Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/XvA9UOjrt9pGb1EZ432E9JM9ZJI.roa
File: XvA9UOjrt9pGb1EZ432E9JM9ZJI.roa (raw, json)
Hash identifier: 2e//wYO2ix9ANkaRnwPBP8yU9hxmhUIMk2oLqemV/EM=
Subject key identifier: 5E:F0:3D:50:E8:EB:B7:DA:46:6F:51:19:E3:7D:84:F4:93:3D:64:92
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0194CC0A2D3B8124CDF0F9DDB3B23592DAED
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/XvA9UOjrt9pGb1EZ432E9JM9ZJI.roa
Signing time: Mon 03 Feb 2025 13:40:06 +0000
ROA not before: Mon 03 Feb 2025 13:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 88.209.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 14:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:0a:2d:3b:81:24:cd:f0:f9:dd:b3:b2:35:92:da:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 3 13:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ef03d50e8ebb7da466f5119e37d84f4933d6492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:ac:a9:6e:7d:39:1d:27:3a:3e:46:9c:c9:
5f:f2:f6:ba:77:1d:16:93:dc:4e:7f:f4:66:13:42:
39:25:c7:52:79:b1:8b:41:b8:21:c3:d1:22:f7:cb:
d8:04:1f:db:eb:d9:51:2e:6d:21:15:43:06:8b:48:
c2:ba:a6:fc:a2:5f:2f:8a:c0:8d:02:f3:3e:aa:fb:
b0:ac:28:3b:5a:32:db:3d:66:50:65:12:57:c1:bf:
34:06:e0:44:c9:b3:f5:ab:2d:ac:4b:cd:98:8b:6c:
81:1d:66:01:62:d6:c9:6f:ce:ea:da:88:61:1c:12:
89:f7:aa:9f:1a:a5:6c:e8:80:27:99:0a:65:d4:81:
46:1e:df:bb:b2:d0:39:ac:7d:20:65:96:1c:6b:34:
16:d3:ed:5d:70:88:82:6a:73:57:22:c6:44:67:98:
d4:b0:eb:fd:de:ac:3e:96:f5:b6:a1:22:cd:af:ba:
e3:ea:4c:4f:f8:2c:b0:1e:a9:e3:64:df:77:8b:8d:
e0:ac:b2:38:01:44:e9:d6:91:14:7e:49:de:09:2a:
3a:2a:6b:0b:2a:2a:7b:a5:06:32:19:e9:8b:01:5e:
a5:83:bb:66:86:69:2e:74:d9:22:c3:b8:4c:14:5c:
73:e2:58:62:67:6c:25:da:02:16:48:c3:e2:17:dd:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F0:3D:50:E8:EB:B7:DA:46:6F:51:19:E3:7D:84:F4:93:3D:64:92
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/XvA9UOjrt9pGb1EZ432E9JM9ZJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.249.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8a:c8:37:f0:d6:08:cd:0b:bd:cc:bd:ed:83:0a:bc:03:22:
15:6e:ea:94:7d:bc:00:b2:0c:22:1b:a1:33:48:fc:5b:49:c4:
ee:ff:c3:ad:86:39:f4:f8:16:b3:94:2c:e1:19:84:27:fc:71:
e4:80:6d:d5:85:81:84:b8:34:d3:ed:10:13:c1:61:39:37:61:
c5:3e:ff:0f:c8:09:d2:79:a6:e3:6f:b3:be:7c:85:ff:a2:80:
29:61:1f:67:c4:a6:6e:af:81:5c:68:ef:55:27:71:e0:57:87:
6c:54:62:b9:e2:a5:3e:4e:e1:59:27:92:5b:96:8d:10:8c:3d:
52:27:8d:8b:e8:94:03:c3:53:c8:28:80:93:15:cc:45:32:f9:
86:61:6a:5c:ff:a4:9b:17:d6:b2:d8:92:dd:57:77:b4:f2:83:
bd:ea:7c:52:b1:72:8a:8b:b1:49:a6:9d:cb:14:93:1a:87:2a:
00:23:7a:aa:45:d0:59:cf:da:21:8b:18:17:b0:0b:f0:64:60:
0a:45:25:19:e3:03:bd:b5:f1:e3:99:ae:75:cd:17:97:5c:b9:
eb:fc:9e:ae:3f:0c:b3:81:cc:3c:e3:7c:e7:45:3b:2a:2a:17:
69:de:5c:40:ad:29:ad:3d:65:c4:b1:b5:3b:5f:82:eb:df:9e:
1a:ad:1f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:27 2025 by rpki-client