Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pqg4XV8ty795dgfyLT46M8Jb0oc.roa
File: pqg4XV8ty795dgfyLT46M8Jb0oc.roa (raw, json)
Hash identifier: 8091/g1T/KTttJZhUwyeMD6eEVLKHv0j3gqUVLU/nKk=
Subject key identifier: A6:A8:38:5D:5F:2D:CB:BF:79:76:07:F2:2D:3E:3A:33:C2:5B:D2:87
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018C693E186BF13C97B9ADB803CE76B1B579
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pqg4XV8ty795dgfyLT46M8Jb0oc.roa
Signing time: Thu 14 Dec 2023 16:52:06 +0000
ROA not before: Thu 14 Dec 2023 16:52:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.236.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.246.0/23 maxlen: 24
88.209.254.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.229.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
88.209.219.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:3e:18:6b:f1:3c:97:b9:ad:b8:03:ce:76:b1:b5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 14 16:52:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6a8385d5f2dcbbf797607f22d3e3a33c25bd287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:77:6c:46:4f:10:65:ac:2a:98:aa:0d:61:
ec:dd:46:29:59:69:24:d5:2b:e7:68:72:da:ca:54:
89:84:0b:f4:0c:17:df:ab:82:bb:31:0e:ce:6b:41:
2c:21:72:f1:77:51:12:39:5e:04:57:5e:e1:f1:be:
53:32:3e:d1:65:7a:67:3a:5c:6b:61:7a:13:d8:5a:
9b:b8:0f:19:65:9f:38:c3:73:f3:72:4f:d2:5e:b7:
ad:09:e7:94:84:19:a4:6b:e2:0d:f5:2a:e7:6e:c8:
2b:d2:32:cc:37:27:62:bb:3a:dd:6f:fe:6b:c0:cb:
9f:e8:a2:d4:e0:03:fe:7a:94:01:e9:0a:94:e4:e4:
8f:49:e4:f2:e6:70:1e:88:43:f2:ae:da:25:63:54:
40:a0:bd:d6:76:b2:fa:a7:f6:53:06:46:18:1d:d5:
ff:f5:98:c9:f8:51:14:84:49:5a:dc:b7:f0:f8:6f:
66:c7:e3:3b:6c:f8:28:84:6c:c6:71:82:4f:88:08:
2d:8c:e7:b1:cc:dd:0e:26:d5:5a:1d:ef:7c:eb:6c:
db:12:1e:61:5e:45:a7:58:37:22:34:90:57:b9:02:
0f:16:ad:f8:81:83:a4:db:51:b8:53:20:04:1b:ef:
ea:d6:9f:e5:96:91:b5:2e:78:61:43:b2:65:be:49:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A8:38:5D:5F:2D:CB:BF:79:76:07:F2:2D:3E:3A:33:C2:5B:D2:87
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pqg4XV8ty795dgfyLT46M8Jb0oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
77.242.152.0/22
83.137.153.0/24
83.137.157.0-83.137.158.255
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0/24
178.210.229.0/24
178.210.232.0/24
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
92:20:af:6f:e7:a4:60:a5:69:96:20:86:2c:26:ef:a3:82:5e:
e0:4f:35:ae:26:96:c4:3b:7e:f4:86:d6:f6:97:e5:59:e5:57:
1f:be:9b:37:2d:0f:2b:30:f1:9b:8d:8e:ff:64:0f:45:7f:23:
07:81:5f:95:c9:13:c8:ed:c2:6d:9b:84:bd:70:3b:81:de:cb:
d8:bf:71:14:1b:e1:c9:94:b9:62:b2:1f:60:7a:8f:d9:8d:5d:
48:1f:3d:67:39:01:76:3f:4d:aa:41:d7:de:13:7f:57:2f:0c:
4a:3a:2a:d9:23:20:d2:78:20:5d:ff:96:ee:2c:a7:b2:da:fb:
c2:e5:27:44:dd:10:4c:4f:95:d8:e3:78:59:52:b9:88:85:6b:
eb:83:3b:2c:cd:c5:9b:56:86:fa:0d:0a:3f:f9:d4:70:f1:30:
77:05:97:3d:b5:5d:b3:dc:ae:f7:54:55:38:35:6e:9a:1a:d3:
66:e5:8d:c6:2f:3c:07:9c:be:dd:e3:6b:21:23:a9:73:d3:7e:
7c:76:de:64:ab:54:a5:1e:38:43:c0:b5:57:ce:84:18:de:01:
24:bf:3d:bf:d3:70:a4:c6:8a:c9:fb:2a:32:b6:92:ff:33:3c:
bc:7e:c7:af:0c:05:6c:0a:9d:19:9f:cc:93:f6:3c:e3:91:f8:
ea:19:5b:7b
-----BEGIN CERTIFICATE-----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Generated at Thu Dec 28 18:50:30 2023 by rpki-client on console-ams.rpki-client.org