Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_Fq2lxkIOJES0AZNYzcX34bxOt8.roa
File: _Fq2lxkIOJES0AZNYzcX34bxOt8.roa (raw, json)
Hash identifier: dPnl3jyqmtbdBPcixs37p0RzNTdM+bQbf6g83MYSGIg=
Subject key identifier: FC:5A:B6:97:19:08:38:91:12:D0:06:4D:63:37:17:DF:86:F1:3A:DF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0195C4EEF746B0B0419CE6985DE4BAD9E0B6
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_Fq2lxkIOJES0AZNYzcX34bxOt8.roa
Signing time: Sun 23 Mar 2025 21:35:49 +0000
ROA not before: Sun 23 Mar 2025 21:35:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.242.150.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.56.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 17:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c4:ee:f7:46:b0:b0:41:9c:e6:98:5d:e4:ba:d9:e0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 23 21:35:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc5ab6971908389112d0064d633717df86f13adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:5b:14:78:ce:18:32:ab:0b:fc:2f:d8:00:
2d:de:72:2a:51:7d:10:aa:d7:da:c4:f6:67:2f:ea:
c8:e9:84:d8:13:af:ed:f5:44:c5:f1:3b:29:58:de:
30:78:a2:5f:04:31:46:95:e5:23:96:b4:69:ab:6b:
68:ab:1b:0b:6a:e3:18:2f:fd:7f:07:40:a1:24:8d:
f2:6a:30:fa:54:c1:d4:61:63:ba:65:48:0c:7f:21:
9e:1b:b0:65:83:46:1a:b6:12:86:f8:0b:e2:a8:ce:
61:11:4f:cd:f9:78:6f:af:67:d2:1c:d4:0e:25:a8:
c2:68:83:95:1d:52:5f:61:58:d7:06:1f:59:dd:24:
1d:c7:53:62:ad:a3:e3:51:48:89:0e:02:d4:e7:c8:
b0:03:64:19:b9:d1:82:22:fe:ba:8d:80:6f:aa:f0:
ea:d0:44:d2:ae:4a:83:ba:80:03:66:aa:26:20:f6:
22:5b:70:16:36:12:14:c0:ce:71:0e:51:a6:5d:4e:
02:1d:e3:98:96:ce:31:bf:75:b9:67:fc:b7:71:0e:
03:76:ad:77:ee:17:0a:7c:ab:c9:99:63:e1:84:4a:
f4:c2:f5:63:c3:52:c4:8c:ee:a5:6c:4e:ac:81:82:
d7:ca:e4:88:a5:14:36:52:c8:f6:e6:40:4c:ec:2a:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5A:B6:97:19:08:38:91:12:D0:06:4D:63:37:17:DF:86:F1:3A:DF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_Fq2lxkIOJES0AZNYzcX34bxOt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.150.0/24
88.151.56.0/23
88.209.224.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:bb:35:f6:3e:a4:9b:a7:7e:1b:6f:d9:04:62:32:c8:32:da:
0e:72:e9:32:4b:e2:7e:f1:5c:92:1d:e8:0f:04:fb:35:52:88:
e3:79:86:2f:6f:34:b6:ad:3f:e8:b4:72:e0:87:b7:15:7a:18:
e3:20:90:2f:77:f3:80:65:a8:e7:92:c0:f3:95:ca:96:fd:50:
25:cd:f3:0c:0a:01:b1:ce:72:5b:86:e5:14:4a:cd:b0:c9:dd:
ff:6c:5b:d9:77:40:2f:b8:0d:c5:6c:b7:1f:6f:52:a4:6c:fb:
6f:93:46:07:21:52:c2:b6:bc:93:18:8e:11:d0:e7:d0:98:58:
dd:d4:2b:36:c8:01:34:f8:51:e3:50:f5:83:ed:c6:39:c5:10:
e6:7c:b2:4d:28:69:05:9e:14:78:b5:5e:1f:b7:a9:a2:ea:e8:
c7:ee:64:9f:30:19:12:d6:19:21:c3:8a:83:39:a0:81:c7:49:
13:4e:0e:24:a9:3c:81:f5:93:41:87:87:41:b8:31:c2:90:86:
92:0f:21:d4:21:a4:ee:b6:f1:36:a9:19:d7:7f:9f:37:29:83:
ad:74:ed:97:1b:4e:ee:2f:e9:43:9a:cd:cb:87:97:75:bd:1d:
70:36:5e:51:cc:f4:da:a2:6a:b9:f6:69:83:6a:fe:19:ae:7a:
29:45:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:14:26 2025 by rpki-client