Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Twjm-fnHAdKIe5QBec8NAGwrEDs.roa
File: Twjm-fnHAdKIe5QBec8NAGwrEDs.roa (raw, json)
Hash identifier: wzAeJ/TeU93rWEz/DQ9YIXQfx3Jwrh76bM2v0Hqmcjc=
Subject key identifier: 4F:08:E6:F9:F9:C7:01:D2:88:7B:94:01:79:CF:0D:00:6C:2B:10:3B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0194305BA2044AF9BDCEAE91299A3D27979A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Twjm-fnHAdKIe5QBec8NAGwrEDs.roa
Signing time: Sat 04 Jan 2025 08:08:19 +0000
ROA not before: Sat 04 Jan 2025 08:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.47.114.0/24 maxlen: 24
93.114.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 20:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:30:5b:a2:04:4a:f9:bd:ce:ae:91:29:9a:3d:27:97:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 4 08:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f08e6f9f9c701d2887b940179cf0d006c2b103b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:9d:61:a2:29:5f:5f:cc:fb:5b:9a:8e:66:
ee:7c:8e:02:48:66:98:bd:01:7c:63:c2:f4:a3:b3:
9e:63:2d:2a:4d:63:72:83:00:eb:e4:bf:cf:89:7d:
6e:e1:c5:5e:a6:68:11:42:b2:54:81:a4:77:8b:d7:
54:c5:ff:e8:75:ae:18:1b:48:2a:9e:9e:3b:ac:28:
50:6f:e4:f1:06:76:58:22:d5:80:74:4f:a0:25:1c:
1b:a3:be:b2:be:67:5c:89:ff:5d:b4:c5:bd:35:b9:
92:90:ff:74:58:c4:ad:9f:fc:d3:fc:f3:9f:97:20:
25:ca:5b:44:ce:5d:05:c6:9d:99:45:24:d9:bb:5e:
6a:10:48:fb:f0:e0:7b:78:b7:7c:a3:4c:ca:1d:31:
c9:b2:b2:ae:a1:56:f1:52:5d:07:96:e3:a4:2a:57:
55:8c:a7:aa:bc:d9:5e:8d:69:a1:ea:f6:74:42:9f:
51:08:82:e3:07:1b:ce:67:fb:83:bc:56:79:b5:16:
82:60:af:8b:53:b6:ed:94:ca:5c:3d:58:41:73:1d:
dc:53:78:ad:72:55:82:d7:49:ca:8e:1a:aa:64:30:
e6:bc:ec:2a:d0:f4:84:49:a3:23:05:13:16:5a:45:
90:5f:9a:f0:65:7a:93:3f:cb:9d:77:82:b3:d8:ac:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:08:E6:F9:F9:C7:01:D2:88:7B:94:01:79:CF:0D:00:6C:2B:10:3B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Twjm-fnHAdKIe5QBec8NAGwrEDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.47.114.0/24
93.114.73.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f7:28:21:1d:6f:49:c0:b1:f2:0f:d3:64:af:85:2e:64:d8:
78:cd:1d:b4:dc:74:e9:d9:89:c7:33:1b:97:ec:fd:18:4a:e2:
21:c5:47:73:27:c7:90:e4:d1:37:aa:1e:7b:05:1f:ef:eb:4f:
48:f6:7d:c8:e1:58:ab:52:c4:f3:4f:0e:de:38:b8:cf:ff:70:
4a:91:dd:0b:50:54:7b:81:45:87:51:97:9d:61:56:1b:7d:3b:
21:90:5c:ec:c6:b2:d1:85:35:bf:4e:3a:d3:f3:ff:7d:56:7b:
0d:a3:66:c2:12:f4:b9:04:2e:44:1a:8f:41:58:e1:7a:31:04:
b1:10:dd:6e:f1:7d:d0:24:3c:84:f1:90:1a:63:9e:c8:63:d2:
af:1a:5c:78:24:95:db:a6:57:a5:4f:f9:2e:a3:06:ba:d3:d8:
ad:59:d7:8e:4b:c7:0f:a2:38:40:67:81:b6:76:2c:c5:77:38:
6d:f5:d2:c9:ca:a7:6e:5a:00:89:ae:2c:96:f4:f7:69:4c:f1:
9e:45:50:83:85:dd:49:db:b1:b4:b6:63:c8:e9:8d:7c:0c:57:
19:0e:db:4f:46:ed:73:f2:82:57:e4:40:f4:5b:d5:c7:17:9d:
14:fd:4c:98:23:8f:ad:37:83:f4:fe:cc:8d:3d:50:54:88:56:
9a:87:ac:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:23:40 2025 by rpki-client