Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Zw1-ghWVOZsNGBWl1FW2kKsYWkE.roa
File: Zw1-ghWVOZsNGBWl1FW2kKsYWkE.roa (raw, json)
Hash identifier: TZsBwp9WeqszZz25UiiV2D5oY+EhWG6hZJp4xBYt+EM=
Subject key identifier: 67:0D:7E:82:15:95:39:9B:0D:18:15:A5:D4:55:B6:90:AB:18:5A:41
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0197AFBCE89ED5147227A7D3C637097C05D1
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Zw1-ghWVOZsNGBWl1FW2kKsYWkE.roa
Signing time: Fri 27 Jun 2025 04:54:42 +0000
ROA not before: Fri 27 Jun 2025 04:54:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
93.113.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:af:bc:e8:9e:d5:14:72:27:a7:d3:c6:37:09:7c:05:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 27 04:54:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=670d7e821595399b0d1815a5d455b690ab185a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:64:0a:fb:00:f2:32:22:f7:41:ad:35:0b:
0a:61:c5:0a:9b:5d:26:d7:8e:15:94:0a:2c:a8:9a:
fc:28:ca:4f:ee:c6:cf:f1:d0:b8:62:7e:99:47:f9:
dc:9b:f9:81:0d:34:b5:9e:e5:7a:a5:42:e7:2b:fb:
3c:d7:ba:f5:72:91:9c:a3:82:f5:13:5d:c8:28:a8:
66:cb:a8:d6:42:27:4d:d7:92:34:3f:30:79:14:ba:
3c:91:81:4d:eb:9a:9f:e2:86:ab:57:f1:a4:c0:f7:
18:a4:f8:47:5d:43:9c:16:30:82:11:57:de:ab:15:
0e:bd:5c:3a:f1:01:63:f0:4b:09:b0:43:15:aa:5c:
93:83:f4:ba:63:5a:8a:ac:98:53:39:8c:9d:22:79:
ad:c4:f0:2b:23:94:da:34:c0:74:05:9b:36:a5:d8:
79:74:cb:45:4d:bb:77:fb:b0:4e:20:8c:c3:9c:a2:
36:c8:d7:a1:66:de:a9:11:3c:d9:29:2e:b5:5e:5c:
08:88:af:c1:2a:8c:a8:fb:85:53:4a:bd:92:e3:0c:
3b:1e:8f:e6:6e:d3:e4:55:ec:3d:c2:23:45:96:3f:
6b:3b:93:31:08:34:e8:5d:44:9b:15:ae:85:89:6c:
c8:9d:f2:03:70:df:a6:02:51:2c:c3:a9:10:ad:71:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:7E:82:15:95:39:9B:0D:18:15:A5:D4:55:B6:90:AB:18:5A:41
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Zw1-ghWVOZsNGBWl1FW2kKsYWkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
93.113.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2d:0d:2f:53:85:c6:fd:fa:c5:a3:4a:bc:19:23:13:68:16:
ce:c4:b4:56:0d:b5:67:8c:e2:1e:58:82:bb:f9:20:5d:79:95:
a5:d4:db:d5:16:8a:95:7e:56:64:ab:7a:26:28:01:b2:fc:5c:
c9:50:a4:6e:08:d4:29:36:4e:8c:d9:70:c9:f2:fa:3b:a3:22:
b5:24:8b:86:03:0a:d3:b8:b3:4d:05:d2:22:e6:e2:c5:8e:02:
da:00:62:f2:bb:bb:e1:2c:14:32:82:c2:26:18:e3:0a:88:2a:
d9:db:43:19:a9:07:5e:1a:e2:b6:22:61:f1:23:47:cb:f0:3a:
19:10:8a:60:b8:7e:d6:ec:96:24:f7:d0:c6:9a:d4:01:0f:6a:
97:9c:f5:c6:93:76:6f:02:be:dc:ec:c4:c3:fd:3a:d5:77:66:
67:53:47:ef:bd:26:c3:3e:19:65:0a:a2:77:45:7b:1c:fb:23:
7e:1b:d0:05:77:92:7a:74:a6:62:8a:12:75:64:3c:41:b9:6e:
86:ab:95:4a:fb:db:97:44:5b:3a:44:05:b6:63:d1:f2:bc:c9:
84:83:93:3a:81:49:4e:e1:7b:1a:9e:a8:3b:ed:2d:68:79:42:
1b:b3:a1:96:d1:ab:fe:f2:2b:02:c9:58:ca:7a:57:1f:17:69:
8a:15:04:9a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZevvOie1RRyJ6fTxjcJfAXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwNjI3MDQ1NDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzBkN2U4MjE1OTUzOTliMGQxODE1YTVkNDU1YjY5MGFiMTg1YTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyNkCvsA8jIi90GtNQsKYcUKm10m
144VlAosqJr8KMpP7sbP8dC4Yn6ZR/ncm/mBDTS1nuV6pULnK/s817r1cpGco4L1
E13IKKhmy6jWQidN15I0PzB5FLo8kYFN65qf4oarV/GkwPcYpPhHXUOcFjCCEVfe
qxUOvVw68QFj8EsJsEMVqlyTg/S6Y1qKrJhTOYydInmtxPArI5TaNMB0BZs2pdh5
dMtFTbt3+7BOIIzDnKI2yNehZt6pETzZKS61XlwIiK/BKoyo+4VTSr2S4ww7Ho/m
btPkVew9wiNFlj9rO5MxCDToXUSbFa6FiWzInfIDcN+mAlEsw6kQrXGHnwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGcNfoIVlTmbDRgVpdRVtpCrGFpBMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvWncxLWdoV1ZPWnNOR0JXbDFGVzJrS3NZV2tFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABZKlED
BAJZKlADBABdcbMwDQYJKoZIhvcNAQELBQADggEBAHwtDS9Thcb9+sWjSrwZIxNo
Fs7EtFYNtWeM4h5Ygrv5IF15laXU29UWipV+VmSreiYoAbL8XMlQpG4I1Ck2TozZ
cMny+jujIrUki4YDCtO4s00F0iLm4sWOAtoAYvK7u+EsFDKCwiYY4wqIKtnbQxmp
B14a4rYiYfEjR8vwOhkQimC4ftbsliT30Maa1AEPapec9caTdm8CvtzsxMP9OtV3
ZmdTR++9JsM+GWUKondFexz7I34b0AV3knp0pmKKEnVkPEG5boarlUr725dEWzpE
BbZj0fK8yYSDkzqBSU7hexqeqDvtLWh5QhuzoZbRq/7yKwLJWMp6Vx8XaYoVBJo=
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:33:48 2025 by rpki-client