Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/X7m7Y0gTIz8umoPsBgAAHkM1xsY.roa
File: X7m7Y0gTIz8umoPsBgAAHkM1xsY.roa (raw, json)
Hash identifier: c8SQwCDCpa67GZW2ehcgXL82NEBgeWfNOfj73XMq3o8=
Subject key identifier: 5F:B9:BB:63:48:13:23:3F:2E:9A:83:EC:06:00:00:1E:43:35:C6:C6
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01950358BF4EF891A51D2DDC5B53D93CE4C8
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/X7m7Y0gTIz8umoPsBgAAHkM1xsY.roa
Signing time: Fri 14 Feb 2025 07:25:02 +0000
ROA not before: Fri 14 Feb 2025 07:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 88.209.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 16:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:58:bf:4e:f8:91:a5:1d:2d:dc:5b:53:d9:3c:e4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 14 07:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fb9bb634813233f2e9a83ec0600001e4335c6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:01:c0:c8:22:86:f3:db:25:d1:a1:52:da:85:
78:31:21:37:fd:6a:1e:64:ef:5a:fd:0a:9a:12:b4:
b5:01:40:7a:13:40:07:2d:ce:b1:93:cb:22:e6:62:
7b:da:4d:b3:4d:b4:93:97:43:36:85:f1:67:13:1b:
a2:05:e0:a3:45:53:3b:c2:5b:9b:3a:28:3e:22:8c:
35:5a:b4:7b:12:20:e9:27:47:15:3f:7c:e5:c3:25:
44:55:a8:f6:de:bc:e8:e2:92:a4:87:d5:87:bb:20:
9d:14:cc:4b:4d:8e:c2:9d:33:8c:76:97:58:df:0f:
02:5d:93:d7:c2:d6:52:32:91:af:c4:ec:c7:66:5a:
80:86:bb:98:9a:01:24:64:14:67:42:8e:08:58:2e:
fa:01:fb:52:46:87:b7:1e:5c:e5:39:7a:8b:0a:4c:
68:c6:f4:b2:7d:0f:9e:4f:e0:7b:d4:e4:2f:5b:07:
f0:36:e7:7d:ae:59:a9:f3:5d:0c:1e:bd:81:7c:a6:
70:80:cb:31:b3:7c:11:cd:f7:55:6c:b3:b3:2e:c9:
a8:8a:42:3f:85:3f:d8:9d:5c:aa:d9:9a:51:a6:fa:
4b:9b:fb:f6:16:ee:0d:55:1b:5c:64:e3:06:87:fb:
15:fa:94:ff:6a:b0:02:6b:be:f6:ad:4c:d7:c0:d2:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B9:BB:63:48:13:23:3F:2E:9A:83:EC:06:00:00:1E:43:35:C6:C6
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/X7m7Y0gTIz8umoPsBgAAHkM1xsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.195.0/24
Signature Algorithm: sha256WithRSAEncryption
af:3a:c6:9c:1b:75:4b:19:54:00:49:ad:22:b8:32:2f:86:cb:
f4:d5:24:68:6c:ea:f0:49:40:46:60:45:1f:c7:7d:0a:c5:45:
6a:33:9c:ed:92:85:53:23:b5:cd:dd:15:34:ea:a0:09:a5:52:
8b:8d:c7:3c:9f:3b:ea:8f:d7:d3:08:da:f0:02:11:66:03:c8:
fa:b6:eb:17:e0:2d:39:e2:5b:7d:95:f4:4b:fc:22:a5:3d:db:
79:9c:1a:f9:b6:e2:36:a7:b3:13:99:58:ab:1b:b8:f7:56:ae:
2a:69:22:99:49:5c:c4:83:ec:17:22:ea:57:fa:a2:29:29:37:
1d:9b:41:a3:98:15:30:c9:b8:c6:db:b6:55:2f:6b:53:e4:a8:
b3:90:ec:45:d3:69:64:b9:6e:ef:d2:fa:e8:e2:f7:5f:b3:48:
52:ad:a4:1e:69:04:17:27:7a:b9:90:f5:cc:82:e3:5e:60:b6:
9e:67:25:ae:f3:1f:14:5a:84:cc:90:9d:59:c6:85:68:85:40:
49:78:d9:68:c4:56:ef:63:79:0b:88:f8:bd:c6:4e:28:37:ea:
e3:1b:8e:4b:df:e6:aa:f3:17:a1:13:49:a0:61:13:04:90:fa:
44:47:47:46:19:d0:eb:d6:4a:10:80:d8:17:ac:25:4b:5f:31:
6b:d6:c2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:46 2025 by rpki-client