Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/sRQYRnnzuRYMew64Zo3WTxaqePo.roa
File: sRQYRnnzuRYMew64Zo3WTxaqePo.roa (raw, json)
Hash identifier: xBvDjTLrr9D6A3nnT7B5fZqJns3zenmjYORH7vCFqJs=
Subject key identifier: B1:14:18:46:79:F3:B9:16:0C:7B:0E:B8:66:8D:D6:4F:16:AA:78:FA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0197AB40E0549768F9756EA81A47F4F9C8A0
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/sRQYRnnzuRYMew64Zo3WTxaqePo.roa
Signing time: Thu 26 Jun 2025 08:00:45 +0000
ROA not before: Thu 26 Jun 2025 08:00:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 27 Jun 2025 04:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:40:e0:54:97:68:f9:75:6e:a8:1a:47:f4:f9:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 26 08:00:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b114184679f3b9160c7b0eb8668dd64f16aa78fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:b9:59:d8:bc:3a:92:93:08:d6:f3:8c:c2:
13:ca:be:4d:83:de:8f:c7:c8:31:42:5e:81:54:ef:
25:1f:76:a5:97:9a:2c:73:ee:0c:2f:c2:e9:51:86:
06:b8:59:33:ce:bf:c4:d4:c4:58:04:f7:b6:a2:94:
41:51:13:00:36:9d:5d:63:c0:04:b3:37:17:e4:b9:
09:d2:20:c5:92:25:4d:f1:d2:0a:6e:0a:ac:f0:73:
42:e1:19:2d:c8:d1:74:76:5a:7d:98:b4:c2:d3:c3:
87:e5:59:bb:eb:b0:61:3b:c9:03:dd:4e:55:0d:9d:
62:b9:39:f1:27:5b:8f:14:d5:47:4a:63:93:b2:98:
6b:05:97:62:0e:65:89:e2:d8:6f:0d:1c:ea:34:cb:
18:f5:56:a6:5e:93:c8:c8:d0:17:c2:4a:5d:44:dd:
76:8d:61:d1:7b:fc:92:fc:9f:d7:32:f4:ee:6b:0c:
44:ff:66:ed:d9:be:7a:55:0e:b9:a8:55:75:44:22:
08:d0:08:52:30:1d:5d:5c:44:b7:ee:59:90:0f:f6:
11:cc:84:ef:30:24:10:72:20:79:c1:d9:41:ff:7c:
3c:d7:e5:7a:8a:4b:33:6e:e5:d6:d3:8c:72:ee:12:
70:95:b3:bb:31:5c:1f:ed:40:fa:0c:df:32:fb:aa:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:14:18:46:79:F3:B9:16:0C:7B:0E:B8:66:8D:D6:4F:16:AA:78:FA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/sRQYRnnzuRYMew64Zo3WTxaqePo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
4e:81:19:7f:f3:c1:89:c1:b0:5b:c5:37:79:b4:f4:5e:e4:29:
6b:34:d2:f0:21:64:10:6c:07:89:c9:8d:b5:8d:ae:56:b6:18:
2e:8b:0b:a3:ef:fa:71:ef:69:ed:47:5c:26:35:df:cd:a6:f1:
07:ec:96:de:ca:8a:90:ec:11:b4:26:6e:4e:47:8e:b9:3e:88:
bc:da:59:e3:81:14:7c:c7:60:8f:0d:44:a3:e7:71:ea:39:5a:
03:3b:16:07:0e:3a:bf:07:df:f4:2d:f9:71:b8:9f:11:f8:bc:
c0:72:ba:62:0d:85:62:86:97:00:95:c5:22:1f:ec:66:29:01:
4b:b1:80:fb:06:19:90:54:63:5e:2a:26:7c:39:07:19:9c:97:
dd:8e:65:8f:62:7d:b9:73:ee:ac:39:3f:f7:c7:58:ca:c6:7b:
dc:7d:66:b4:a7:b7:bf:77:c2:b4:21:f5:6c:c2:78:ec:5f:7c:
dc:88:b4:3e:69:4d:90:cc:e9:c0:5c:ba:c7:42:76:6e:fb:a6:
ad:39:9b:d5:03:19:f6:a9:be:9e:a4:d3:66:55:f6:22:20:45:
ab:49:b1:13:4a:2c:a5:e2:ed:11:fb:62:2a:11:c0:c2:78:3d:
f0:03:f6:eb:3f:33:b9:14:95:67:c6:a8:7e:ae:91:15:af:b1:
d5:d6:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:32:34 2025 by rpki-client