Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/O5XLiSwRjcbue8GH95T2Ypw5SkI.roa
File: O5XLiSwRjcbue8GH95T2Ypw5SkI.roa (raw, json)
Hash identifier: p9jmN371Ya4w9GKHxCwDC2AhNRAPDvGFL9j2CKQ0PRM=
Subject key identifier: 3B:95:CB:89:2C:11:8D:C6:EE:7B:C1:87:F7:94:F6:62:9C:39:4A:42
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01955AA24A4CC40177D39B2053AE2D0217D4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/O5XLiSwRjcbue8GH95T2Ypw5SkI.roa
Signing time: Mon 03 Mar 2025 06:12:20 +0000
ROA not before: Mon 03 Mar 2025 06:12:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
93.114.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 10:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5a:a2:4a:4c:c4:01:77:d3:9b:20:53:ae:2d:02:17:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 3 06:12:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b95cb892c118dc6ee7bc187f794f6629c394a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:78:4c:83:95:09:39:4e:66:be:e2:b5:07:
c0:9d:e2:9f:95:d0:ef:11:82:be:0d:9d:fd:a4:38:
2b:75:09:82:21:13:f7:b1:5c:f0:3f:45:97:e2:d1:
5d:73:12:e4:62:42:f6:97:d4:14:5f:72:ba:d1:12:
43:01:09:f2:0e:1d:3e:bc:6c:58:1e:67:26:26:f4:
5b:b0:6b:e2:fd:72:22:43:36:44:85:f1:5f:f7:8b:
0b:73:cb:fe:92:59:59:5b:8e:f1:69:78:ac:f4:0d:
23:72:dd:ad:60:26:23:22:d5:d2:cd:e6:aa:fc:f6:
46:6a:08:9a:63:75:98:68:77:1b:a4:93:7b:c3:16:
3b:33:73:e6:01:16:3e:25:cd:5d:99:b2:85:cf:d8:
8a:23:c3:38:38:a8:5b:80:ed:2d:ce:0a:d1:3f:ee:
93:d0:41:70:53:1e:74:90:60:f9:94:d1:01:db:1d:
ce:fd:c6:92:d8:be:5f:30:da:10:c1:12:ff:76:8f:
21:0a:cc:58:b2:ed:75:76:53:77:61:4c:f9:91:e9:
ac:2b:44:18:e2:fe:27:d9:7b:65:78:8b:f7:33:99:
28:c9:f1:85:e7:c6:c8:f5:25:eb:fb:8f:83:c4:95:
3a:58:56:53:02:85:74:fa:74:85:08:aa:29:b8:0c:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:95:CB:89:2C:11:8D:C6:EE:7B:C1:87:F7:94:F6:62:9C:39:4A:42
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/O5XLiSwRjcbue8GH95T2Ypw5SkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
93.114.72.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a3:c5:fa:46:49:f3:be:9a:c2:58:f8:b6:f9:3a:06:85:99:
9a:8c:c3:17:5a:e9:4a:99:01:b5:94:c2:96:b3:16:c8:2a:4b:
57:5e:34:39:fc:b8:9a:e2:84:8a:33:a3:e3:59:fa:86:81:a7:
af:2f:9c:9e:a1:ec:3c:9e:96:6b:ea:c0:49:e2:10:1b:4f:ef:
3a:e0:e4:32:58:c8:c5:31:0e:b1:06:0a:79:e3:2f:38:05:ae:
a9:3b:f2:10:91:7e:ab:66:07:f5:f9:e2:32:bd:40:11:c2:c5:
4c:7a:b4:83:cf:17:a6:a5:e2:c4:fc:9e:8b:dd:82:3c:ac:7f:
ba:a8:4d:30:e2:6c:44:c5:20:74:04:50:39:2d:fe:cd:bd:d2:
95:f1:2b:fd:9c:59:42:5c:6e:48:0e:e7:cb:63:ac:6d:4a:4f:
6c:67:5f:21:eb:0f:df:16:7a:6c:08:8c:90:05:c4:fe:5f:d5:
b0:ee:55:af:61:fc:b9:65:a9:4f:e1:3c:0f:18:78:5b:53:be:
87:fd:55:7d:1e:90:18:bf:7b:9c:9a:1f:d7:62:3c:38:18:db:
c1:1a:4c:73:27:48:57:e0:47:5f:f9:e4:1a:66:72:73:98:6c:
28:8f:5d:32:12:7d:e6:5f:99:88:6d:13:de:1e:c5:28:3d:78:
6f:92:2f:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:06:23 2025 by rpki-client