Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/s2J08Fb2wG8vLCSchSLD4nx_b54.roa
File: s2J08Fb2wG8vLCSchSLD4nx_b54.roa (raw, json)
Hash identifier: Z+IaV3JkP7+xBMUiDXcgSfo6SoQaJpQ0kqlWLvT5ODw=
Subject key identifier: B3:62:74:F0:56:F6:C0:6F:2F:2C:24:9C:85:22:C3:E2:7C:7F:6F:9E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01892B4A1B42260030D7DBE089E62679DF78
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/s2J08Fb2wG8vLCSchSLD4nx_b54.roa
Signing time: Thu 06 Jul 2023 13:00:24 +0000
ROA not before: Thu 06 Jul 2023 13:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.230.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
2.58.169.0/24 maxlen: 24
5.182.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:4a:1b:42:26:00:30:d7:db:e0:89:e6:26:79:df:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 6 13:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b36274f056f6c06f2f2c249c8522c3e27c7f6f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:0d:b3:82:e4:0f:13:93:71:a7:0a:6e:e2:
e8:74:c0:74:bf:01:10:96:2c:e9:34:7e:ca:b5:b1:
08:e2:18:9e:9c:80:cb:47:19:aa:73:e5:b4:fb:df:
fd:bc:41:b8:58:20:ca:f8:7f:2a:b3:42:b7:f7:cb:
ba:09:bf:35:f5:85:2e:69:b4:af:c8:3d:78:b1:34:
98:09:b1:5f:70:67:81:93:91:2b:3f:06:33:cc:ea:
44:2c:6d:c8:40:90:33:e1:c5:b2:bd:93:49:65:42:
e3:4d:d5:bf:37:3e:c2:75:84:9e:9f:5f:69:59:71:
b4:44:a0:bc:63:60:01:43:30:d5:7e:58:43:27:49:
a0:4d:32:3e:99:93:0f:01:cc:71:1f:42:24:a1:ed:
77:4c:09:c1:e8:9e:57:34:87:5f:f8:04:3d:ea:91:
73:db:2a:e7:76:7c:c3:ec:4f:79:77:e5:04:ed:72:
da:d1:36:71:b8:c8:90:ea:4e:19:c0:f3:7e:0b:be:
64:63:f0:f6:78:61:9b:f9:fb:d2:93:db:cb:93:af:
83:d3:6f:71:f4:cb:c5:cf:b1:15:d6:86:10:fe:72:
08:90:bd:f6:0b:3d:b8:b0:c6:91:32:3a:fa:47:a7:
63:7e:a9:bd:3d:e1:5c:bf:f6:0c:b4:6b:94:01:f4:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:62:74:F0:56:F6:C0:6F:2F:2C:24:9C:85:22:C3:E2:7C:7F:6F:9E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/s2J08Fb2wG8vLCSchSLD4nx_b54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.169.0/24
5.182.113.0/24
88.151.56.0-88.151.58.255
88.209.195.0/24
88.209.211.0/24
88.209.216.0/24
88.209.221.0/24
88.209.230.0/24
88.209.255.0/24
92.52.214.0/24
178.210.248.0/23
178.210.251.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d6:98:8f:ad:60:a7:bb:bd:7d:f9:5c:3a:7b:76:ad:ff:1c:
3b:ee:97:ff:e1:0e:25:f3:3d:ba:1d:60:e6:0c:67:e2:c7:e1:
50:02:71:ce:13:2a:fa:6b:35:b1:1d:07:d2:41:8b:fb:c9:80:
3a:2a:5e:b7:91:97:02:2e:2c:0c:ce:37:3b:db:a6:92:c5:86:
2d:5f:8c:a0:39:16:49:8c:de:db:d6:84:63:22:65:c2:3b:cc:
5b:8e:bc:09:12:fc:c2:d7:bf:19:f0:83:14:0b:f1:78:be:00:
6c:c7:48:eb:ea:33:ea:c4:73:c2:37:0c:03:39:52:d8:40:26:
3f:30:a3:83:1a:e6:9c:a3:f0:fb:29:ca:b7:f9:ff:e6:fc:51:
fd:68:7a:10:41:b6:57:9f:1e:20:77:72:a8:75:ba:8a:40:ae:
a2:b6:f9:c7:ba:a5:e7:90:a6:31:73:4f:cb:89:75:bd:ac:d1:
c8:15:b4:4d:06:9e:f1:6c:29:49:73:99:8d:88:db:90:22:a7:
19:f7:9c:38:24:bf:f2:7c:0f:e1:1c:f6:5c:34:46:d6:6a:6f:
62:8e:8b:e9:24:ff:ea:b1:12:f8:e6:75:29:4a:08:f4:c5:62:
c7:36:6d:a9:15:d8:84:78:5e:8b:29:6a:91:3c:7d:5c:51:7f:
f8:a4:0c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-ams.rpki-client.org