Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/mXlEGE-P0A8GZgU5RDBpcpoM5W4.roa
File: mXlEGE-P0A8GZgU5RDBpcpoM5W4.roa (raw, json)
Hash identifier: amz5p/Pi4mWjLR6xRpPY/eEh41M3iDA9gQiVgZDHmn0=
Subject key identifier: 99:79:44:18:4F:8F:D0:0F:06:66:05:39:44:30:69:72:9A:0C:E5:6E
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0197FEFF39B88D0211BFB4B5B0806FB5BD80
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/mXlEGE-P0A8GZgU5RDBpcpoM5W4.roa
Signing time: Sat 12 Jul 2025 14:17:08 +0000
ROA not before: Sat 12 Jul 2025 14:17:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.33.193.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 17 Jul 2025 16:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:ff:39:b8:8d:02:11:bf:b4:b5:b0:80:6f:b5:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 12 14:17:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=997944184f8fd00f06660539443069729a0ce56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:74:bb:08:bb:00:ff:e2:75:02:76:26:d4:
e6:f4:e3:fd:af:56:8e:ab:fd:aa:8e:3d:75:09:2c:
a6:5b:4b:ac:ea:58:a5:2a:e0:24:7b:aa:2a:18:74:
b7:db:82:db:74:15:5c:f0:d5:8f:d5:d5:f3:2d:e9:
e1:ef:65:aa:12:a5:2f:00:ec:3f:b8:a5:30:c1:29:
41:a2:7d:01:f7:2a:bd:b0:84:10:20:fb:4f:60:d9:
98:37:a2:4d:2c:76:f3:73:81:53:5b:8d:02:1c:d2:
7d:ce:e4:8b:ee:a7:a5:d3:b2:9e:97:55:2c:44:e4:
c7:73:83:03:e5:a6:02:43:6f:f2:79:62:7b:00:ef:
fa:38:35:d0:eb:6c:88:33:aa:bc:ab:19:b5:2b:b6:
4a:22:95:fe:34:15:74:7b:5c:7d:fa:8c:fd:90:d8:
a1:18:6e:09:f9:70:e9:54:22:fc:46:22:70:5f:5a:
50:c9:47:67:4b:bf:a0:54:f4:26:d1:a6:c8:58:cb:
c2:9d:ec:ee:30:90:76:95:ec:7b:d0:5a:87:8c:0c:
74:21:ab:bf:3c:c7:8f:79:2b:55:7e:81:80:d4:84:
15:ea:7f:84:ec:a0:15:49:e3:d1:95:d3:92:85:1d:
a6:a3:fc:85:d2:83:5a:2b:2a:55:c0:cf:a5:cc:80:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:79:44:18:4F:8F:D0:0F:06:66:05:39:44:30:69:72:9A:0C:E5:6E
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/mXlEGE-P0A8GZgU5RDBpcpoM5W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
61:ab:3c:ed:00:d4:22:d5:0a:18:6c:01:38:da:6a:57:b8:b6:
95:78:fd:ab:5b:24:ab:1f:4e:c7:b6:46:df:2d:e9:33:7e:cb:
8c:65:b4:18:f4:85:ea:f7:ec:5e:c5:eb:b3:5f:31:d2:8e:e7:
4f:ae:54:08:4b:9c:60:31:b8:16:48:16:b6:a4:9c:ba:aa:74:
14:a9:ad:c8:33:ca:08:8d:f2:d4:56:ee:e4:c6:c8:88:86:20:
c0:38:3a:40:8a:80:6a:b2:27:8a:4b:79:02:00:d9:07:1c:18:
80:a4:c6:2e:af:d7:fe:31:fd:5e:2e:d9:e1:46:b3:d9:9f:6f:
c2:51:bb:26:6f:38:bb:b9:f5:55:49:4c:f7:08:e9:71:dd:b7:
1b:8a:da:46:dc:a4:07:71:58:7c:df:7b:58:42:b2:d3:0d:79:
44:70:be:f5:42:7f:76:45:60:de:46:02:de:5d:7f:f2:3d:18:
e1:79:54:c5:91:d2:b9:d9:dd:55:4e:09:dc:02:9f:6c:04:64:
93:e5:c0:50:90:86:4b:12:77:db:7f:b1:4e:f4:62:7c:a2:ad:
e2:2e:9f:57:6d:66:40:a9:9d:26:11:5e:70:90:31:e5:34:1c:
f4:f7:b9:c5:52:3b:b1:f2:81:98:6f:58:1d:01:cf:45:84:c4:
02:e2:e9:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:28:14 2025 by rpki-client