Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Psj7cHxwa7w9cLtxkuS5UaEiNEE.roa
File: Psj7cHxwa7w9cLtxkuS5UaEiNEE.roa (raw, json)
Hash identifier: HXd5Cvfa+KrJAAH9ld6U+u2NghTU1RKIFd12AL8wIWA=
Subject key identifier: 3E:C8:FB:70:7C:70:6B:BC:3D:70:BB:71:92:E4:B9:51:A1:22:34:41
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB950C44E0D11DD6D8F0FD96248C97
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Psj7cHxwa7w9cLtxkuS5UaEiNEE.roa
Signing time: Wed 01 Jan 2025 17:48:20 +0000
ROA not before: Wed 01 Jan 2025 17:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 88.209.194.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 08:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:95:0c:44:e0:d1:1d:d6:d8:f0:fd:96:24:8c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ec8fb707c706bbc3d70bb7192e4b951a1223441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:67:8c:7c:a6:cd:ca:d8:5c:1c:fb:56:66:
c7:24:4c:3f:64:e9:92:c1:db:de:b1:99:62:d3:89:
28:b9:c5:54:81:6d:55:f5:20:70:4a:5c:7c:c9:f5:
f4:bd:d4:e0:d5:39:d0:80:87:18:e4:4d:0c:7a:bd:
ce:95:54:9a:c2:e9:2c:c9:63:25:ef:d9:b9:17:84:
0f:4f:9f:88:36:48:f5:f1:7a:19:59:a6:1e:ca:61:
69:5b:02:41:ee:2a:07:25:18:65:27:3a:89:d7:02:
26:82:9b:cf:ff:7e:e1:fc:51:a0:6d:6a:50:ba:60:
c0:27:12:d9:cb:92:36:c8:cc:39:2f:af:8a:1f:bf:
a8:b1:80:cc:91:88:93:0a:20:17:3c:d8:26:62:f5:
38:56:c3:a0:6c:26:ce:39:f1:11:1a:a9:b7:55:54:
b8:dc:c5:ef:ba:30:ca:38:27:1b:08:ee:70:94:20:
8e:e3:c7:1f:d9:bc:3e:a9:7e:97:86:43:1a:0c:1c:
0a:9d:6a:04:d7:b3:d7:ee:09:7e:28:81:0f:40:b6:
4f:bd:79:64:cb:74:0e:23:8e:b9:be:a7:48:f1:d2:
58:52:6c:97:00:c7:de:05:c4:f2:46:6e:90:e4:24:
45:42:90:29:6a:c1:af:9f:55:0d:8f:15:36:08:da:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C8:FB:70:7C:70:6B:BC:3D:70:BB:71:92:E4:B9:51:A1:22:34:41
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Psj7cHxwa7w9cLtxkuS5UaEiNEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.194.0/24
88.209.211.0/24
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0e:68:53:9f:f8:8d:4e:3a:0c:14:27:d0:d7:16:ac:cb:3d:
b1:78:2d:10:c6:c6:79:9b:94:bf:64:81:a3:f0:a8:7c:96:93:
e9:d5:86:84:70:d2:a1:6f:6c:95:de:7f:6a:52:2a:36:97:dd:
4b:46:28:6b:55:b8:2a:09:bb:52:67:c5:2d:e3:66:fe:48:e7:
4a:9b:f4:be:19:94:f3:70:10:4b:52:20:8f:92:10:94:61:2e:
fd:b8:06:89:bb:6e:9a:65:52:c2:16:fc:4c:b9:66:5d:27:a6:
f4:9a:f6:14:31:1a:78:fb:52:8f:d5:61:56:69:ee:1b:b7:a8:
bd:4d:7d:c1:bc:f6:de:31:62:7a:89:11:90:a6:bf:36:ad:d5:
5c:77:ac:77:6b:6e:91:93:c4:97:0d:35:31:91:dd:11:10:e0:
a6:55:3f:21:7d:e8:7a:8d:5c:fe:63:60:4d:b3:09:64:7c:c7:
30:a9:30:bb:7e:f3:bf:de:21:4c:8c:3d:fd:a8:01:a2:c4:a9:
4d:80:0f:53:97:00:bd:47:52:5c:a7:4a:89:f9:66:b7:73:b2:
a4:35:33:b6:9b:44:b9:6e:4e:29:06:1c:a2:e8:d4:a6:60:b8:
f3:73:17:57:f1:79:11:64:5c:7a:14:2a:3d:33:2c:08:90:3b:
c2:98:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:46 2025 by rpki-client