Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cU8zm3PlVi4GgEQ-rFhy78_lzSA.roa
File: cU8zm3PlVi4GgEQ-rFhy78_lzSA.roa (raw, json)
Hash identifier: O2Ex6EZLkco9lco/X3i9NIb3rEhmlbxgOAy/zyShqlw=
Subject key identifier: 71:4F:33:9B:73:E5:56:2E:06:80:44:3E:AC:58:72:EF:CF:E5:CD:20
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019589520B6EE7F9DDA38F8F1CE8B503692B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cU8zm3PlVi4GgEQ-rFhy78_lzSA.roa
Signing time: Wed 12 Mar 2025 07:46:50 +0000
ROA not before: Wed 12 Mar 2025 07:46:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 13:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:52:0b:6e:e7:f9:dd:a3:8f:8f:1c:e8:b5:03:69:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 12 07:46:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=714f339b73e5562e0680443eac5872efcfe5cd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:2c:4f:da:b2:96:3f:63:fb:77:b9:d5:dd:
e0:e8:48:00:10:67:e2:08:ef:1f:09:8d:cf:17:73:
93:b4:23:12:f8:55:5a:5e:51:4d:3b:3d:7a:21:49:
6b:eb:ce:c1:a7:cb:7f:54:3c:93:f2:84:4f:15:9f:
8e:8c:a2:d6:b9:c0:9a:97:08:6c:4e:e6:15:0e:b7:
04:5a:b5:07:53:d2:16:68:3f:1b:55:a8:dd:37:b7:
df:7d:63:e8:c2:82:51:d9:51:a2:cf:68:e1:33:28:
4e:9f:b8:6a:fb:0e:7f:42:b4:3f:93:95:74:41:72:
b9:e3:5d:c3:04:75:f2:4f:34:fd:14:78:c4:d4:9b:
55:b0:ab:3b:6b:98:2f:20:34:4a:f2:e4:8e:95:9a:
25:2b:3e:b2:e0:9d:e2:ac:bd:44:48:35:09:f5:f0:
b4:7f:f2:9e:f2:1c:69:41:96:ff:9f:1f:82:37:e9:
7c:f0:ca:93:12:6c:90:6c:c7:78:1e:57:33:f5:a7:
4f:04:f9:8b:64:4e:a0:c5:c8:6c:56:4c:2a:61:43:
0b:34:1a:62:b7:a5:ea:1f:1b:a5:08:b0:0b:8a:3f:
b6:78:c6:06:dd:52:8b:6f:4a:83:04:ea:dd:e4:ad:
72:aa:17:94:ed:e5:b6:ac:cb:ce:23:7c:a1:ff:a7:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4F:33:9B:73:E5:56:2E:06:80:44:3E:AC:58:72:EF:CF:E5:CD:20
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cU8zm3PlVi4GgEQ-rFhy78_lzSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.221.0/24
88.209.224.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
74:46:8e:32:3a:30:2a:a7:68:ec:90:f5:f2:ad:6b:af:69:3f:
14:65:22:87:c2:f4:de:06:ae:b7:1c:fa:1c:93:c0:f7:e0:45:
57:03:b9:49:fd:df:bc:00:fd:16:35:9b:0e:73:85:45:ef:19:
cb:e0:dd:5d:1b:36:98:65:79:cc:cb:a2:86:67:cf:95:de:06:
87:96:03:0a:9c:59:be:e2:e4:58:ef:8a:83:0f:ea:92:85:f4:
15:4e:b2:af:0a:4f:99:c1:c0:c8:e2:07:32:8f:31:59:3a:96:
a3:91:6a:09:88:79:2b:d2:ea:30:31:80:58:49:74:50:9e:b7:
68:11:3f:0a:09:28:d2:73:ce:d6:d6:3c:3e:cf:4f:12:85:b7:
1b:67:e9:40:6e:c0:41:bb:0d:b8:f4:4a:45:fd:49:ef:78:04:
c8:05:56:8b:06:0d:bf:02:a9:31:1e:b9:b5:4d:77:d2:1b:7a:
d4:16:92:2c:4b:c0:19:af:99:b7:d5:ad:ed:68:6d:c0:36:46:
24:4e:b3:e2:a9:6d:58:d7:43:45:8d:6a:10:9d:40:0a:83:23:
58:af:42:8d:55:0d:0d:b0:d4:4b:22:54:e6:54:3a:20:d4:47:
67:69:cc:94:d2:0f:3e:ae:ae:cc:12:48:c5:26:b1:9a:ad:29:
8e:b1:46:66
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZWJUgtu5/ndo4+PHOi1A2krMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwMzEyMDc0NjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTRmMzM5YjczZTU1NjJlMDY4MDQ0M2VhYzU4NzJlZmNmZTVjZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YUsT9qylj9j+3e51d3g6EgAEGfi
CO8fCY3PF3OTtCMS+FVaXlFNOz16IUlr687Bp8t/VDyT8oRPFZ+OjKLWucCalwhs
TuYVDrcEWrUHU9IWaD8bVajdN7fffWPowoJR2VGiz2jhMyhOn7hq+w5/QrQ/k5V0
QXK5413DBHXyTzT9FHjE1JtVsKs7a5gvIDRK8uSOlZolKz6y4J3irL1ESDUJ9fC0
f/Ke8hxpQZb/nx+CN+l88MqTEmyQbMd4Hlcz9adPBPmLZE6gxchsVkwqYUMLNBpi
t6XqHxulCLALij+2eMYG3VKLb0qDBOrd5K1yqheU7eW2rMvOI3yh/6dnFwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHFPM5tz5VYuBoBEPqxYcu/P5c0gMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvY1U4em0zUGxWaTRHZ0VRLXJGaHk3OF9selNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBWJc4AwQA
WNHdAwQAWNHgAwQCWNHoMA0GCSqGSIb3DQEBCwUAA4IBAQB0Ro4yOjAqp2jskPXy
rWuvaT8UZSKHwvTeBq63HPock8D34EVXA7lJ/d+8AP0WNZsOc4VF7xnL4N1dGzaY
ZXnMy6KGZ8+V3gaHlgMKnFm+4uRY74qDD+qShfQVTrKvCk+ZwcDI4gcyjzFZOpaj
kWoJiHkr0uowMYBYSXRQnrdoET8KCSjSc87W1jw+z08ShbcbZ+lAbsBBuw249EpF
/UnveATIBVaLBg2/AqkxHrm1TXfSG3rUFpIsS8AZr5m31a3taG3ANkYkTrPiqW1Y
10NFjWoQnUAKgyNYr0KNVQ0NsNRLIlTmVDog1EdnacyU0g8+rq7MEkjFJrGarSmO
sUZm
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:04 2025 by rpki-client