Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/asn_ooQAVRRX0KDGANML7QeHF-8.roa
File: asn_ooQAVRRX0KDGANML7QeHF-8.roa (raw, json)
Hash identifier: 3CUce6UdSngwZVZnaZpKs4JToi0fxo6B6Z5ZdnC2iTA=
Subject key identifier: 6A:C9:FF:A2:84:00:55:14:57:D0:A0:C6:00:D3:0B:ED:07:87:17:EF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019654A87D6360E99DD89C883A0B873627DE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/asn_ooQAVRRX0KDGANML7QeHF-8.roa
Signing time: Sun 20 Apr 2025 19:24:10 +0000
ROA not before: Sun 20 Apr 2025 19:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.137.154.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 07:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:a8:7d:63:60:e9:9d:d8:9c:88:3a:0b:87:36:27:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 20 19:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ac9ffa28400551457d0a0c600d30bed078717ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:85:7c:fa:83:75:8a:d7:50:51:db:1b:97:
eb:f5:b8:9d:5d:30:11:bc:7f:f0:70:a9:21:aa:fc:
34:af:47:44:01:25:75:df:b7:b0:2d:da:5e:d8:0a:
ba:be:68:b0:4b:38:98:eb:64:90:33:07:ae:19:33:
6c:ba:8a:27:1d:b9:26:44:4c:72:6c:94:85:a4:29:
15:d4:1c:58:4d:00:39:3c:bd:3d:4c:27:f8:09:00:
71:9a:c5:23:e6:74:50:0e:ed:88:75:ac:60:b4:6b:
37:cc:10:66:f9:f9:e7:c9:76:e2:fd:e6:df:20:0c:
ab:80:13:2c:9e:ee:83:cc:ca:5b:41:78:19:84:9a:
e5:c7:66:57:3b:1e:1c:4e:34:24:0d:e4:78:3f:71:
06:29:18:bd:e8:62:8e:d8:1d:f1:14:e0:e0:72:05:
68:8a:66:4b:46:7f:14:ff:e7:f9:a8:00:d3:e9:b6:
a1:a7:84:a2:7a:c2:07:bb:55:fc:81:e0:7f:78:e6:
63:01:0e:f9:51:1b:39:17:4e:1e:5e:db:40:50:da:
1a:20:5f:9e:9c:30:89:61:14:89:e7:b7:15:29:c3:
95:d5:49:4a:28:24:fb:cb:2e:b2:d3:61:22:9a:f6:
b2:39:ac:71:60:f9:73:ed:c6:f5:07:ad:88:a2:ba:
8a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C9:FF:A2:84:00:55:14:57:D0:A0:C6:00:D3:0B:ED:07:87:17:EF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/asn_ooQAVRRX0KDGANML7QeHF-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.154.0/24
88.151.56.0/23
88.209.195.0/24
88.209.201.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
46:ce:f6:43:58:d9:38:3d:b2:bf:da:8e:bc:96:3b:79:48:b8:
2c:cf:81:0e:db:2e:a9:f0:d8:4c:34:c4:b9:a6:7b:b4:ea:79:
cd:7f:01:24:f6:43:f9:19:7a:bf:b9:63:ab:a9:91:56:2b:4f:
f3:27:a4:24:92:c1:2b:7c:f0:54:ab:af:ab:45:09:87:29:95:
66:9a:eb:b3:cd:a7:94:3b:df:97:3a:d4:18:ef:80:ce:6c:d0:
1f:ad:9c:1e:3a:90:c3:35:d6:15:17:58:b2:ff:05:0f:af:d8:
d2:35:06:55:ef:ca:11:b4:9a:0d:a7:6f:6b:5c:2c:eb:d4:6c:
f4:4a:cc:e8:eb:cd:98:2e:ab:ec:15:aa:8c:69:0a:3f:b4:27:
85:54:7b:58:66:42:52:78:2c:a8:20:61:c6:b6:f8:24:53:fc:
3d:2f:e5:6b:49:2c:4e:0e:2a:7d:03:b8:68:d7:37:88:51:69:
7d:d0:16:05:96:8a:5f:cd:b5:8b:1f:d7:f8:1b:26:c7:8e:d9:
6b:3c:89:03:95:e2:9a:5c:70:6d:26:1d:6b:71:4c:b2:d4:f6:
ef:9f:5a:d4:b3:60:a2:ec:fb:d5:07:5c:11:72:81:9f:02:1a:
e1:7c:92:63:7f:28:fd:fd:03:14:a7:d4:e5:0d:cd:e3:9e:ba:
30:71:ec:84
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZZUqH1jYOmd2JyIOguHNifeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwNDIwMTkyNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWM5ZmZhMjg0MDA1NTE0NTdkMGEwYzYwMGQzMGJlZDA3ODcxN2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg+FfPqDdYrXUFHbG5fr9bidXTAR
vH/wcKkhqvw0r0dEASV137ewLdpe2Aq6vmiwSziY62SQMweuGTNsuoonHbkmRExy
bJSFpCkV1BxYTQA5PL09TCf4CQBxmsUj5nRQDu2IdaxgtGs3zBBm+fnnyXbi/ebf
IAyrgBMsnu6DzMpbQXgZhJrlx2ZXOx4cTjQkDeR4P3EGKRi96GKO2B3xFODgcgVo
imZLRn8U/+f5qADT6bahp4SiesIHu1X8geB/eOZjAQ75URs5F04eXttAUNoaIF+e
nDCJYRSJ57cVKcOV1UlKKCT7yy6y02EimvayOaxxYPlz7cb1B62IorqKOwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGrJ/6KEAFUUV9CgxgDTC+0HhxfvMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvYXNuX29vUUFWUlJYMEtER0FOTUw3UWVIRi04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAU4maAwQB
WJc4AwQAWNHDAwQAWNHJAwQCWNHoMA0GCSqGSIb3DQEBCwUAA4IBAQBGzvZDWNk4
PbK/2o68ljt5SLgsz4EO2y6p8NhMNMS5pnu06nnNfwEk9kP5GXq/uWOrqZFWK0/z
J6QkksErfPBUq6+rRQmHKZVmmuuzzaeUO9+XOtQY74DObNAfrZweOpDDNdYVF1iy
/wUPr9jSNQZV78oRtJoNp29rXCzr1Gz0Sszo682YLqvsFaqMaQo/tCeFVHtYZkJS
eCyoIGHGtvgkU/w9L+VrSSxODip9A7ho1zeIUWl90BYFlopfzbWLH9f4GybHjtlr
PIkDleKaXHBtJh1rcUyy1Pbvn1rUs2Ci7PvVB1wRcoGfAhrhfJJjfyj9/QMUp9Tl
Dc3jnrowceyE
-----END CERTIFICATE-----
Generated at Fri May 2 06:18:52 2025 by rpki-client