Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/SKSIj9WAiKqY9X4uHjId8sySuEU.roa
File: SKSIj9WAiKqY9X4uHjId8sySuEU.roa (raw, json)
Hash identifier: 7UHhZeG1WqT0Ue3E1WCn8v0ECezaWVIGfZgVvdQS+ZU=
Subject key identifier: 48:A4:88:8F:D5:80:88:AA:98:F5:7E:2E:1E:32:1D:F2:CC:92:B8:45
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0195C1DE5B62CDCE332B1A22202F951B63BD
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/SKSIj9WAiKqY9X4uHjId8sySuEU.roa
Signing time: Sun 23 Mar 2025 07:18:49 +0000
ROA not before: Sun 23 Mar 2025 07:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.242.150.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.56.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Mar 2025 08:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c1:de:5b:62:cd:ce:33:2b:1a:22:20:2f:95:1b:63:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 23 07:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48a4888fd58088aa98f57e2e1e321df2cc92b845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:a2:d4:1f:d6:d6:01:b4:df:1d:33:64:e9:
99:0b:8c:ad:ba:94:65:1b:79:6e:68:66:a9:d5:d4:
8f:3a:0f:1b:27:80:0e:11:26:fd:32:bd:98:5d:5c:
a4:c1:7d:9a:f0:04:ec:54:18:65:80:c3:2d:52:00:
11:d2:85:fb:1e:c5:98:82:43:db:6b:b8:2c:a4:1f:
f9:02:14:4d:ab:fb:d2:29:c4:a4:fd:b0:58:e4:8b:
cb:d6:0e:c4:e2:88:58:7f:83:5c:64:58:9d:22:1c:
09:49:6b:60:f4:98:c9:e7:66:b8:ed:75:ec:83:44:
a1:23:da:4c:c9:7f:19:ba:10:c6:8e:37:56:17:e9:
42:6e:a7:20:ca:55:37:a9:b4:e7:77:dc:d0:9e:e7:
41:ae:fd:e2:28:9b:da:99:f3:b9:f3:f2:b4:8e:19:
cb:88:ef:17:01:f5:e5:f8:f2:6d:f1:17:89:b7:73:
9a:73:c8:66:96:a2:da:ab:e9:36:e9:16:83:74:46:
7b:9e:36:ac:30:68:fb:02:32:7f:1c:c5:6c:e6:e8:
55:b4:86:3a:9a:e7:81:a2:2d:12:0c:c1:79:85:18:
c0:9b:2e:03:12:fa:8d:0e:97:9c:b2:0a:a8:f2:a3:
df:c0:91:b2:0c:44:e7:77:32:b2:89:6f:b8:6c:6b:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A4:88:8F:D5:80:88:AA:98:F5:7E:2E:1E:32:1D:F2:CC:92:B8:45
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/SKSIj9WAiKqY9X4uHjId8sySuEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.150.0/24
88.151.56.0/23
88.209.224.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
08:e9:5a:52:71:69:e1:52:2d:2a:1d:50:42:30:07:54:2b:26:
f8:73:c4:3a:11:92:7c:14:d4:ee:50:18:5a:2d:8b:8a:95:29:
9b:8c:24:25:b9:e5:52:35:5c:a2:fc:22:ea:78:cc:c8:44:0b:
08:a0:6a:90:64:b2:ac:5f:9a:26:85:b5:a3:2c:5e:67:ea:6e:
cb:99:1b:22:bf:62:46:47:14:f1:9e:8a:1b:98:fe:2a:01:5b:
ea:ba:1a:4c:35:9d:5c:19:d1:2e:e8:23:9b:42:e7:87:0c:47:
ce:6c:84:6c:81:41:c3:c1:6f:f6:d8:76:e4:eb:e3:aa:77:a7:
5a:79:5c:28:38:d3:3f:eb:19:b7:02:8c:90:19:b1:78:f8:ce:
73:96:d5:9b:ad:b3:61:b8:59:3c:9e:b0:2e:c1:c7:d5:0f:86:
85:7c:f6:07:0b:dc:ad:29:a3:e7:2d:d5:89:f5:e3:75:47:0c:
41:1d:e1:1e:54:55:5c:81:75:72:f3:be:5b:1a:de:88:0f:66:
5f:b3:c8:9f:bb:85:bf:ab:69:7c:06:56:25:57:c8:2d:6b:c3:
2a:2e:5e:c9:06:37:58:96:d4:e2:86:55:78:97:53:58:85:55:
7e:b7:a6:49:04:fe:c2:55:42:f9:31:48:9e:76:88:91:ab:f3:
1c:e1:92:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:28:46 2025 by rpki-client