Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/adxiotDBNzqsQhmv_nFBW2ZRDB0.roa
File: adxiotDBNzqsQhmv_nFBW2ZRDB0.roa (raw, json)
Hash identifier: TaOXkSLeyR3Y3ttmbg6KEyKw9eLPr+NiXzUB552Ru6g=
Subject key identifier: 69:DC:62:A2:D0:C1:37:3A:AC:42:19:AF:FE:71:41:5B:66:51:0C:1D
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01957FE0969D2ED3FD8E92EEFD9C0663D171
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/adxiotDBNzqsQhmv_nFBW2ZRDB0.roa
Signing time: Mon 10 Mar 2025 11:46:19 +0000
ROA not before: Mon 10 Mar 2025 11:46:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.33.193.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 11 Mar 2025 13:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:e0:96:9d:2e:d3:fd:8e:92:ee:fd:9c:06:63:d1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 10 11:46:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69dc62a2d0c1373aac4219affe71415b66510c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:1b:7c:b4:da:0d:4e:7e:41:0b:e0:df:2a:
fb:b9:84:41:29:9f:03:22:7c:e1:e4:cf:64:af:1f:
30:4f:59:6d:05:9e:96:05:c9:f9:24:6e:e6:13:e8:
22:91:b2:bf:e4:f7:6a:50:67:31:18:65:f8:3b:48:
34:8c:7e:19:53:8a:6f:65:94:26:09:32:55:b8:6c:
de:26:e1:89:76:d0:e1:80:46:1c:ce:19:98:c7:32:
15:a7:cd:02:ac:44:f0:24:d2:d0:9d:99:f1:55:3a:
20:f6:f0:f5:ee:f4:bb:be:7c:4f:70:e6:49:0e:06:
42:cc:e1:29:43:52:6b:93:c4:77:22:e1:54:92:39:
17:17:67:0e:a0:76:bf:4f:fc:ce:a3:47:ac:54:a3:
18:53:ab:a3:b8:9f:7d:af:79:f3:c3:aa:b6:5d:5b:
fa:cc:1b:68:c3:2f:0b:07:78:cb:d5:b4:cb:4b:66:
b6:2c:ac:41:01:e7:df:52:ef:bd:c8:84:f5:2a:9a:
20:8c:95:a4:d4:41:11:fb:ab:fb:9c:52:ac:17:7c:
c2:b2:4f:f0:b8:8a:1d:6b:ba:2b:cd:6c:af:d1:5e:
aa:70:10:67:6c:9a:78:1d:36:e7:25:1f:5e:51:c3:
b6:56:60:45:bc:36:a4:7e:09:20:9b:c9:03:4b:76:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DC:62:A2:D0:C1:37:3A:AC:42:19:AF:FE:71:41:5B:66:51:0C:1D
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/adxiotDBNzqsQhmv_nFBW2ZRDB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
14:32:9a:28:e9:1a:36:80:21:b8:b1:b9:f1:2d:24:16:df:37:
a1:24:e0:23:9c:ba:77:36:5c:49:04:a2:11:5e:6c:ed:c0:46:
88:f4:bb:d8:f4:d4:50:97:d3:be:37:c8:f4:f4:f6:3e:3f:67:
39:76:39:8d:64:cd:bd:cb:86:17:b1:5b:0a:00:f3:e7:d0:dd:
7d:53:3a:98:4a:9f:ba:42:7e:fe:5e:cb:35:28:85:0c:48:2b:
72:ba:de:d5:05:b3:7c:51:ff:f8:70:b2:c6:03:a3:f9:a6:91:
e7:3a:52:8c:02:27:16:c9:44:0d:2f:43:10:77:25:f6:d9:db:
53:73:43:e2:ef:13:33:f4:1a:8c:c8:57:45:03:0f:4a:ef:17:
ee:22:62:ce:cd:6e:93:83:ad:cc:48:29:5d:8e:5a:ed:da:51:
d8:81:80:c1:28:d2:7b:35:a2:fe:04:46:fc:2d:d0:ec:46:61:
ba:9b:3a:36:b9:a6:c4:33:21:fc:33:f5:a1:8e:ae:36:8b:75:
54:1e:e5:8b:ed:68:da:8b:6f:a0:85:ec:8c:07:6b:2c:0a:6e:
07:94:b2:7e:6b:08:70:ed:ff:38:60:8b:a1:2b:cf:33:ce:c5:
c4:6a:7d:cb:15:e5:cd:21:fa:5d:b0:e6:f1:d6:a9:c0:75:b4:
77:d2:28:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:21 2025 by rpki-client