Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BhUSCqslQlr5yHmfL1S4uFuKJBA.roa
File: BhUSCqslQlr5yHmfL1S4uFuKJBA.roa (raw, json)
Hash identifier: 2KyqEwgwSVt8CHZrbFRnTbsfF2vAb32vN9D78M37S2Q=
Subject key identifier: 06:15:12:0A:AB:25:42:5A:F9:C8:79:9F:2F:54:B8:B8:5B:8A:24:10
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01955B90539094A49B8351FCE2DD828ED159
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BhUSCqslQlr5yHmfL1S4uFuKJBA.roa
Signing time: Mon 03 Mar 2025 10:32:19 +0000
ROA not before: Mon 03 Mar 2025 10:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:90:53:90:94:a4:9b:83:51:fc:e2:dd:82:8e:d1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 3 10:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0615120aab25425af9c8799f2f54b8b85b8a2410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:13:17:5a:32:fc:04:ab:e4:ad:00:e7:a3:
e2:67:d4:f6:bd:ab:f1:35:bb:4b:84:34:d9:cd:67:
4c:d7:29:b3:0d:3a:fd:6e:ba:67:72:43:7d:0a:4b:
ae:29:6b:f2:70:bc:91:2c:d3:6c:e3:c2:6a:20:d1:
ad:99:ee:44:98:99:a7:bc:de:59:c9:61:57:48:23:
77:1d:62:2e:c0:ff:5d:1e:d0:8e:bc:bf:21:9b:3d:
a7:09:14:1a:e3:d8:4d:f2:3f:0c:ce:bb:f1:80:35:
be:d0:af:54:ac:8b:71:ca:d5:ec:13:73:0e:53:14:
e6:8d:c6:93:7e:21:2f:35:16:87:44:a5:90:5d:fc:
3d:fc:3d:88:53:07:aa:d3:b2:fb:de:76:88:48:eb:
7b:d2:ca:3d:ae:83:b0:04:be:32:a3:e6:e4:84:6d:
4a:80:26:2d:ff:ea:ed:8d:33:f7:74:55:68:7f:f9:
ea:10:3c:87:e5:bb:08:cd:41:cf:41:3f:81:3f:56:
96:a2:10:2d:4d:35:83:ea:9f:84:9f:95:dd:09:a0:
e3:7c:21:ee:fa:ff:d7:22:b6:b4:e2:23:2d:56:c5:
d4:99:53:25:27:3d:f6:56:6d:c3:7e:b1:c8:a2:bb:
77:69:e4:bf:3f:05:16:cf:06:3e:b4:a6:c3:da:44:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:15:12:0A:AB:25:42:5A:F9:C8:79:9F:2F:54:B8:B8:5B:8A:24:10
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BhUSCqslQlr5yHmfL1S4uFuKJBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
62:10:37:25:ce:a2:d7:ea:02:53:5f:e7:1c:87:e8:cf:13:f5:
27:cf:a0:56:94:17:dc:cb:46:7f:e9:92:14:0e:0d:82:40:49:
45:9d:52:70:af:fd:bd:44:5a:09:1c:67:cb:4d:ae:8f:03:d4:
74:3a:fc:66:8e:00:21:ca:18:6c:0e:a5:7a:61:e1:63:60:ba:
69:f8:75:2a:12:53:a9:08:5b:ef:a2:ec:2d:85:b6:47:07:cf:
53:ea:70:e5:e7:48:9f:30:a7:d5:d5:b6:0b:6d:43:ec:f5:20:
16:04:a2:6f:01:90:bc:16:d5:4f:54:13:a3:01:77:72:46:15:
1f:b2:3a:6c:ff:f4:89:b4:87:1c:a1:63:f8:41:98:bc:bb:79:
7e:33:28:66:b0:31:9e:22:04:99:70:dc:d8:c8:e0:95:8b:91:
e9:5d:81:66:8f:cd:5b:37:ca:12:af:54:53:5d:78:ba:a9:15:
fc:85:0d:88:55:7a:60:aa:31:d8:17:0b:c8:5a:81:93:ba:4d:
5c:96:b9:eb:25:de:c0:db:43:eb:bd:46:c7:da:b5:b1:f8:43:
f6:70:10:94:1b:cd:55:77:60:83:71:62:19:d1:a3:e4:97:5d:
fc:f5:c2:ad:26:71:9d:13:c6:04:be:37:7e:31:3b:b0:50:df:
3c:9a:8f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:37 2025 by rpki-client