Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Rjp4TbPAnPxs1z-idajbGu1LsZE.roa
File: Rjp4TbPAnPxs1z-idajbGu1LsZE.roa (raw, json)
Hash identifier: uNZZ4old23Zsr+ZSKxzf7faJ5SaAkJ+UzQfXQnevGMI=
Subject key identifier: 46:3A:78:4D:B3:C0:9C:FC:6C:D7:3F:A2:75:A8:DB:1A:ED:4B:B1:91
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6B2BD49095E2B6EFD156F5032F9B2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Rjp4TbPAnPxs1z-idajbGu1LsZE.roa
Signing time: Wed 01 Jan 2025 21:47:40 +0000
ROA not before: Wed 01 Jan 2025 21:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b2:bd:49:09:5e:2b:6e:fd:15:6f:50:32:f9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=463a784db3c09cfc6cd73fa275a8db1aed4bb191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:f3:3e:fd:6f:a6:b9:c2:50:74:72:9f:c9:
70:18:2a:2c:dc:cf:fc:99:87:43:aa:8a:82:bd:d7:
04:c4:2a:d3:a4:0e:9a:be:66:9d:28:18:ac:2f:31:
58:d2:2f:c1:37:c7:e0:ff:5a:77:98:d7:4b:f7:81:
8d:3a:13:2d:7d:74:62:2d:22:d8:39:3d:de:e1:4c:
b0:a8:12:95:4f:b7:47:d7:6a:46:79:f7:10:5c:db:
cf:d5:6a:00:ba:7b:c0:d3:16:e7:84:e1:5c:cc:24:
b4:a7:4e:32:cf:9d:d5:91:f3:86:ba:c5:ac:c9:68:
54:9f:fd:a4:6c:33:f2:cc:4e:bf:dd:16:67:08:fd:
76:f4:4b:b2:f1:8b:eb:6f:a8:79:4a:ce:77:17:25:
02:50:57:6c:81:11:a1:34:86:24:3e:f2:4c:e8:67:
fb:82:75:79:a3:a6:74:69:6d:7b:fa:ae:ee:39:d3:
26:37:f3:f6:2d:f6:58:84:00:a5:4b:d8:07:1e:db:
22:f1:3b:fd:c6:52:c7:f4:4c:b6:86:e6:ab:a8:13:
ec:69:93:19:15:9f:99:04:d1:3e:03:5f:e4:be:ae:
57:c5:03:0a:01:94:a7:05:5e:85:7d:e4:24:07:e9:
ee:35:21:04:2d:7e:f5:c6:80:87:4b:f9:7e:64:2e:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3A:78:4D:B3:C0:9C:FC:6C:D7:3F:A2:75:A8:DB:1A:ED:4B:B1:91
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Rjp4TbPAnPxs1z-idajbGu1LsZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
86:11:ad:c6:6b:3a:d4:9a:55:04:c1:22:22:77:03:50:33:e7:
ce:3c:57:96:26:b5:08:d6:95:86:2b:54:ee:f5:be:85:81:43:
a2:13:5a:04:86:ec:55:20:c4:25:f7:3b:cf:a3:fc:9b:73:0a:
16:70:6f:55:8c:00:91:52:57:89:f7:ea:2e:65:03:64:00:9a:
e8:e4:5d:1f:41:18:70:e3:da:01:98:f9:92:cf:21:2f:74:80:
30:cb:4b:e3:32:b2:b5:13:e6:a0:47:4c:68:01:fb:0b:34:02:
ae:5c:3d:18:32:dd:c8:6e:70:c8:9d:6f:7d:19:bc:00:4b:cf:
28:59:01:f7:1b:db:fd:08:10:3a:de:5c:67:ce:15:ea:4d:e0:
a2:12:17:3a:9c:d3:f2:16:69:cb:ed:6d:54:7c:e0:b8:1e:fb:
b7:0c:9c:45:7f:1d:79:bd:12:05:95:23:64:fc:a9:13:86:e3:
8f:73:ec:1f:89:69:b2:12:98:1b:c5:5a:ce:09:34:ce:42:ac:
26:7c:c8:19:96:9b:3a:cb:eb:dc:ed:27:da:87:c3:46:95:e2:
73:57:85:52:55:42:bb:24:47:d7:88:2f:aa:e2:de:6b:23:c8:
de:06:61:8f:64:5f:43:d4:8b:24:34:61:cd:ca:55:dc:d4:31:
59:23:ea:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:41 2025 by rpki-client