Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-274bSiyaujxzT8UTrqDwGolvsQ.roa
File: 1-274bSiyaujxzT8UTrqDwGolvsQ.roa (raw, json)
Hash identifier: O/rdCMgJ5xCtB7VyqmZWMTDbfKtWpSWu9WrafzqCXiU=
Subject key identifier: FB:6E:F8:6D:28:B2:6A:E8:F1:CD:3F:14:4E:BA:83:C0:6A:25:BE:C4
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01960498442214A75938966317AFC9083F7B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-274bSiyaujxzT8UTrqDwGolvsQ.roa
Signing time: Sat 05 Apr 2025 06:16:49 +0000
ROA not before: Sat 05 Apr 2025 06:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.137.154.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.56.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 06:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:98:44:22:14:a7:59:38:96:63:17:af:c9:08:3f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 5 06:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb6ef86d28b26ae8f1cd3f144eba83c06a25bec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:66:ec:3c:0f:44:3f:31:4d:39:ce:8e:9f:
9b:78:5b:9a:97:4f:29:d4:a2:4b:10:eb:1e:d7:be:
4f:70:9b:11:89:b4:de:39:a7:f0:e0:70:a2:5a:8c:
bd:3a:14:71:78:6e:79:2e:c9:0a:c7:63:fb:9a:09:
3a:bd:ed:53:6f:a9:93:fa:d8:87:18:9c:ee:e4:0e:
6b:04:56:f9:0d:f9:b5:f7:59:ae:43:6e:09:40:c9:
4d:e4:44:c4:b2:96:a3:8c:62:05:95:d6:64:21:29:
59:d6:6c:88:74:34:f4:ef:d4:28:19:fe:21:e9:ab:
68:15:21:0b:da:9a:f7:c6:18:e0:39:17:15:68:ae:
42:b0:df:29:4a:99:fd:0a:e3:b0:c0:21:5f:1a:b2:
07:ac:b0:7c:7d:cf:75:3a:54:ae:f7:d5:19:2a:fd:
21:21:ba:1a:75:3b:69:bc:f2:e0:a8:da:3a:05:36:
66:0c:3a:5a:9d:19:32:af:26:6b:f8:77:a5:f8:b0:
f2:1f:20:ba:24:fd:da:96:66:47:c1:f3:c6:c9:70:
40:ed:07:12:7c:81:8e:5d:d6:f4:2e:0b:4f:9a:3b:
8c:8d:dc:74:88:c7:17:4d:c7:e1:78:8d:d8:f1:9e:
21:96:28:cb:ef:1c:50:d9:10:41:fc:36:a9:e1:39:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6E:F8:6D:28:B2:6A:E8:F1:CD:3F:14:4E:BA:83:C0:6A:25:BE:C4
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-274bSiyaujxzT8UTrqDwGolvsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.154.0/24
88.151.56.0/23
88.209.201.0/24
88.209.224.0/23
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:ff:91:31:9e:21:96:b7:ee:c1:f9:ad:8e:2e:b8:11:c6:f0:
5e:ee:4a:dc:16:7a:5f:c7:55:fc:a1:54:a4:c2:14:f8:a0:d0:
e1:9f:00:8d:e7:59:d6:49:58:16:ea:97:85:60:b3:47:98:91:
25:40:8c:90:90:21:9e:71:d3:30:92:24:c4:73:67:de:3a:bf:
93:85:5c:d1:9e:eb:99:6e:6a:05:95:65:68:71:80:f2:5e:35:
e9:70:1f:b2:03:70:82:d2:89:d1:a0:60:71:e4:e3:30:f9:1d:
07:f3:34:5f:20:8e:a7:02:6b:aa:08:42:45:0a:d9:73:37:f5:
50:1c:5a:42:d0:46:b3:d3:81:e5:00:98:13:c6:13:70:ba:6a:
e6:d5:25:93:d2:87:59:c1:85:dc:d5:7f:fc:13:33:d9:74:c1:
71:e8:d4:4f:1d:2b:d2:5a:be:28:93:e6:fd:56:89:ee:c4:96:
8a:90:09:f9:74:5b:42:6e:9b:1c:2e:f2:8f:96:e6:b1:9b:ae:
f0:ac:46:b3:59:f7:3f:54:4d:bf:6b:49:f6:23:11:81:d2:4b:
bc:f0:59:77:00:5b:82:92:56:ee:6b:97:a5:7d:7a:da:75:fb:
ac:7a:2e:8a:f1:07:d2:45:1e:94:ca:90:61:b2:41:52:75:fc:
37:85:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:22:50 2025 by rpki-client