Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZfAtKaF8GWgoi8g1DQhCq5QWWRY.roa
File: ZfAtKaF8GWgoi8g1DQhCq5QWWRY.roa (raw, json)
Hash identifier: HJrani7OgZszZSu8D2Mk5HfQXdB6/P1aHTb+CdEAShA=
Subject key identifier: 65:F0:2D:29:A1:7C:19:68:28:8B:C8:35:0D:08:42:AB:94:16:59:16
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6B3DCF2FF45303A8E78965BD817E9
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZfAtKaF8GWgoi8g1DQhCq5QWWRY.roa
Signing time: Wed 01 Jan 2025 21:47:40 +0000
ROA not before: Wed 01 Jan 2025 21:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 89.34.229.0/24 maxlen: 24
89.47.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b3:dc:f2:ff:45:30:3a:8e:78:96:5b:d8:17:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65f02d29a17c1968288bc8350d0842ab94165916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:22:84:fc:04:6f:c1:27:4a:8e:9d:3b:22:
73:fd:79:8d:fc:f0:a7:21:83:99:14:3c:c4:b5:9a:
88:d7:35:7f:5f:0a:d8:9c:71:aa:aa:30:ad:ac:3a:
f1:4f:aa:a4:25:18:a0:35:5b:ff:7c:05:e3:15:bb:
48:c3:7c:e4:25:ba:45:e0:49:15:c0:5f:0d:dd:54:
09:4a:ca:d4:dc:ca:90:a2:01:5c:e5:b3:d8:49:59:
6c:ee:9d:1e:b9:ca:db:87:82:e7:7e:9c:50:e7:65:
e1:62:4d:89:09:0a:f7:52:76:64:f6:2e:08:f7:0b:
c6:ad:d2:5a:47:d1:08:5f:0f:d4:8f:e9:06:bb:d4:
2a:cc:ef:f3:11:1c:78:31:cc:f2:64:ea:af:3a:11:
08:41:78:36:82:8a:8d:1f:75:11:34:8d:66:e6:f4:
eb:20:61:36:8f:29:f9:8f:13:ae:60:11:df:cb:8b:
b8:be:e7:0a:97:50:c2:83:98:43:92:a1:b0:06:a3:
c5:a8:e1:4b:f2:86:50:a5:28:a1:01:e1:1a:f4:64:
bd:c9:57:25:24:24:fa:c3:f7:a3:c6:3c:c5:82:24:
f4:ea:df:b3:a3:bb:c5:cb:55:ea:26:b0:e6:67:7c:
45:2b:5b:9e:b9:0d:9e:52:c8:40:47:d7:1f:f2:60:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F0:2D:29:A1:7C:19:68:28:8B:C8:35:0D:08:42:AB:94:16:59:16
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZfAtKaF8GWgoi8g1DQhCq5QWWRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.229.0/24
89.47.121.0/24
Signature Algorithm: sha256WithRSAEncryption
03:bc:18:36:78:11:05:fc:d7:33:3b:16:6c:a8:eb:e9:94:8b:
cc:b2:47:38:d0:1a:88:ea:31:7e:e8:13:fc:09:7e:c8:59:64:
90:a2:eb:18:dc:d9:4e:c7:0a:f5:13:d1:1c:56:f2:52:6c:dc:
9f:59:07:19:6a:50:60:39:fd:3a:dd:b1:0c:d6:30:06:bd:8b:
7b:72:ec:a2:1f:7a:ae:fa:88:09:fb:fc:52:00:a4:9d:1a:84:
e2:87:73:db:75:1f:72:b8:92:f4:3b:f6:93:67:a4:5e:e2:c5:
17:52:92:12:31:6b:96:5c:d8:7b:46:d8:6d:17:5f:d4:ae:1b:
8f:ab:ec:4a:26:6e:df:56:a3:ee:4a:ec:aa:18:fb:eb:da:04:
02:21:0f:fb:86:ea:de:78:d5:41:95:31:46:f7:28:67:64:8b:
e1:49:ba:2b:60:f9:0f:50:97:5b:6a:59:ad:41:db:47:b0:ce:
7d:7f:8d:23:98:f1:38:30:d3:81:85:b7:98:c7:ad:a7:ff:26:
8f:4d:83:31:52:3c:eb:9f:2c:eb:41:36:75:d4:09:e0:b8:f1:
eb:69:44:af:b0:a9:76:db:80:c5:c3:f1:bb:5f:e5:d9:3e:2f:
c1:da:7b:98:69:74:fc:aa:59:5e:8d:d4:bf:81:7e:02:3e:ba:
3a:b0:2e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:35 2025 by rpki-client