Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZAFRDNunIm7X95SUgraDMxDmMck.roa
File: ZAFRDNunIm7X95SUgraDMxDmMck.roa (raw, json)
Hash identifier: wRXFh+Qg5V6fq7LNee+SF80j433A7obbjZXxmLUGJLs=
Subject key identifier: 64:01:51:0C:DB:A7:22:6E:D7:F7:94:94:82:B6:83:33:10:E6:31:C9
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0193889CB0ED7A524F9E7AD50B6A447C50AD
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZAFRDNunIm7X95SUgraDMxDmMck.roa
Signing time: Mon 02 Dec 2024 18:23:10 +0000
ROA not before: Mon 02 Dec 2024 18:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:88:9c:b0:ed:7a:52:4f:9e:7a:d5:0b:6a:44:7c:50:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 2 18:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6401510cdba7226ed7f7949482b6833310e631c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:54:de:c3:58:42:ac:b9:51:c0:dc:fc:43:
a3:68:76:2b:93:4f:2d:8a:22:04:dd:62:d9:bb:29:
8d:2d:59:eb:70:dd:bb:de:b5:74:45:7e:b4:fd:1a:
85:20:9c:70:f7:80:33:fd:3d:87:ff:70:bf:e6:37:
31:3c:08:af:55:e9:e3:5d:2c:1f:e9:59:f7:87:fa:
cd:71:46:3e:89:46:2a:0f:6d:09:45:67:5c:b3:23:
0f:77:b1:d3:09:81:88:b1:15:9c:a4:12:4f:1f:49:
f0:8d:67:02:3f:36:bd:de:bb:b5:7a:84:09:12:cd:
82:e8:3e:5a:4b:e8:c3:37:fd:0e:a0:e8:cb:48:ef:
a6:0b:df:f6:47:9e:33:a2:4a:d3:7b:79:26:01:b8:
a8:f0:cd:d2:97:06:ae:56:15:f7:9e:b5:ed:98:c1:
ea:2b:8e:b9:fa:d7:fd:8c:20:0f:c4:c6:0d:c5:f7:
99:4c:06:86:a8:92:d2:1d:84:62:c7:52:27:8a:10:
79:ab:b2:b1:c2:29:3e:bc:8f:ef:f0:2d:a1:1c:ee:
a5:8d:85:4c:9f:cb:8d:e7:35:76:67:64:6e:e8:2b:
c7:db:79:3a:ad:45:3e:7e:83:66:40:5d:16:53:34:
1e:e3:a6:9f:46:d8:8d:fe:50:b6:e7:a5:69:5c:9f:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:51:0C:DB:A7:22:6E:D7:F7:94:94:82:B6:83:33:10:E6:31:C9
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZAFRDNunIm7X95SUgraDMxDmMck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
0a:0a:24:b2:7e:22:6d:25:be:10:16:d5:2c:eb:22:1e:69:3e:
ba:ba:a6:9f:83:b7:e1:cc:a9:c2:2b:8a:76:ac:36:06:3f:18:
af:34:64:58:37:28:3f:fb:e6:ba:ca:57:a2:10:40:6c:0f:08:
12:20:8e:8c:62:f4:cb:82:ab:15:13:63:52:e7:52:00:06:9d:
b1:a2:c6:2a:0b:77:74:8b:52:a1:56:4e:7d:e9:d4:62:51:a7:
ac:75:27:a8:ed:86:71:0c:a9:84:cb:51:22:7a:52:a8:6e:24:
a6:3f:ac:fe:b5:39:e9:2e:4b:66:90:e7:75:34:81:a9:77:69:
69:84:0f:2c:da:79:65:7e:2f:18:f7:f3:5f:aa:e9:f0:82:0d:
e7:53:77:57:5a:51:e2:ee:40:a7:6c:c3:b0:85:8f:4c:ff:ba:
55:e5:65:2e:81:86:47:63:cf:7c:12:cb:ec:70:af:56:0a:d1:
8b:d5:ab:19:5a:5b:6d:23:e0:cc:0e:80:7b:aa:99:be:68:41:
52:b2:74:a2:9e:1e:e5:b4:9e:fe:2d:6a:21:6c:6e:bb:c4:98:
37:cd:7e:e7:49:a6:9a:d9:a6:1a:8d:84:73:d1:f2:08:82:91:
e1:6a:d5:76:22:cc:03:a2:0c:14:ad:8c:e0:ee:4e:a2:d1:2f:
38:3d:ce:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:17 2025 by rpki-client