Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ey8lxp089_VJRLPplfd2z7GepnU.roa
File: ey8lxp089_VJRLPplfd2z7GepnU.roa (raw, json)
Hash identifier: Bx/aeOzfg5dSUGC3zW0Br5YY2Zt6irnecdmKrtuNWJc=
Subject key identifier: 7B:2F:25:C6:9D:3C:F7:F5:49:44:B3:E9:95:F7:76:CF:B1:9E:A6:75
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019575434D99819AC92AE167A9FD7736C8B1
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ey8lxp089_VJRLPplfd2z7GepnU.roa
Signing time: Sat 08 Mar 2025 10:18:19 +0000
ROA not before: Sat 08 Mar 2025 10:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.204.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 07:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:75:43:4d:99:81:9a:c9:2a:e1:67:a9:fd:77:36:c8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 8 10:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b2f25c69d3cf7f54944b3e995f776cfb19ea675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:82:86:ca:ab:a0:b8:80:cc:f3:34:f1:86:
2e:d4:f3:f9:0a:82:a3:6e:65:53:73:b8:ff:68:fe:
87:05:86:9f:7d:2e:c7:7f:ba:3d:77:9f:f2:b2:8f:
01:5f:fa:08:f7:48:2f:6b:49:a1:7e:4e:7e:36:ef:
79:4e:ef:ec:b9:81:d1:e3:26:f8:f6:22:2d:e5:a4:
66:dd:e5:75:ce:1c:43:c3:4e:5d:82:e5:bc:e7:e6:
d6:03:a9:33:cf:62:89:43:4a:d5:82:02:2f:53:fc:
c6:de:4b:93:a0:ba:13:6f:57:f2:30:ec:9f:18:8d:
3a:15:a8:e8:3e:6e:41:03:b9:0e:07:ae:2b:6c:e6:
ef:a9:bc:ce:d5:31:4b:48:cc:fb:9a:37:cc:f0:50:
e4:73:a4:72:f6:27:f0:cc:bb:bd:47:53:8e:37:cd:
ab:b6:d2:82:8e:5c:c7:ff:9c:60:93:f8:9f:c3:04:
13:3a:ee:9b:cd:37:71:11:ef:30:81:ba:e2:42:1f:
07:01:97:d3:be:5a:d4:84:3c:0d:cd:d5:20:20:54:
51:f0:8a:5f:2c:e5:92:93:d7:97:96:87:e9:66:4a:
a4:10:ad:48:b5:21:ad:a1:06:aa:92:c2:04:df:a0:
2e:c4:81:41:e9:bd:54:c2:27:55:f1:90:18:d0:0b:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2F:25:C6:9D:3C:F7:F5:49:44:B3:E9:95:F7:76:CF:B1:9E:A6:75
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ey8lxp089_VJRLPplfd2z7GepnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.204.0/24
88.209.221.0/24
88.209.224.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
76:e2:b5:88:33:2a:1f:35:4d:f8:91:56:3b:4f:61:d9:56:52:
37:ce:a8:f9:aa:7c:7d:33:80:80:75:5b:3b:fc:fe:c2:07:7f:
40:1a:66:2d:87:7a:02:01:f3:94:61:f9:a0:c5:23:75:e9:4e:
96:86:b9:8a:ab:06:88:cc:b7:24:b3:3f:85:32:b5:1e:9c:c9:
6f:79:88:29:20:33:74:4d:9e:bf:a2:6f:05:30:ce:ed:d8:7a:
33:95:ce:a3:fe:5b:2c:d9:15:49:c5:c8:ec:6b:4d:ea:18:8b:
2f:cf:f6:45:a4:0b:12:a1:4c:f0:0d:6e:44:eb:ab:4e:7a:4a:
e5:d6:66:83:21:80:5b:e5:43:c0:f1:96:76:4b:bb:55:5e:00:
26:47:8b:6c:05:f1:19:0c:dd:d7:a8:18:96:d7:c6:1c:4c:a2:
aa:bf:70:22:a2:62:a6:c4:c0:d3:28:32:14:76:f0:5a:a2:34:
39:2e:94:cf:ec:77:cd:68:20:d6:03:b8:bd:b5:18:83:f9:39:
06:29:60:79:33:24:49:1c:3c:96:94:5e:d7:0a:48:ac:a9:fc:
c1:9e:bf:79:07:cb:55:cb:31:73:a9:9a:25:40:92:de:73:86:
da:75:cc:11:68:24:06:9c:c1:37:2e:a1:eb:bd:83:77:23:d9:
bd:c1:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:47 2025 by rpki-client