Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JEQtTGzoGlC5RM2-lfp1-2vxNTk.roa
File: JEQtTGzoGlC5RM2-lfp1-2vxNTk.roa (raw, json)
Hash identifier: BL0B3Sn7MkQsJ3GcTqXz6iVcPHg4n+B6ZOJhorxzpvc=
Subject key identifier: 24:44:2D:4C:6C:E8:1A:50:B9:44:CD:BE:95:FA:75:FB:6B:F1:35:39
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019425DD794E72840E82D85C4EA48970D4DD
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JEQtTGzoGlC5RM2-lfp1-2vxNTk.roa
Signing time: Thu 02 Jan 2025 07:14:19 +0000
ROA not before: Thu 02 Jan 2025 07:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215622
IP address blocks: 88.209.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 09:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:dd:79:4e:72:84:0e:82:d8:5c:4e:a4:89:70:d4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 07:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24442d4c6ce81a50b944cdbe95fa75fb6bf13539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:21:4c:44:61:c6:eb:89:dc:54:b2:65:bc:
b6:4b:b8:e8:a6:08:90:8c:a3:07:b3:d8:1b:80:24:
bf:a8:61:a7:81:47:44:44:ee:a1:ea:b0:9e:1d:41:
ff:1f:0b:37:cf:26:73:51:f0:87:ea:db:df:d0:ba:
4f:bc:5f:55:56:c2:a8:2e:63:a0:07:19:fe:40:3c:
96:09:06:a5:32:34:3e:28:92:3a:05:aa:b1:ab:56:
04:ca:b0:fd:4f:9c:3d:d3:d2:6e:fb:7d:95:f4:c9:
ed:9b:13:5c:45:a1:3b:bc:1c:ff:6f:3c:b6:a7:a7:
80:39:40:dc:81:d5:94:c2:45:5d:85:4e:6b:32:28:
0b:f4:4f:98:d4:2a:10:7b:f5:cb:fe:64:f0:bd:30:
b0:2f:9f:0b:09:af:48:0d:25:58:e8:a8:b0:59:b7:
3b:b4:24:34:47:95:8f:d5:bb:00:e3:63:47:0e:75:
5a:86:f0:fd:33:7e:51:b3:5b:ad:0b:96:19:ae:d8:
49:42:f7:13:c3:28:f9:86:ea:44:da:e3:a1:2e:36:
e6:fa:c3:09:92:87:ce:6a:bc:99:87:76:aa:d2:c3:
6b:a1:fe:1c:9a:55:80:43:58:e4:c2:51:2e:6a:61:
fe:db:aa:6a:60:1a:9b:6b:a7:24:0b:d8:3c:34:8d:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:44:2D:4C:6C:E8:1A:50:B9:44:CD:BE:95:FA:75:FB:6B:F1:35:39
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JEQtTGzoGlC5RM2-lfp1-2vxNTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:db:3e:7d:92:d7:1d:76:6f:36:30:af:4d:c8:e5:4a:21:31:
ed:9c:36:1f:df:4b:69:23:22:1d:0a:04:6b:bc:0e:a5:5d:6e:
af:68:9b:c2:0d:76:27:fc:7f:4f:ad:c8:af:e0:3e:ea:75:e6:
86:34:49:52:f6:72:12:ce:cb:24:de:a7:74:96:56:29:10:81:
78:68:2b:41:6e:d7:e8:4c:4e:f1:0f:78:c4:3b:d9:b8:4c:3b:
97:c3:c0:57:48:ab:83:2a:7d:34:9c:67:22:81:36:70:5d:77:
8d:41:5d:f6:01:ec:42:b2:96:5d:0d:8b:a1:13:24:76:70:e7:
94:39:39:68:a6:a7:86:58:86:2c:25:fb:c3:ab:72:69:b3:c7:
69:83:a2:53:8f:c9:ce:b0:29:31:87:64:ed:a0:4e:43:e9:21:
9e:7e:ad:b6:ec:79:3a:b0:80:4f:25:0d:c2:14:d6:ef:43:60:
b8:33:7e:f4:71:32:04:0b:a0:97:29:72:f4:94:05:6e:b3:e9:
66:22:90:cf:d5:ca:6a:34:7d:70:a7:62:8a:95:2b:89:73:64:
f4:58:47:6c:7b:5d:51:a0:76:a9:3f:47:fa:9e:ac:2d:d0:8f:
9d:7c:64:ed:e2:64:c2:ab:f9:50:20:b6:78:6f:22:1c:8a:fe:
9d:15:d8:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl3XlOcoQOgthcTqSJcNTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwMTAyMDcxNDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDQ0MmQ0YzZjZTgxYTUwYjk0NGNkYmU5NWZhNzVmYjZiZjEzNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBUhTERhxuuJ3FSyZby2S7jopgiQ
jKMHs9gbgCS/qGGngUdERO6h6rCeHUH/Hws3zyZzUfCH6tvf0LpPvF9VVsKoLmOg
Bxn+QDyWCQalMjQ+KJI6Baqxq1YEyrD9T5w909Ju+32V9MntmxNcRaE7vBz/bzy2
p6eAOUDcgdWUwkVdhU5rMigL9E+Y1CoQe/XL/mTwvTCwL58LCa9IDSVY6KiwWbc7
tCQ0R5WP1bsA42NHDnVahvD9M35Rs1utC5YZrthJQvcTwyj5hupE2uOhLjbm+sMJ
kofOaryZh3aq0sNrof4cmlWAQ1jkwlEuamH+26pqYBqba6ckC9g8NI2DfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCRELUxs6BpQuUTNvpX6dftr8TU5MB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvSkVRdFRHem9HbEM1Uk0yLWxmcDEtMnZ4TlRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNH0MA0G
CSqGSIb3DQEBCwUAA4IBAQCP2z59ktcddm82MK9NyOVKITHtnDYf30tpIyIdCgRr
vA6lXW6vaJvCDXYn/H9Prciv4D7qdeaGNElS9nISzssk3qd0llYpEIF4aCtBbtfo
TE7xD3jEO9m4TDuXw8BXSKuDKn00nGcigTZwXXeNQV32AexCspZdDYuhEyR2cOeU
OTlopqeGWIYsJfvDq3Jps8dpg6JTj8nOsCkxh2TtoE5D6SGefq227Hk6sIBPJQ3C
FNbvQ2C4M370cTIEC6CXKXL0lAVus+lmIpDP1cpqNH1wp2KKlSuJc2T0WEdse11R
oHapP0f6nqwt0I+dfGTt4mTCq/lQILZ4byIciv6dFdh9
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:11:30 2025 by rpki-client