Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J4CXn0CySa1UFe1xwsE0FeZGYyA.roa
File: J4CXn0CySa1UFe1xwsE0FeZGYyA.roa (raw, json)
Hash identifier: W+lPcLk/slY2cXNNbdyu+jboEVRy9um+61XQsFODX5A=
Subject key identifier: 27:80:97:9F:40:B2:49:AD:54:15:ED:71:C2:C1:34:15:E6:46:63:20
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01949757E1D2AFD85727171F287BF50FE981
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J4CXn0CySa1UFe1xwsE0FeZGYyA.roa
Signing time: Fri 24 Jan 2025 08:05:06 +0000
ROA not before: Fri 24 Jan 2025 08:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
93.114.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 16:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:97:57:e1:d2:af:d8:57:27:17:1f:28:7b:f5:0f:e9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 24 08:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2780979f40b249ad5415ed71c2c13415e6466320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3f:dc:70:aa:58:71:ef:92:4e:46:38:76:f3:
dd:d6:31:a1:c0:74:7f:83:37:02:9b:3f:de:47:28:
26:4a:1b:8c:3b:46:59:d6:0f:fb:47:71:57:af:42:
52:c1:6e:4c:9d:54:be:3a:a7:19:2d:02:82:11:47:
7a:2e:f1:45:c0:42:53:6e:0e:e5:d5:7b:7e:fe:22:
20:8b:14:f9:93:bb:b0:a0:19:46:cb:2f:8c:90:33:
6a:2c:cf:27:f1:d7:58:ab:e7:93:e6:45:fe:0f:15:
de:13:3d:7c:f4:00:c9:dc:22:2a:86:04:2c:b3:46:
4d:40:55:1a:bd:d8:4a:91:0a:1b:e2:b1:e7:22:f5:
91:42:ea:28:19:2d:9b:6e:63:71:06:ee:45:ca:f8:
8d:38:4e:1d:7d:a2:13:19:ff:ef:2b:09:ff:15:63:
de:3b:22:57:9e:5b:b6:4f:47:bf:95:2b:b7:ec:7c:
93:3e:29:a7:a5:f8:2f:f2:80:23:0f:ff:0e:4f:f9:
22:7c:76:0b:ad:7d:60:4e:33:49:0d:3f:16:b8:c8:
bf:93:dd:c2:0e:a8:d5:b1:d1:e8:36:89:df:6c:98:
52:11:5d:57:88:3a:c6:01:8c:2e:7b:a3:e8:ac:70:
de:75:5c:74:f5:75:01:10:07:aa:02:38:cd:eb:14:
3c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:80:97:9F:40:B2:49:AD:54:15:ED:71:C2:C1:34:15:E6:46:63:20
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J4CXn0CySa1UFe1xwsE0FeZGYyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
93.114.88.0/24
Signature Algorithm: sha256WithRSAEncryption
62:77:f2:07:52:11:51:6a:5c:a5:ad:b5:94:75:61:92:6a:db:
c6:b2:f5:d6:f2:f4:b1:a7:cd:f0:10:27:ea:32:ce:4d:da:10:
08:49:41:db:c0:af:a8:8d:0e:71:26:14:4f:e3:60:6f:a0:b6:
81:dd:f5:98:13:19:f3:61:fa:5b:10:be:c6:ef:c8:ad:86:a5:
97:f1:d3:10:c7:e3:e1:76:09:ab:80:e0:ea:c3:50:33:08:07:
4d:1c:3d:3a:d6:0e:4b:52:c3:f6:52:bc:e5:dc:fc:f1:4c:be:
22:51:0a:00:5b:fa:0a:45:9f:56:cb:8a:df:ae:9f:bc:ef:04:
90:fd:4d:f5:8e:98:e6:d1:1b:90:7c:92:5e:d3:fa:ae:7f:c0:
71:96:a9:42:72:af:bb:e6:b3:ad:dc:c2:26:dd:80:49:6f:dd:
37:87:1a:8f:43:c8:65:ac:50:37:2e:1f:63:62:49:3f:fd:72:
bf:a9:b0:36:e7:8a:a1:43:0a:e4:db:49:17:2e:21:23:d7:b7:
57:2c:3b:7b:e2:05:2c:a7:86:71:23:b8:a0:55:4e:7b:6a:a0:
0d:95:89:9a:48:37:31:a3:92:b8:88:e0:69:d0:11:97:67:5c:
41:dc:64:93:e6:03:77:79:a2:12:9f:fa:23:67:bc:a3:5f:aa:
d5:aa:88:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:23:36 2025 by rpki-client