Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vYxFxcknO3HTOdIXq99ryijRWu4.roa
File: vYxFxcknO3HTOdIXq99ryijRWu4.roa (raw, json)
Hash identifier: cANYGSkzmxTs5N9oiJGD03JPii16nj6+QPQu6yB30EY=
Subject key identifier: BD:8C:45:C5:C9:27:3B:71:D3:39:D2:17:AB:DF:6B:CA:28:D1:5A:EE
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0189BB7E8719AFA23EC846BA4962E1BC848A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vYxFxcknO3HTOdIXq99ryijRWu4.roa
Signing time: Thu 03 Aug 2023 13:02:58 +0000
ROA not before: Thu 03 Aug 2023 13:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.236.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.246.0/23 maxlen: 23
88.209.254.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.229.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:7e:87:19:af:a2:3e:c8:46:ba:49:62:e1:bc:84:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 3 13:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd8c45c5c9273b71d339d217abdf6bca28d15aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:aa:ec:dd:27:49:af:4f:b6:83:99:94:c8:
e2:d0:63:cd:1c:25:13:1a:d7:4b:4a:b1:d4:96:f6:
4c:df:73:75:ed:aa:a0:be:6e:a1:2d:17:a9:84:63:
f6:66:a4:68:cb:58:cf:33:d2:25:91:0b:4a:be:ca:
99:02:50:25:3e:31:ac:fe:29:d1:54:93:45:d0:38:
85:af:d7:78:26:9f:3a:67:99:54:a0:8a:b5:95:8d:
b5:e0:ca:02:70:f2:52:15:bf:46:4a:db:63:f6:72:
15:98:d1:6e:4d:bb:af:90:8d:9e:b9:c1:92:db:db:
cd:f5:84:58:c0:6c:7d:c8:86:8e:b7:07:bf:79:9a:
1b:57:bb:f4:d7:a9:94:32:c5:08:38:f0:fb:2a:0a:
d9:03:e4:20:29:c3:18:5f:3f:71:d0:a1:b9:17:ac:
04:70:bb:48:91:f7:6d:c4:59:06:06:15:cb:8d:c8:
6d:9f:32:d3:07:60:2a:d0:47:20:cf:05:4e:3a:8e:
30:4d:b9:5d:bc:0e:b0:5e:fe:bc:e6:0a:8d:95:a4:
37:ad:ce:4a:24:5a:97:47:8c:e1:36:8c:50:80:3b:
b6:93:98:a8:9b:bf:17:3e:42:5c:38:42:1c:98:88:
4d:9b:d9:dc:c9:51:61:eb:44:fc:cf:a1:56:9c:3e:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8C:45:C5:C9:27:3B:71:D3:39:D2:17:AB:DF:6B:CA:28:D1:5A:EE
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vYxFxcknO3HTOdIXq99ryijRWu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
77.242.152.0/22
83.137.153.0/24
83.137.157.0-83.137.159.255
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0-92.52.218.255
178.210.229.0/24
178.210.232.0/22
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e9:43:6a:77:0c:d2:63:8b:71:d3:41:a8:a3:54:83:f3:dd:
ab:e7:34:6e:e8:b9:9b:29:59:17:e7:70:cb:89:e0:b6:4f:77:
5a:da:e3:5a:56:33:b0:16:db:57:bf:d2:ca:3d:bb:3b:c3:2d:
f9:8e:84:4d:bb:90:b4:f3:ed:ca:9a:fb:fd:b3:a8:bc:d2:74:
f0:89:e6:47:e1:1e:57:06:5d:81:13:b3:ba:5c:e9:00:39:89:
98:61:7c:64:ba:26:31:37:f1:a0:45:65:0e:36:eb:e7:21:d9:
50:b1:d2:ab:70:9f:4a:d8:32:1c:1e:f7:d0:9e:36:ae:5a:5e:
3b:5d:bd:fb:54:b0:ad:ba:04:de:1a:9b:ca:71:d3:25:47:43:
be:26:7c:e2:aa:b0:fa:ee:c0:00:ef:a6:52:63:d6:b5:fd:79:
32:d3:02:66:c2:82:5b:95:3c:57:93:63:57:06:95:8e:94:30:
35:b1:a0:2e:e6:52:f8:e3:94:7c:81:62:b6:08:e2:ab:57:dc:
93:d0:d5:a0:f3:c9:8a:e1:29:ab:17:bd:87:c4:f9:4a:de:bd:
d6:c8:65:4f:75:12:9d:f0:4a:92:ca:f9:ab:18:30:f1:9b:f2:
b6:cb:35:68:83:8f:7c:30:35:b4:0a:b7:50:f5:11:9c:40:8d:
82:51:19:99
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 8 14:06:28 2023 by rpki-client on console-ams.rpki-client.org