Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/rWMXXhk9e23LVU-WnyFrqP1Fc8g.roa
File: rWMXXhk9e23LVU-WnyFrqP1Fc8g.roa (raw, json)
Hash identifier: 85bONAFgzcX8DqpDuJWjWcMmvTJiFC61W9d5bW1zJpQ=
Subject key identifier: AD:63:17:5E:19:3D:7B:6D:CB:55:4F:96:9F:21:6B:A8:FD:45:73:C8
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188B9A5173F7AC53093D708878ADA38D9B7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/rWMXXhk9e23LVU-WnyFrqP1Fc8g.roa
Signing time: Wed 14 Jun 2023 11:23:04 +0000
ROA not before: Wed 14 Jun 2023 11:23:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.210.231.0/24 maxlen: 24
178.210.228.0/24 maxlen: 24
178.210.230.0/23 maxlen: 24
178.210.250.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
77.242.159.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:a5:17:3f:7a:c5:30:93:d7:08:87:8a:da:38:d9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 14 11:23:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad63175e193d7b6dcb554f969f216ba8fd4573c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:78:b3:33:c0:05:7f:36:4a:3e:95:d1:97:
74:60:e0:2d:25:cc:56:13:60:5b:0e:41:25:57:8b:
c5:2e:8c:c4:06:25:c7:d1:77:53:e6:c4:6f:29:60:
09:54:e2:e1:fa:a2:ce:4a:ca:5b:34:3c:04:86:0f:
39:ad:a7:70:ea:e6:8e:52:41:74:4d:01:1f:8e:db:
fd:6d:a1:95:b5:19:f2:f0:e7:ce:2a:72:db:6e:30:
04:0f:58:ff:df:2a:f5:4a:8a:d2:b6:f9:6e:98:12:
b3:1b:f0:9e:84:a6:10:99:3c:28:8e:af:60:88:cc:
89:73:48:bf:de:c1:45:c6:e1:d8:61:da:ad:3d:7a:
5b:ef:95:f5:70:7c:86:31:f5:46:65:1c:3e:a0:d3:
59:61:36:e4:73:91:c8:1c:07:8c:9c:48:40:2e:6c:
22:a3:ff:14:bd:e4:eb:e8:0f:08:ce:5c:8d:29:99:
16:01:a7:d9:02:5a:77:cd:b0:04:5f:2a:c3:e4:57:
dd:d1:43:37:d8:d7:9c:68:8e:05:32:84:74:ea:dd:
4f:17:8f:bf:dc:f1:df:00:78:3d:3c:19:af:8f:2a:
16:5a:68:59:53:e5:4b:4f:bc:75:06:04:01:c8:45:
b0:d1:19:d1:0e:02:f9:a3:ff:84:09:93:5f:b3:e7:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:63:17:5E:19:3D:7B:6D:CB:55:4F:96:9F:21:6B:A8:FD:45:73:C8
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/rWMXXhk9e23LVU-WnyFrqP1Fc8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.159.0/24
88.151.56.0/23
88.209.211.0/24
178.210.228.0/24
178.210.230.0/23
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
26:90:00:9d:23:0f:b5:34:be:7a:c7:cc:0f:4b:8f:72:fb:2a:
c3:01:48:87:a8:e6:93:a9:9f:36:26:8e:bc:f5:0c:0a:2b:82:
1f:5d:0d:a6:6b:a2:69:5f:81:a3:8c:c0:94:2e:e8:5b:71:1c:
10:dd:61:57:f7:f4:dd:c0:52:80:df:19:58:c8:91:2c:3c:da:
d9:5b:06:4c:cc:6f:49:81:40:ea:10:a9:2c:d4:66:f3:7f:0f:
35:28:95:01:c8:da:e1:78:56:e6:80:96:e0:85:17:d6:92:02:
fa:6b:79:a7:3c:3e:43:3c:0e:17:9c:13:0f:01:9d:36:18:04:
30:37:30:f3:58:1d:3a:23:f5:56:7a:7c:dd:f3:58:10:d0:2f:
fc:c8:66:3d:27:25:08:ba:bd:93:38:ff:be:8c:6d:9d:0e:e7:
4f:f9:6d:ec:05:fa:86:c8:b8:31:01:bf:be:38:bb:90:0f:6c:
f4:0a:86:53:48:60:bc:1d:a0:54:1f:d2:55:6d:47:fe:7d:1d:
79:25:55:43:4a:04:48:de:99:01:98:67:8f:f1:b0:9b:65:a3:
56:66:70:d0:b1:c0:03:f2:3d:6d:70:9e:38:b2:31:f2:c4:1f:
be:c8:27:89:c5:ee:9a:ba:04:74:6e:13:0e:75:89:f3:d0:f0:
e4:82:70:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org