Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/MmO-0lWaDv4u5IqSS7HcIslWExg.roa
File: MmO-0lWaDv4u5IqSS7HcIslWExg.roa (raw, json)
Hash identifier: 5uV9HqOdAjauKmur0wy0smWIzd8UG8Mw07MNe0LD5ps=
Subject key identifier: 32:63:BE:D2:55:9A:0E:FE:2E:E4:8A:92:4B:B1:DC:22:C9:56:13:18
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0194B0EBBBA1B7815F9EE5079D52DFF87254
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/MmO-0lWaDv4u5IqSS7HcIslWExg.roa
Signing time: Wed 29 Jan 2025 07:17:06 +0000
ROA not before: Wed 29 Jan 2025 07:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.43.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 11:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:eb:bb:a1:b7:81:5f:9e:e5:07:9d:52:df:f8:72:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 29 07:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3263bed2559a0efe2ee48a924bb1dc22c9561318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:11:3b:b2:98:c0:75:60:fd:1a:b5:4e:9e:
6f:10:4e:3a:4e:25:7d:f5:d1:f3:4e:c2:15:10:67:
bc:92:6b:a6:be:8e:20:45:91:90:70:1e:5f:26:0b:
3d:1d:c4:79:ce:80:2c:b3:c9:0e:8a:69:9b:e9:a3:
a4:ad:e9:c0:da:2a:5d:2a:e5:6e:61:f1:95:d5:df:
ed:0c:47:1d:85:0c:63:76:44:7e:72:59:10:bf:b9:
89:3c:08:35:a9:d0:c9:ac:fd:01:a4:19:6b:c1:96:
2a:73:44:7f:4d:bd:3e:55:98:29:8e:d8:2a:4c:a8:
86:dd:b2:e8:5e:b1:6f:7c:80:4f:ee:31:0b:c1:12:
fd:47:c4:5e:c4:8e:5f:fa:a1:3c:94:56:64:46:5a:
30:c3:d5:4d:26:c7:59:13:a5:2a:61:ee:4c:ce:60:
1b:4a:20:35:63:27:bd:62:1d:40:a3:89:33:da:0f:
96:99:d7:f3:16:a0:df:36:4e:c0:48:01:1d:79:29:
54:a4:f0:a0:42:3a:c9:b3:7f:7b:ba:03:50:ae:72:
4a:2f:ef:2f:19:13:08:43:41:d0:49:75:7a:80:5d:
0e:9c:31:e1:4e:4a:1e:97:25:e8:5b:5f:28:7c:71:
df:df:4b:67:11:42:4b:75:39:d7:95:20:83:4c:25:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:63:BE:D2:55:9A:0E:FE:2E:E4:8A:92:4B:B1:DC:22:C9:56:13:18
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/MmO-0lWaDv4u5IqSS7HcIslWExg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.43.141.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b8:aa:83:dc:e5:24:45:4c:64:c1:3b:8f:f7:d5:8a:d6:c6:
cb:dd:8f:91:9c:f8:84:27:34:fd:f3:d7:b5:70:70:f9:78:2b:
95:cf:53:8d:cb:52:cf:54:f1:3f:cf:e3:e2:e9:a1:5e:ea:49:
eb:a7:32:93:f5:c6:50:88:fd:1f:d4:fc:c4:3a:43:1d:ce:4c:
11:8d:a8:55:12:8b:1c:48:9f:8f:46:19:3a:20:b1:cc:13:fb:
91:34:8b:e4:7e:2b:d7:33:44:b2:ab:2f:4c:0e:f2:2d:33:ec:
55:d9:d3:a2:0b:27:0d:da:24:3c:1c:73:34:e7:14:5b:05:cd:
63:9c:5a:6a:d3:17:b3:fb:3b:42:73:b7:26:23:28:ff:99:79:
6e:45:0a:a9:96:2c:cf:65:52:b3:7f:91:82:87:4a:49:3f:ad:
49:1d:a3:4b:20:58:49:bc:7d:f8:fd:ba:b3:8b:2a:57:b9:59:
47:a0:83:8f:4c:fa:9e:41:24:50:cc:68:26:6a:ef:67:1d:1d:
95:ab:98:b3:8e:3b:4e:95:0b:d3:62:7e:3e:9f:37:40:a5:48:
16:84:22:ef:b9:07:2f:db:a9:41:55:fd:04:62:24:53:e6:4d:
4e:45:ce:0a:fd:26:6c:d0:86:ab:a3:c1:e0:04:fb:33:1a:44:
63:63:8d:db
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZSw67uht4FfnuUHnVLf+HJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTI5MDcxNzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjYzYmVkMjU1OWEwZWZlMmVlNDhhOTI0YmIxZGMyMmM5NTYxMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPkRO7KYwHVg/Rq1Tp5vEE46TiV9
9dHzTsIVEGe8kmumvo4gRZGQcB5fJgs9HcR5zoAss8kOimmb6aOkrenA2ipdKuVu
YfGV1d/tDEcdhQxjdkR+clkQv7mJPAg1qdDJrP0BpBlrwZYqc0R/Tb0+VZgpjtgq
TKiG3bLoXrFvfIBP7jELwRL9R8RexI5f+qE8lFZkRloww9VNJsdZE6UqYe5MzmAb
SiA1Yye9Yh1Ao4kz2g+WmdfzFqDfNk7ASAEdeSlUpPCgQjrJs397ugNQrnJKL+8v
GRMIQ0HQSXV6gF0OnDHhTkoelyXoW18ofHHf30tnEUJLdTnXlSCDTCV9GQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFDJjvtJVmg7+LuSKkkux3CLJVhMYMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvTW1PLTBsV2FEdjR1NUlxU1M3SGNJc2xXRXhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABZKlED
BAJZKlADBABZK40wDQYJKoZIhvcNAQELBQADggEBABe4qoPc5SRFTGTBO4/31YrW
xsvdj5Gc+IQnNP3z17VwcPl4K5XPU43LUs9U8T/P4+LpoV7qSeunMpP1xlCI/R/U
/MQ6Qx3OTBGNqFUSixxIn49GGTogscwT+5E0i+R+K9czRLKrL0wO8i0z7FXZ06IL
Jw3aJDwcczTnFFsFzWOcWmrTF7P7O0JztyYjKP+ZeW5FCqmWLM9lUrN/kYKHSkk/
rUkdo0sgWEm8ffj9urOLKle5WUegg49M+p5BJFDMaCZq72cdHZWrmLOOO06VC9Ni
fj6fN0ClSBaEIu+5By/bqUFV/QRiJFPmTU5Fzgr9JmzQhqujweAE+zMaRGNjjds=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:57:30 2025 by rpki-client