Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/4OU1Dd8PtZB3uWQbc_4u1bF3dBY.roa
File: 4OU1Dd8PtZB3uWQbc_4u1bF3dBY.roa (raw, json)
Hash identifier: 3lCgHZBwCqnQ3+90qhS6CHuiulGENt5M2v8aaEO8uC0=
Subject key identifier: E0:E5:35:0D:DF:0F:B5:90:77:B9:64:1B:73:FE:2E:D5:B1:77:74:16
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 019395AD1AC79CC8B22BEDA09BEAF4C9F8B4
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/4OU1Dd8PtZB3uWQbc_4u1bF3dBY.roa
Signing time: Thu 05 Dec 2024 07:16:09 +0000
ROA not before: Thu 05 Dec 2024 07:16:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22351
IP address blocks: 88.151.225.0/24 maxlen: 24
88.151.226.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:ad:1a:c7:9c:c8:b2:2b:ed:a0:9b:ea:f4:c9:f8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Dec 5 07:16:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0e5350ddf0fb59077b9641b73fe2ed5b1777416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:2c:84:ea:ef:c1:16:38:e8:d8:23:85:f6:
42:25:97:dd:0b:0f:99:8d:34:0f:82:b0:0e:08:26:
d7:d0:bf:0a:cc:22:08:91:6d:b4:53:ab:07:1c:d6:
23:33:0a:08:42:e7:ce:b1:ae:19:98:98:af:a4:fa:
91:83:2f:5b:e9:d4:ff:d9:32:90:8e:35:8f:d7:6c:
6e:65:d3:e3:eb:27:49:cb:ae:97:a6:65:fa:34:cf:
9b:1c:1d:5e:80:34:35:11:df:bf:30:09:0a:7e:0c:
5a:42:f1:60:47:3c:c8:a8:e7:c9:67:38:46:00:63:
14:8e:c1:2c:23:d5:9f:14:5e:21:13:a4:8e:9a:21:
f3:60:cb:3e:9e:4b:92:84:1f:e9:98:a8:ed:92:b6:
49:49:ca:3b:a4:1f:78:e4:4e:ca:b3:95:13:7d:62:
fd:a7:ac:14:20:a4:a8:86:e6:f1:bf:d6:77:e3:37:
31:73:67:f2:9a:e2:70:ce:5a:3a:e2:6f:f2:d6:2c:
c4:1b:e5:45:9b:b7:15:ce:f7:47:62:eb:ce:6b:5d:
8b:a7:10:1b:8c:c1:10:0f:c4:de:a3:fa:d6:62:4c:
4f:e7:a7:ad:f1:4e:5f:0a:66:dc:90:18:e4:81:2a:
b9:b2:22:3e:3d:aa:2c:18:32:c2:00:c7:eb:da:33:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E5:35:0D:DF:0F:B5:90:77:B9:64:1B:73:FE:2E:D5:B1:77:74:16
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/4OU1Dd8PtZB3uWQbc_4u1bF3dBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.225.0-88.151.227.255
Signature Algorithm: sha256WithRSAEncryption
6b:91:c3:d9:f5:ae:cf:8f:e0:e2:69:4e:61:3a:b9:a1:ce:75:
fc:69:44:4a:d3:4d:dc:91:b4:ca:6b:9f:7e:38:cf:14:a2:5b:
91:b9:b1:57:19:75:54:4d:40:09:c6:b4:e1:be:fd:f9:69:2a:
bc:bf:ad:e3:71:a7:05:8d:28:51:f5:94:9a:50:53:ec:33:c8:
3a:d8:56:fa:58:aa:4a:44:fe:b8:68:9b:fa:b7:f7:78:9f:8e:
13:4b:80:3d:42:38:41:e8:6b:2c:62:d8:e6:02:a1:48:9c:09:
6d:5a:3b:9d:7e:a3:6d:10:2c:78:5d:ea:79:3f:8e:b3:d9:35:
86:00:87:94:3d:76:22:83:13:6c:da:ba:da:6c:60:99:91:1d:
07:d8:ac:90:26:51:d3:ba:89:fd:31:2c:70:f8:1a:02:aa:c3:
3c:86:9f:5f:e3:ff:4e:c9:2f:ff:6c:bf:a1:5c:c9:02:01:30:
0c:b1:5c:8a:71:79:69:2d:a6:f2:88:25:d1:32:f0:84:bb:9c:
05:b7:ff:a7:31:65:86:49:de:32:02:da:ec:03:e9:96:4d:e3:
a3:d3:de:1c:0d:d5:b1:25:b9:bd:3c:c9:86:91:75:cf:28:34:
23:a4:52:cf:7f:1e:c6:ef:09:f2:61:88:38:04:7d:2f:58:39:
98:3a:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:08:59 2025 by rpki-client