Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-e89ks1ko_viGvyw82tNsR6C5aM.roa
File: 1-e89ks1ko_viGvyw82tNsR6C5aM.roa (raw, json)
Hash identifier: 1gitPZ96AAOhXnaLslOk90NKFTy8zw785FvO1xZmBG4=
Subject key identifier: F9:EF:3D:92:CD:64:A3:FB:E2:1A:FC:B0:F3:6B:4D:B1:1E:82:E5:A3
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019E934C95E2C025579831912FC84B9B060F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-e89ks1ko_viGvyw82tNsR6C5aM.roa
Signing time: Thu 04 Jun 2026 15:42:10 +0000
ROA not before: Thu 04 Jun 2026 15:42:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.40.83.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 08 Jun 2026 06:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:4c:95:e2:c0:25:57:98:31:91:2f:c8:4b:9b:06:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 4 15:42:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9ef3d92cd64a3fbe21afcb0f36b4db11e82e5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:7a:99:7c:f1:31:e0:15:56:62:6c:18:d4:
aa:6e:a1:63:4f:2c:db:cd:aa:e3:df:f1:79:2a:10:
ab:d9:b3:e4:d8:d5:1a:65:04:33:cb:d2:13:97:bd:
b9:e9:69:14:54:ed:95:07:a3:08:a1:94:f7:5b:b8:
b8:80:a7:44:b5:ae:da:88:45:c1:80:02:a6:7e:96:
ae:69:cd:7c:bb:45:a5:06:0d:42:ac:b5:17:95:77:
1d:1c:4a:47:2d:9b:78:17:5f:c5:f9:a1:d4:61:1c:
48:ba:0e:4d:e7:f7:5c:dd:89:d0:e3:c2:3d:11:11:
8a:54:62:48:dd:5c:55:93:18:ea:57:ec:f7:7d:3d:
45:27:28:d1:09:14:59:91:af:25:a6:48:75:0e:ad:
f8:5d:15:a6:96:5f:0f:8c:76:d4:30:a9:41:e1:51:
41:7d:98:f6:50:ce:f0:d5:32:fa:60:e9:17:fc:a6:
d8:61:2e:ed:4b:0f:f0:56:0c:de:f6:c0:0d:21:d4:
58:b2:9d:5a:4c:9c:06:bb:62:81:87:c2:d4:00:28:
d8:b1:bb:fe:f0:c6:9b:4c:e6:71:1c:58:27:c6:7a:
83:99:a9:42:23:2d:22:ee:b2:5e:12:3b:92:eb:84:
1b:7e:7a:b0:e4:59:57:a4:34:12:11:81:2f:e8:e4:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EF:3D:92:CD:64:A3:FB:E2:1A:FC:B0:F3:6B:4D:B1:1E:82:E5:A3
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-e89ks1ko_viGvyw82tNsR6C5aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.83.0/24
89.42.82.0/23
Signature Algorithm: sha256WithRSAEncryption
35:aa:e5:af:ef:77:80:4a:cf:c6:be:64:f6:e3:51:78:4a:fe:
be:ea:67:88:aa:06:89:2b:82:a2:05:50:21:c6:dd:96:e5:56:
a4:87:2b:0d:31:ef:3c:8f:fd:04:12:7b:4c:52:53:d9:23:e9:
e0:6b:1b:e9:b7:7f:6c:7a:25:a5:ee:62:bf:c7:dd:64:ef:0c:
3d:9b:84:ab:c3:58:3f:dd:b5:ad:fe:60:20:67:97:1b:d4:e5:
cf:3f:01:a6:a2:ff:d9:61:7b:ed:64:99:eb:6d:04:a5:e7:eb:
60:e1:9f:d9:4c:b1:41:b8:54:da:ff:88:c6:ff:f5:db:eb:08:
fb:b2:9d:33:5d:00:2c:80:e5:db:36:e5:ea:ea:10:37:04:3b:
4d:0d:18:9e:46:19:95:44:c5:ca:34:d0:79:5b:ff:ca:ed:b0:
ed:ca:dd:56:1b:20:2a:3b:aa:62:1e:15:3a:e1:ea:4f:e5:15:
e0:f7:22:7b:4c:99:80:1e:28:6d:1d:9e:63:64:ec:10:f1:ab:
13:20:4e:77:10:94:39:ff:09:bb:ba:50:0e:48:d9:32:e6:2e:
e7:c6:9e:03:0b:95:ad:30:7e:2f:b5:e3:d2:d1:fe:33:71:17:
a8:8e:79:20:b6:c1:16:46:3c:1c:b5:ca:72:47:64:6c:35:79:
d3:46:ea:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:04:27 2026 by rpki-client