSGHLxIYpl6vVIlk2ovZ+4nQ4OdgsMIlyW7XJk=
Subject key identifier: 9B:22:61:3B:4B:7A:71:D9:FC:FF:84:D9:C5:99:79:A0:50:25:AD:A4
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01869431A073E5B6FF1CAC29A2E1235EECD5
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/myJhO0t6cdn8_4TZxZl5oFAlraQ.roa
Signing time: Mon 27 Feb 2023 18:45:25 +0000
ROA not before: Mon 27 Feb 2023 18:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.253.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
45.14.9.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:94:31:a0:73:e5:b6:ff:1c:ac:29:a2:e1:23:5e:ec:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 27 18:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b22613b4b7a71d9fcff84d9c59979a05025ada4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:22:ae:78:45:1d:89:e8:d9:79:68:29:a5:
da:4f:04:3c:c0:54:60:cd:a1:77:a1:d3:f8:59:80:
e6:22:42:0c:fd:ba:66:c3:2d:b9:7d:69:33:58:6f:
d8:56:8b:bd:6e:de:b1:fa:5b:54:89:fc:3f:c0:4a:
1a:6e:e3:19:89:1f:46:4d:ca:ef:18:d1:a5:6b:d0:
8c:95:41:c5:64:91:a6:1e:2a:10:58:93:b6:a3:07:
16:40:d5:0c:3b:6b:07:9d:92:b5:ae:b0:3a:3f:4a:
9f:7f:ef:8f:cd:a3:57:30:3e:30:f4:a3:a4:13:dd:
cb:55:1d:1b:20:c6:81:97:39:a0:f3:3b:1a:f3:3b:
c9:2f:3e:6d:97:2f:e0:c2:be:a1:22:31:a0:02:55:
ff:db:89:8e:cd:b9:35:e9:b7:48:08:2b:f4:31:d7:
67:0e:ca:3e:bf:b6:e3:a6:d8:8f:53:de:9b:55:44:
4d:6f:ce:51:ae:f3:69:37:2b:8f:6b:05:49:13:b1:
b5:fa:c1:14:f2:31:b2:68:cc:9f:1a:3c:6e:fd:88:
dd:5d:ba:9b:2a:10:d9:9c:54:1c:c1:9c:0b:27:31:
5e:4e:b8:87:da:fa:dd:62:83:2d:86:28:45:01:61:
be:ca:12:64:b9:21:c4:7c:21:8f:cd:25:2c:24:96:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:22:61:3B:4B:7A:71:D9:FC:FF:84:D9:C5:99:79:A0:50:25:AD:A4
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/myJhO0t6cdn8_4TZxZl5oFAlraQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
45.14.9.0/24
77.242.152.0/22
83.137.153.0/24
83.137.157.0-83.137.158.255
88.151.62.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.253.0/24
92.52.218.0/24
178.210.232.0/22
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
03:23:7a:ae:f4:99:63:28:fe:83:f2:f1:70:3c:02:18:e4:b8:
d1:51:da:b4:c4:ab:d8:b1:3c:bd:38:9b:96:65:4a:25:d3:48:
0e:2c:7a:08:d7:17:1e:e4:e1:47:6c:ef:90:56:32:3e:8d:e1:
bf:d2:d2:d0:b0:e9:ce:35:55:33:b8:f4:1c:9b:6d:ad:e3:ea:
a9:86:72:6e:7f:bb:bd:82:20:cf:91:6c:51:34:3a:ec:25:09:
33:0c:65:a4:ae:c6:2e:20:1f:57:3b:8d:2a:40:4e:ce:fe:c7:
ea:cc:82:e4:4c:b3:91:b3:14:df:ff:e2:0b:6c:7a:8b:42:5f:
cc:87:73:9c:1c:d6:06:82:30:8b:53:58:09:b9:1b:ba:72:af:
84:0b:82:f1:df:22:ef:ce:7c:b7:2f:59:7a:e0:bb:0a:95:1d:
dd:76:3e:09:2c:ec:24:d2:c0:56:7b:41:35:71:93:d8:b4:71:
93:ea:ee:0a:e8:2b:60:78:92:22:2f:c3:4b:83:9a:4f:37:62:
cc:7a:d7:70:4c:70:86:61:2d:dd:bc:79:e6:3f:0c:e8:5a:24:
62:96:54:bd:37:19:8a:86:13:7e:b0:30:b1:74:7e:1d:c8:1f:
57:da:c2:ca:f4:9b:00:ce:ab:13:50:18:34:43:26:bc:d2:23:
9e:ec:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org