Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/Vx9qAbs1bfHiAgq7gKA_ifEmL6s.roa
File: Vx9qAbs1bfHiAgq7gKA_ifEmL6s.roa (raw, json)
Hash identifier: zKIglocG5y64NwAnqy2PUswpgxHael5lyrUbv7n4PwA=
Subject key identifier: 57:1F:6A:01:BB:35:6D:F1:E2:02:0A:BB:80:A0:3F:89:F1:26:2F:AB
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 019395AE05AA716299293B24279BCF54B021
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/Vx9qAbs1bfHiAgq7gKA_ifEmL6s.roa
Signing time: Thu 05 Dec 2024 07:17:10 +0000
ROA not before: Thu 05 Dec 2024 07:17:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210314
IP address blocks: 88.151.224.0/24 maxlen: 24
88.151.229.0/24 maxlen: 24
88.151.231.0/24 maxlen: 24
192.124.199.0/24 maxlen: 24
192.124.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:ae:05:aa:71:62:99:29:3b:24:27:9b:cf:54:b0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Dec 5 07:17:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=571f6a01bb356df1e2020abb80a03f89f1262fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:32:17:77:db:ef:29:9e:32:16:90:d7:8e:
30:b7:1f:17:1a:41:ea:0f:f6:c0:c3:2f:a8:fd:44:
f9:2d:41:59:f5:34:e2:b3:34:9c:68:77:76:1d:a5:
26:49:52:48:58:e4:b2:44:d6:39:ac:5a:b4:89:4b:
92:58:16:d9:c7:e4:ec:cc:07:74:03:8d:1d:19:22:
b5:9d:cb:8b:40:5b:9e:83:a4:97:c1:a4:33:13:76:
81:38:0f:0c:69:53:11:0c:69:af:f5:42:cc:17:f8:
38:7c:73:1d:0a:94:39:de:73:bf:12:ce:b3:29:27:
97:87:47:ae:8c:5c:08:de:77:44:31:f8:4c:97:7a:
d8:90:17:02:f9:05:89:01:50:1f:fd:b2:ed:7f:78:
7e:a2:95:b6:75:22:81:6a:d8:81:61:70:15:57:6f:
d1:60:40:9c:f4:3c:93:59:f2:a7:d0:cd:94:77:8c:
cf:d8:c0:5a:3e:71:dc:cb:de:c8:99:66:96:94:6b:
81:b3:6c:f6:d9:88:9d:39:18:32:f6:48:4d:c9:f5:
13:6b:2d:8f:3e:63:2f:61:9d:00:e9:6e:4e:35:2f:
46:b4:e9:c7:bd:a9:ce:00:ab:70:42:9d:c2:e6:ba:
9d:97:52:df:3b:37:a8:bb:e6:26:72:fd:e0:a1:ae:
2b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1F:6A:01:BB:35:6D:F1:E2:02:0A:BB:80:A0:3F:89:F1:26:2F:AB
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/Vx9qAbs1bfHiAgq7gKA_ifEmL6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.224.0/24
88.151.229.0/24
88.151.231.0/24
192.124.199.0/24
192.124.205.0/24
Signature Algorithm: sha256WithRSAEncryption
55:7d:91:30:43:c6:dc:db:1a:78:de:16:76:9a:ad:67:57:f9:
10:e1:c5:8b:bd:28:7d:e6:30:59:f1:ff:5f:94:04:b1:b8:ff:
2d:d3:9b:07:aa:0f:9a:e8:e2:3f:9e:82:a7:d3:b9:16:0a:c1:
4e:a1:0a:cc:0b:76:18:38:05:1b:9b:c6:78:2d:d7:12:c5:a6:
a8:15:b0:2d:df:be:68:0b:ee:cd:d3:69:8e:50:9f:9e:a8:6d:
0d:df:18:a4:a6:a4:fe:1b:68:42:b6:73:07:c0:2a:5f:88:40:
25:28:69:f8:9d:64:4e:9c:6c:2f:86:c2:f6:97:36:09:c6:dd:
35:a7:2b:92:5f:2b:02:ba:92:2f:7a:11:4c:a1:86:44:93:e8:
ee:91:6f:d9:26:af:71:c3:1d:f2:c9:0c:51:ef:34:13:a9:5e:
35:67:98:a3:85:1f:74:f0:0f:27:c4:ff:27:ee:ea:4c:78:cf:
e6:f1:ba:c4:ca:b8:c9:66:1a:82:ce:d6:67:a5:8b:96:0b:c7:
b1:db:2f:7e:1d:10:95:86:23:a9:8a:55:ef:4e:4a:17:af:de:
40:28:74:cc:1c:f6:c2:27:39:20:85:91:dd:55:56:e1:eb:c7:
2a:02:33:b1:cb:fc:72:8b:58:ac:f2:55:c0:e6:d6:bc:10:2c:
81:8c:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:21:00 2025 by rpki-client