Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/MpAwiXJwG8Mg6Wl65gGvaE_Lue8.roa
File: MpAwiXJwG8Mg6Wl65gGvaE_Lue8.roa (raw, json)
Hash identifier: oiwPPC8GFcN0fLU6U9N1kbZ2AoJbVlus+ExPtJwDONo=
Subject key identifier: 32:90:30:89:72:70:1B:C3:20:E9:69:7A:E6:01:AF:68:4F:CB:B9:EF
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0198C674DE69B442E0BE3009B3FD26CC2979
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/MpAwiXJwG8Mg6Wl65gGvaE_Lue8.roa
Signing time: Wed 20 Aug 2025 07:50:04 +0000
ROA not before: Wed 20 Aug 2025 07:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Aug 2025 17:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:74:de:69:b4:42:e0:be:30:09:b3:fd:26:cc:29:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 20 07:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3290308972701bc320e9697ae601af684fcbb9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:ee:d6:9e:04:2b:7c:19:7e:2a:de:8b:d0:
81:6c:70:ba:93:37:05:19:cd:66:3f:f8:9b:9b:68:
b1:89:a6:16:a9:5a:b2:be:23:b4:b5:46:35:81:ab:
6f:7f:4d:ce:55:b3:fe:68:40:3e:61:28:52:7d:c1:
42:51:7a:3e:af:f4:aa:f0:55:63:c3:ae:e7:17:d9:
0b:53:79:5d:82:6e:4b:08:2b:a4:51:42:97:0c:50:
73:2d:b4:d1:d4:63:15:a9:25:b0:fe:a1:5e:3f:b3:
84:b3:59:b8:c2:68:61:ed:2d:69:b4:3b:b1:e9:20:
cf:9a:3c:1b:d1:da:b5:48:c6:6b:d5:ba:88:31:b2:
5d:11:07:64:83:54:3c:ca:6e:60:97:2f:68:e6:e0:
01:ed:fd:48:e4:55:90:fc:a6:ae:dd:86:bd:44:57:
cb:47:5e:3e:c1:c6:a0:18:b3:86:d3:ef:ba:94:92:
16:e0:07:0d:4d:5b:dd:82:98:c2:75:44:fa:53:29:
15:70:8d:e9:84:74:7d:f0:a9:59:86:56:43:71:98:
eb:41:12:79:31:86:94:61:20:b2:7e:d9:55:5e:13:
a3:1b:c1:8b:9b:9c:bc:0b:78:34:1d:22:e1:92:ce:
3a:73:e0:7e:28:1b:5a:37:8a:83:fb:e5:67:c6:77:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:90:30:89:72:70:1B:C3:20:E9:69:7A:E6:01:AF:68:4F:CB:B9:EF
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/MpAwiXJwG8Mg6Wl65gGvaE_Lue8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/23
89.42.88.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3c:d2:f6:b1:0e:54:34:c5:61:fe:8a:d9:c2:15:c1:0f:02:
3d:f3:d9:b1:4c:26:0d:57:d4:85:7d:83:45:5d:f2:3d:5f:1c:
e9:9a:b5:4c:1a:9c:fa:e9:60:05:b4:6d:4d:37:c5:25:ba:e3:
49:f5:a0:5d:34:e7:02:55:41:3f:b6:e6:b6:c5:bf:de:e1:34:
7e:36:70:a8:12:b4:94:fb:62:dd:d1:9a:eb:0d:8e:24:b4:69:
30:75:32:73:af:74:01:6c:bb:9e:8d:55:b0:00:88:92:4a:00:
35:41:de:51:96:82:d2:a4:49:88:ec:aa:7a:5b:97:92:d7:0d:
7b:27:41:b8:5d:1a:3a:52:9c:70:f6:48:08:18:8b:db:86:fd:
44:d6:ec:aa:49:8e:d3:aa:2d:05:02:4e:7d:a0:5e:2e:e2:50:
9e:98:79:d1:fd:b2:68:db:85:3e:69:e1:ef:99:33:92:65:f9:
f6:85:2c:72:b7:a7:99:7d:60:82:ba:b3:41:f7:01:a9:e8:26:
e4:6a:db:43:34:e0:af:12:00:10:d9:e5:6f:69:46:7f:b5:90:
cd:e2:60:9e:2a:9f:1d:80:98:9d:fa:c8:a2:1c:42:95:6c:e0:
76:ac:40:ec:fb:96:47:78:6c:37:21:e5:c8:a9:f6:03:36:cb:
8b:67:bc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 21:23:02 2025 by rpki-client