Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/dMtOhmgoeL8_qfLqiEcRI8SUChU.roa
File: dMtOhmgoeL8_qfLqiEcRI8SUChU.roa (raw, json)
Hash identifier: gpZPIehQd7ADLfaWNEFwG5/uKzAe7y+2fD9U4VylZl8=
Subject key identifier: 74:CB:4E:86:68:28:78:BF:3F:A9:F2:EA:88:47:11:23:C4:94:0A:15
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0194F157F3D19CB9B1322D8895BC59846050
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/dMtOhmgoeL8_qfLqiEcRI8SUChU.roa
Signing time: Mon 10 Feb 2025 19:31:00 +0000
ROA not before: Mon 10 Feb 2025 19:31:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 07:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:57:f3:d1:9c:b9:b1:32:2d:88:95:bc:59:84:60:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 10 19:31:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74cb4e86682878bf3fa9f2ea88471123c4940a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:6a:2e:1a:1a:d3:3d:e5:04:4f:fb:c5:b5:
75:a0:ba:2a:2f:fc:f7:89:3b:a9:fb:e1:11:01:f9:
74:7c:04:36:bd:4b:a9:01:5f:67:e3:28:6e:48:91:
5a:dc:91:8d:8d:eb:99:b3:d6:ac:8f:0f:64:95:23:
18:d6:7d:36:5f:42:ea:2d:ea:5e:32:80:dd:58:67:
a6:29:07:c5:67:35:9e:8e:ae:ac:03:5e:50:e1:2a:
45:70:50:60:ed:df:69:28:01:40:d2:55:67:3d:df:
d5:21:4e:80:0b:a4:a5:96:0c:48:6b:fc:10:ac:08:
7f:13:2f:ef:3c:1d:32:a3:c2:65:8a:e3:16:84:da:
7d:64:f4:e9:27:c6:30:7b:fd:69:fd:61:f6:5e:f5:
c7:e3:81:05:15:dd:60:84:f4:ff:a7:ac:f7:07:0b:
c9:9b:d5:f0:be:f9:8e:fb:a0:f2:68:c5:72:96:b6:
c4:90:bd:15:46:e8:05:7e:45:ba:d5:9f:aa:57:1f:
40:88:e8:35:5f:69:32:bd:64:09:8c:fc:d5:30:05:
01:d2:ec:b3:ee:4c:88:9a:5b:4e:f6:37:12:3b:42:
29:bd:d2:8d:90:8e:8a:0e:c6:59:42:77:be:d2:f2:
80:95:c4:09:4f:2f:c4:6d:c8:df:71:24:d0:40:67:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CB:4E:86:68:28:78:BF:3F:A9:F2:EA:88:47:11:23:C4:94:0A:15
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/dMtOhmgoeL8_qfLqiEcRI8SUChU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
20:bb:0c:3f:99:ed:d7:e8:73:d8:48:17:5f:a1:ca:c7:12:87:
dc:17:e6:89:7a:08:bd:c8:4b:78:2f:af:a3:d0:a3:93:a6:cc:
fd:24:5c:a0:71:19:5e:e4:01:74:3d:f6:c4:7c:64:bc:53:50:
8b:17:f7:44:6f:9a:fb:e2:f3:da:cd:27:38:55:47:d8:fc:e1:
c2:48:07:ad:71:76:fa:a5:07:e5:55:dd:6f:40:a9:7b:83:fe:
bc:13:ec:54:6d:fb:20:a6:81:ef:be:00:73:f7:45:b6:5b:0b:
1b:01:98:69:cd:a2:7d:c0:dc:ac:fb:bc:fa:ba:f7:e4:3c:47:
f5:9a:52:79:3a:4a:e7:84:5e:9e:9f:c2:88:a8:be:dd:aa:5c:
e6:e9:2c:bc:c4:7f:3e:d2:a6:38:3e:19:1e:20:6e:60:d8:99:
f7:8e:34:28:76:c3:d8:0d:af:3a:3f:46:f3:3b:32:08:a1:14:
cd:c0:86:0a:8a:4a:29:01:71:a9:c5:6e:0c:e2:53:f2:27:8b:
62:db:e5:c5:51:63:d0:cd:14:19:cb:1f:0e:5c:a4:1e:af:92:
e8:6d:e8:cb:06:4e:0c:fe:ab:c3:c8:d6:91:21:34:05:cf:a5:
48:8a:f6:e0:39:83:ca:4b:85:b1:a1:39:d5:ac:8e:8a:a3:42:
a1:93:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:16:50 2025 by rpki-client