Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZNnjG3Bag5EjMXsfNTY1FUfSXRs.roa
File: ZNnjG3Bag5EjMXsfNTY1FUfSXRs.roa (raw, json)
Hash identifier: /agJ22UQc/6YkkaA2AcGwpEy3l687Z7V/3W2YFXoxPY=
Subject key identifier: 64:D9:E3:1B:70:5A:83:91:23:31:7B:1F:35:36:35:15:47:D2:5D:1B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0193720462C7E6335C675DE240E0F3CFFDDB
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZNnjG3Bag5EjMXsfNTY1FUfSXRs.roa
Signing time: Thu 28 Nov 2024 09:05:10 +0000
ROA not before: Thu 28 Nov 2024 09:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:04:62:c7:e6:33:5c:67:5d:e2:40:e0:f3:cf:fd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 28 09:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64d9e31b705a839123317b1f3536351547d25d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:06:fb:22:4b:0d:a6:50:01:a9:63:0f:97:20:
c5:4f:25:c5:95:92:86:fe:96:68:87:40:63:bf:65:
29:52:60:df:37:51:34:ca:55:83:6f:1e:b0:90:10:
f3:70:11:3e:c4:e6:76:c0:24:73:cf:27:df:0d:6e:
a9:52:33:a6:18:c2:99:39:f2:54:f4:91:f7:80:8c:
e1:b2:9c:6f:f7:a4:e2:46:eb:14:fe:ce:46:e7:3e:
49:dd:d4:b7:7a:85:f5:7e:e2:7a:d0:76:68:38:9e:
13:e3:8a:7a:2d:b4:a6:94:80:90:98:0e:33:c4:5c:
7f:2f:2b:ae:07:a8:c6:81:f6:7f:94:77:cf:c2:73:
12:66:b2:7d:3a:d5:46:22:f2:79:db:37:0f:49:98:
fa:e5:68:0e:86:4f:e8:19:d9:b8:42:c9:ad:63:ed:
95:72:19:98:2a:d5:a8:1a:ae:50:53:23:e5:10:81:
44:12:f5:28:84:32:db:d0:44:cc:21:50:d5:54:fc:
87:14:33:7d:df:8e:96:7d:a1:71:08:2e:7c:44:55:
b9:67:50:fb:46:9c:7d:ed:6c:0f:e7:4a:8f:aa:7b:
1b:d9:2e:12:d7:4a:7c:ab:d5:95:77:b5:8e:77:86:
1e:1a:60:46:d9:06:f2:df:fd:53:f9:e1:bf:56:52:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D9:E3:1B:70:5A:83:91:23:31:7B:1F:35:36:35:15:47:D2:5D:1B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZNnjG3Bag5EjMXsfNTY1FUfSXRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:39:af:8e:42:7d:90:bc:72:b7:1d:03:41:9c:99:37:9f:27:
86:2f:5e:ca:26:58:61:ad:63:ba:92:6d:32:cc:6b:42:98:b1:
55:84:c4:ad:8b:68:9e:fb:a0:02:c7:b4:5b:96:31:47:57:7a:
17:df:3a:70:ec:45:07:4a:e0:0f:39:ff:59:1b:7e:ff:d1:53:
16:06:b4:b1:7a:c8:1c:0e:f6:23:1c:83:fc:9c:4c:d1:ef:f4:
4e:2a:77:3c:bd:c6:89:23:27:de:a5:98:31:90:cd:c7:cb:a2:
ec:d3:bb:c5:3b:38:38:7d:20:60:af:d7:20:bc:6a:df:03:7e:
0f:e1:44:23:da:fc:49:35:b4:27:b7:a6:02:a2:f4:fc:11:81:
4f:9c:11:45:fe:1e:f5:a1:a1:f9:75:a7:3e:8a:19:da:43:88:
86:dc:99:a9:81:61:8b:7d:9b:25:06:13:a1:cb:5f:5a:47:0f:
81:c9:da:01:de:60:e9:72:88:33:e9:44:3d:26:73:bf:08:97:
86:f3:b2:57:e4:bc:49:39:2b:69:ae:e4:6f:83:61:81:54:cf:
4b:79:56:58:d6:05:0d:1f:40:a3:18:59:07:61:b6:78:25:e8:
1b:0b:3f:79:2c:22:31:40:1c:32:05:5d:66:15:ce:53:8c:c2:
64:5c:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:09:54 2025 by rpki-client