Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/wHbRdwap8gBwkDRjCZTDQYWeFtI.roa
File: wHbRdwap8gBwkDRjCZTDQYWeFtI.roa (raw, json)
Hash identifier: 6W9B8hmyfwoZSWQ1b+naR82JjZYUhWcg8ZUu7kXWPlM=
Subject key identifier: C0:76:D1:77:06:A9:F2:00:70:90:34:63:09:94:C3:41:85:9E:16:D2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0194DF4FF43651BE2F389991C4996C7EA361
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/wHbRdwap8gBwkDRjCZTDQYWeFtI.roa
Signing time: Fri 07 Feb 2025 07:29:06 +0000
ROA not before: Fri 07 Feb 2025 07:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 19:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:4f:f4:36:51:be:2f:38:99:91:c4:99:6c:7e:a3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 7 07:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c076d17706a9f200709034630994c341859e16d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:78:70:6f:11:db:de:48:e9:fe:94:33:35:
a2:3e:ab:8c:ac:8e:67:01:03:78:dd:7b:d6:ea:33:
c2:90:c5:86:33:d9:cb:c6:94:eb:bc:41:84:2b:ee:
4d:ce:de:3a:32:18:d1:a3:38:10:2e:f0:19:36:b5:
9a:8e:c9:7d:aa:e1:2c:f2:0a:e6:49:56:bf:ee:e5:
3e:c1:6b:c9:b4:41:bc:5f:2b:cf:d3:3a:f6:6b:71:
28:21:19:82:33:81:cb:ca:2e:d7:c1:43:49:c4:ab:
20:2d:c9:8f:fe:5b:30:1f:85:8f:2b:90:97:2e:96:
cf:8d:3b:3a:a6:e6:19:98:78:a7:9f:e5:d0:25:fe:
ef:5b:f9:72:76:59:f1:76:a2:a3:9b:e4:c3:f0:0e:
28:7a:d9:99:d0:90:0f:d6:d0:42:f3:61:0c:14:15:
00:cf:69:63:33:56:6a:f9:d2:a3:56:c5:5e:40:c2:
1b:ca:dc:a2:34:65:5c:65:41:39:d8:c8:03:ad:25:
71:b7:d6:62:fb:0d:54:71:d4:68:44:08:2f:6b:c5:
4c:17:3c:4a:7e:37:d0:2f:1e:ba:58:54:22:be:f9:
2a:89:e9:93:c5:d4:12:6b:7a:15:b5:a8:4f:42:3b:
fa:43:6c:49:21:7b:c0:bf:93:62:b1:f9:6f:df:78:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:76:D1:77:06:A9:F2:00:70:90:34:63:09:94:C3:41:85:9E:16:D2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/wHbRdwap8gBwkDRjCZTDQYWeFtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.201.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
13:6e:a8:d9:b9:ea:3e:c7:da:14:08:52:9c:22:33:c2:95:47:
53:86:a5:84:44:d2:9f:b7:c0:2e:73:f5:60:50:b9:4a:98:68:
8c:f4:37:fc:17:a3:0f:a9:5d:d5:17:9e:18:7f:d3:45:32:6d:
9b:18:bd:19:fa:f6:b8:9f:4a:aa:46:46:c5:7d:c7:1e:7f:57:
3c:c0:4b:90:f8:06:05:a4:6b:88:80:4d:54:94:d1:04:a2:39:
91:99:96:3d:b6:d6:1a:ae:a6:13:39:05:89:d0:18:97:27:24:
b1:b9:7a:da:da:ea:a6:94:ce:38:be:7f:00:1b:98:5e:5a:aa:
b1:46:d4:e3:13:8a:98:06:e7:28:84:a8:47:87:16:25:0a:74:
80:c7:29:51:d8:ad:66:28:43:e3:9a:1a:42:17:a8:53:65:e7:
52:c7:d2:f7:99:fb:f8:08:76:b7:f0:db:5f:5c:f4:68:fd:e7:
09:62:dc:10:65:94:7e:4c:1c:0a:ec:20:39:65:da:ee:6f:aa:
d9:e0:30:4b:a2:3c:73:7a:31:36:6b:36:24:2f:a2:f7:50:2f:
09:8e:1c:d5:ec:29:99:c6:2c:df:22:9f:d3:20:ab:2f:77:fb:
0e:0f:ce:7b:b5:f0:2f:11:5a:22:1f:32:43:fd:c0:f1:81:03:
1b:5c:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:37 2025 by rpki-client