Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/5_w1Q9Z9Thc7XURo9FvFCoMWtqg.roa
File: 5_w1Q9Z9Thc7XURo9FvFCoMWtqg.roa (raw, json)
Hash identifier: LJJ7NEdBWLqJS92KN3WT6aUFioWm93mO43jHsFUCP9o=
Subject key identifier: E7:FC:35:43:D6:7D:4E:17:3B:5D:44:68:F4:5B:C5:0A:83:16:B6:A8
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FBA5CE9A2129C4680BE3ECC31B9763
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/5_w1Q9Z9Thc7XURo9FvFCoMWtqg.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 88.151.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 13:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a5:ce:9a:21:29:c4:68:0b:e3:ec:c3:1b:97:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7fc3543d67d4e173b5d4468f45bc50a8316b6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:8d:45:88:c0:1e:69:12:9b:54:c0:12:98:
93:e1:c6:a0:3f:ab:14:6e:11:04:bb:34:ba:67:71:
e8:67:bd:2e:96:d0:28:fa:76:9c:ac:87:4c:70:95:
25:73:a8:ae:d8:29:57:66:b0:4f:75:c7:95:ee:0c:
02:21:39:8d:dd:5e:f0:98:93:ab:c0:e8:d8:72:76:
13:dc:69:d7:a3:c8:e8:10:19:88:8b:19:e4:bc:8b:
83:54:5c:46:a7:21:ac:79:44:b4:46:2c:3c:20:96:
f9:ea:af:e2:d0:23:28:b1:b6:86:b0:f9:03:d2:38:
ba:9f:2a:dc:5c:df:ec:a9:7e:f5:b0:e5:9f:2e:96:
ba:07:dd:e6:ab:ef:83:3e:a0:8d:a9:2a:2e:03:ae:
40:40:d6:9e:10:e0:88:35:49:07:87:60:d5:83:ac:
d9:0a:f9:98:fd:2d:04:8d:e3:11:ce:d7:80:24:f6:
d7:ae:8e:ae:57:ef:b1:b4:d4:bb:e3:f3:e9:80:18:
31:a0:20:bf:d1:64:d2:97:a0:b2:82:c7:4c:dc:10:
64:4e:65:ab:6e:cc:c1:4c:d6:e1:bf:84:41:ab:06:
93:df:db:24:a6:25:fe:65:7e:a9:e1:fa:ed:70:bc:
ed:21:ee:07:81:37:40:9a:91:90:c4:da:4f:a2:a6:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FC:35:43:D6:7D:4E:17:3B:5D:44:68:F4:5B:C5:0A:83:16:B6:A8
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/5_w1Q9Z9Thc7XURo9FvFCoMWtqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c7:58:d8:d0:00:24:30:ae:e6:3d:c6:50:fa:ca:be:1b:29:
8e:8d:17:f5:3d:5b:ba:b5:d5:0d:e9:0b:34:78:53:44:74:23:
6d:0a:2a:72:cb:91:dd:63:9f:e8:eb:a1:fc:16:a2:4e:91:68:
77:05:31:2c:b8:2a:1e:c1:55:ad:64:94:58:5d:88:dd:d7:3e:
fc:62:d0:16:dd:42:9b:71:de:40:ef:78:32:cd:e7:f2:ed:27:
0d:b9:8a:97:ba:96:3a:e6:6b:a6:36:86:1c:72:34:23:35:fc:
cb:47:2a:e0:4c:f3:4d:45:17:fa:1c:ab:a0:bd:91:30:e6:82:
a0:8a:11:52:80:25:59:d9:36:11:dd:21:8f:22:f7:b1:35:fb:
65:51:a6:a7:7d:d6:b0:3e:37:96:40:32:af:eb:c8:8b:86:62:
15:e7:c1:c9:94:e4:ac:db:5c:51:00:35:15:a7:23:e4:90:cf:
13:c5:31:c9:0d:0c:f8:32:24:d8:29:15:dc:88:a7:21:6c:87:
9d:f3:1f:e8:b6:62:33:e8:af:fd:11:eb:b2:b5:10:f6:0c:bf:
a9:1d:79:cf:29:30:32:eb:3b:4b:11:08:e9:8c:43:97:6e:d2:
1f:b9:e5:47:01:cc:7c:b4:e5:7c:a3:2a:64:d4:7c:33:a9:21:
ee:46:d5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:31 2025 by rpki-client