Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/3iRaW0Rn4SazhvcHuSeira79RqY.roa
File: 3iRaW0Rn4SazhvcHuSeira79RqY.roa (raw, json)
Hash identifier: Z6Hngo/eXtup1u7CCzqOu8/jMB6wYpmhy7LZxNjj0nc=
Subject key identifier: DE:24:5A:5B:44:67:E1:26:B3:86:F7:07:B9:27:A2:AD:AE:FD:46:A6
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6BD8C6EF5774963832221C43E065B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/3iRaW0Rn4SazhvcHuSeira79RqY.roa
Signing time: Wed 01 Jan 2025 21:47:43 +0000
ROA not before: Wed 01 Jan 2025 21:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 89.47.114.0/24 maxlen: 24
93.114.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 08:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:bd:8c:6e:f5:77:49:63:83:22:21:c4:3e:06:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de245a5b4467e126b386f707b927a2adaefd46a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:cf:7e:9b:aa:47:1f:13:00:f1:60:de:cd:
96:43:8a:c0:8b:ca:5a:1c:0a:36:e0:31:ce:99:08:
ac:cc:8d:5f:ff:44:4d:0c:9e:37:e8:19:6d:30:45:
7f:ba:cb:fa:52:af:fd:26:e1:bb:08:46:85:dd:40:
2a:19:0b:ed:c0:0f:5c:57:94:2b:11:41:cb:5e:ee:
4c:cb:c2:12:8e:0b:26:8c:94:24:9d:2a:41:fa:9c:
58:19:24:42:3b:3a:a5:57:88:33:cd:83:06:a0:ba:
5e:26:7f:a3:90:ad:4d:7d:f0:34:c6:a8:47:8a:8e:
57:f5:df:b4:af:e8:c4:d3:a0:97:d0:76:11:f5:a5:
e1:a6:23:49:c8:8c:2d:b4:4d:8f:45:25:b5:4f:65:
b7:36:e2:72:38:e7:8e:b1:57:d4:42:4f:ff:cf:61:
ed:1f:cb:bd:2e:50:9e:30:b5:41:d5:90:89:c7:e6:
36:a1:1c:e1:65:4c:a1:ae:86:9e:55:c7:10:ff:1b:
13:cf:8e:b4:d9:94:42:41:b9:a6:aa:c4:bb:4c:ab:
14:c8:5b:96:c8:8c:d2:e3:e1:e9:79:7f:72:49:cf:
78:ec:a0:20:77:c7:56:e1:fa:0a:20:58:08:87:14:
80:70:d2:cf:ce:ee:a6:6d:a2:67:05:b6:c1:f9:05:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:24:5A:5B:44:67:E1:26:B3:86:F7:07:B9:27:A2:AD:AE:FD:46:A6
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/3iRaW0Rn4SazhvcHuSeira79RqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.114.0/24
93.114.73.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c0:85:9c:a4:19:9a:13:4c:63:1e:1d:7c:30:80:00:c3:2e:
af:8b:e9:50:af:b6:95:09:5b:aa:24:fe:05:84:32:75:c1:b3:
f4:bf:48:0c:b6:4b:05:b3:1c:84:de:cc:20:6c:e7:2e:89:be:
e2:ba:b9:38:e5:c8:4f:94:63:90:3e:12:56:f7:f0:ac:98:f1:
d2:45:c0:e5:5a:75:6f:2e:dd:ec:2f:bd:e5:46:c7:9e:8d:5b:
59:a7:59:88:91:46:07:10:99:a8:1a:f2:d1:05:f8:2a:96:1c:
cb:b6:e3:46:dc:bc:c8:56:aa:59:cb:16:7a:fa:f7:0b:9b:7a:
a8:74:bb:03:59:6e:c0:f2:7d:a6:4a:c5:24:fe:d7:8c:dd:3f:
af:1e:52:5f:84:86:0c:4a:58:c1:d4:f4:6d:77:cf:44:fa:73:
2e:1c:18:5e:da:b5:59:63:15:aa:6e:bb:2a:b3:a9:90:d9:1e:
2c:c4:8c:42:34:a6:11:a6:3f:e2:72:d4:fa:26:c5:62:b6:d9:
3b:6e:6d:3b:d9:db:db:e3:85:e8:b9:54:89:5c:67:0d:73:69:
87:72:d3:27:bb:43:85:36:76:e7:63:6b:d8:d7:eb:88:62:27:
1f:88:df:92:bf:2c:26:1b:1e:73:3d:62:91:0a:d8:70:e0:f2:
a3:d0:86:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:27 2025 by rpki-client