Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SvjfzTLO2_k7WGZ1vSZ-wKQ_RQY.roa
File: SvjfzTLO2_k7WGZ1vSZ-wKQ_RQY.roa (raw, json)
Hash identifier: I5JOJPKUxYYk5mzh6XMFAag6SAF9ey2fQrMQ7eylyAg=
Subject key identifier: 4A:F8:DF:CD:32:CE:DB:F9:3B:58:66:75:BD:26:7E:C0:A4:3F:45:06
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0197FD4F186A7F8D631D617114D652027F97
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SvjfzTLO2_k7WGZ1vSZ-wKQ_RQY.roa
Signing time: Sat 12 Jul 2025 06:25:08 +0000
ROA not before: Sat 12 Jul 2025 06:25:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 12 Jul 2025 14:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fd:4f:18:6a:7f:8d:63:1d:61:71:14:d6:52:02:7f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 12 06:25:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4af8dfcd32cedbf93b586675bd267ec0a43f4506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:24:b2:d2:85:e2:b4:63:17:44:9f:8b:e5:
21:c4:e2:66:ec:7e:ad:14:b3:36:31:14:d0:52:4c:
a6:c5:90:7e:23:42:c0:f1:31:a8:ad:a6:8b:c3:cb:
af:b0:c0:0b:94:4c:d5:ec:90:86:1b:f8:1b:b5:7d:
25:99:9c:bd:cf:1f:cd:b8:c1:b3:be:ef:eb:cc:41:
cf:d3:af:03:bc:df:20:c7:bd:16:58:9e:89:47:73:
3d:ad:26:2c:59:62:59:9a:ba:f4:25:ef:09:30:54:
52:b0:65:6f:af:fb:4d:50:5d:df:f2:62:40:a9:21:
57:c9:8c:6d:da:ea:a7:3c:7c:c4:75:1e:31:4d:58:
8b:bd:81:75:32:bc:cb:c6:98:19:d7:5e:f1:0c:9c:
d5:06:e7:b9:e5:59:2b:8d:29:fb:03:7a:74:c1:82:
bf:41:5e:c0:92:57:40:aa:af:6b:08:96:af:fa:3d:
89:9d:ca:24:15:51:2e:80:ad:9c:df:f5:70:9c:55:
a6:c7:21:f4:df:2a:10:d2:de:c8:0b:58:28:5a:21:
df:92:12:dc:4c:44:f6:db:56:51:03:3a:be:26:9f:
b6:c7:58:70:85:42:e7:5a:27:2f:96:b3:08:c9:9d:
5c:5d:49:76:09:89:f6:c4:86:3d:9e:f1:1e:aa:35:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:DF:CD:32:CE:DB:F9:3B:58:66:75:BD:26:7E:C0:A4:3F:45:06
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SvjfzTLO2_k7WGZ1vSZ-wKQ_RQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
6d:b0:5d:08:65:93:06:ac:3a:cb:6e:00:c6:40:6b:a0:47:c9:
ad:89:b9:6b:c6:3c:05:fc:f4:81:7d:fb:8a:66:0b:34:e9:6f:
87:e9:7f:7a:c9:46:84:20:16:a7:67:6e:ac:20:17:3c:04:0f:
15:c0:12:a4:ad:36:b1:af:0d:bc:9b:26:58:90:f4:8d:dc:8b:
c9:43:cb:39:8b:e5:35:bb:c9:bc:15:99:7a:e8:b0:ad:04:c3:
60:0d:77:05:9a:c3:e0:77:b1:2b:1f:d9:76:e2:9b:6e:ed:a1:
7f:97:b0:48:ad:e1:ac:86:9a:fc:da:d4:8a:0c:f9:38:e0:51:
d6:30:fd:3e:36:3f:17:3a:52:30:b5:9a:30:a5:ef:e9:ce:eb:
1d:49:f8:b1:cb:1f:0b:13:26:93:2f:02:bb:bb:33:07:a2:7d:
11:e5:92:00:93:be:28:65:66:e8:ae:af:d9:c9:77:4b:d4:3c:
b5:5f:57:6f:25:d1:b0:80:3d:df:a4:90:e6:2d:3d:71:3c:fd:
ce:52:05:7b:6b:ee:5a:e4:01:6c:3e:d3:39:d3:f2:0b:15:01:
f9:73:df:7b:37:4e:71:36:44:53:32:e8:3e:88:47:ce:b1:5e:
5f:84:1f:35:72:b0:0d:b0:6a:33:04:8f:b7:b5:82:2f:1d:c7:
3d:1c:a7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:15 2025 by rpki-client