Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/z4g1MtF9JnG_EEtLYqdYiH9IPjs.roa
File: z4g1MtF9JnG_EEtLYqdYiH9IPjs.roa (raw, json)
Hash identifier: Weys5SWZDQDb1tEUDJRZwCIZGz7/Fi3UX5K233m60IM=
Subject key identifier: CF:88:35:32:D1:7D:26:71:BF:10:4B:4B:62:A7:58:88:7F:48:3E:3B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188BDDE5081888539FC27712175A4722AD0
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/z4g1MtF9JnG_EEtLYqdYiH9IPjs.roa
Signing time: Thu 15 Jun 2023 07:04:03 +0000
ROA not before: Thu 15 Jun 2023 07:04:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.210.231.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
77.242.159.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:de:50:81:88:85:39:fc:27:71:21:75:a4:72:2a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 15 07:04:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf883532d17d2671bf104b4b62a758887f483e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:17:d7:84:37:6a:fa:70:4b:97:58:66:ff:b3:
47:c3:c9:3b:00:22:f4:1b:2e:8a:75:58:16:41:9d:
e8:2c:c6:fe:14:c3:9d:28:df:e6:bd:8d:9a:2b:85:
2d:14:2f:6d:18:51:2b:37:17:f5:7c:f1:90:b9:d0:
e5:cb:e0:87:7f:b5:2d:14:41:3a:c9:96:e3:b7:be:
62:f4:b4:61:71:e6:f4:22:f3:a7:3e:7b:e8:52:9c:
a8:5b:7e:78:d4:ba:2a:6c:d3:f4:93:34:e4:b3:bf:
ee:9f:f1:55:79:8a:14:e1:45:06:e0:85:78:b8:90:
8c:be:79:1a:0e:f1:0e:0b:dc:c4:cc:e7:27:f3:51:
ed:f1:6b:c8:61:83:63:89:10:cb:2c:9a:92:14:b8:
7f:e3:9b:ec:3c:b0:a4:02:f8:fb:29:7f:a6:a1:21:
e7:08:86:d8:18:cb:b5:09:83:24:22:7f:ee:ea:b4:
7c:f6:72:d0:d9:89:4c:1f:71:8d:4f:a1:68:12:ad:
d6:32:19:78:9b:32:18:c4:06:96:25:6f:4f:94:69:
08:a3:c0:04:9c:45:30:f5:ab:d7:fc:2b:c5:29:e8:
ea:ee:70:58:a8:5e:ce:ae:df:9c:9f:0a:8a:47:d0:
23:31:41:fb:e4:55:08:07:15:bb:72:11:98:c5:fe:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:35:32:D1:7D:26:71:BF:10:4B:4B:62:A7:58:88:7F:48:3E:3B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/z4g1MtF9JnG_EEtLYqdYiH9IPjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.159.0/24
88.151.56.0/23
88.209.211.0/24
178.210.231.0/24
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:63:ac:bf:c6:3b:93:e9:42:a4:38:c3:e3:15:6e:e6:71:b5:
ad:a5:e3:5c:8e:44:31:34:a7:d9:db:d1:8c:bf:d5:97:38:24:
02:4e:a3:30:db:71:73:74:99:0f:5e:7a:26:4b:44:5a:5d:5a:
4d:b4:2b:54:5c:8b:88:43:1e:91:b7:81:b7:57:1c:9a:08:a7:
9a:67:99:e5:b8:a0:94:71:f1:91:ae:72:a8:e0:f2:e8:83:a5:
0a:35:24:b1:b9:3e:fb:b0:c7:5b:3c:ab:b0:6f:a6:ee:43:5c:
9d:af:2b:f7:ec:d3:08:41:13:90:72:d8:6e:e8:bf:45:45:d3:
44:a7:de:50:1a:f4:cb:cb:23:90:d8:0d:94:72:26:36:75:87:
66:84:22:38:9a:f4:01:81:12:b9:c5:9e:c8:ae:08:aa:03:04:
0a:b7:32:49:8c:8c:42:c5:b6:53:81:26:fd:77:a5:7e:06:59:
65:e3:ae:ea:a7:1e:71:9a:1e:5a:90:19:b6:4a:71:31:c8:d0:
2e:bf:9c:39:50:f9:d4:a8:88:6b:39:4d:19:52:dd:69:2f:05:
c9:fa:3a:01:e5:8f:96:88:c0:1e:90:18:0e:e3:64:ce:a8:20:
96:07:13:a2:ad:54:2d:f9:27:06:2d:88:6a:fa:b7:2c:61:88:
85:03:a6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-ams.rpki-client.org