Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/feUyDHVLTueSHdX2PhXS7fgNEZY.roa
File: feUyDHVLTueSHdX2PhXS7fgNEZY.roa (raw, json)
Hash identifier: dQuX8j7HIdFCCuBe9amQZVL/Fp2fT1n1uBNRwW+yWt0=
Subject key identifier: 7D:E5:32:0C:75:4B:4E:E7:92:1D:D5:F6:3E:15:D2:ED:F8:0D:11:96
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0194331803079295F5A2491ADAE65D00014A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/feUyDHVLTueSHdX2PhXS7fgNEZY.roa
Signing time: Sat 04 Jan 2025 20:53:18 +0000
ROA not before: Sat 04 Jan 2025 20:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 89.47.114.0/24 maxlen: 24
93.114.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 16:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:33:18:03:07:92:95:f5:a2:49:1a:da:e6:5d:00:01:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 4 20:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7de5320c754b4ee7921dd5f63e15d2edf80d1196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:14:f7:10:85:52:cc:2b:90:15:44:7e:f1:
aa:09:db:57:01:3b:4c:a4:79:22:16:e0:91:89:07:
e3:68:63:52:cc:bb:cd:c9:f5:d3:ef:43:2a:85:84:
af:b7:48:1f:1a:39:3f:a4:e0:e0:a3:d7:11:bd:ba:
89:bb:7d:29:01:f5:ab:c5:80:26:d8:e4:98:c0:ec:
a9:d9:84:b2:91:ab:5b:38:27:50:89:e6:fc:7f:bb:
fe:e8:ae:93:c2:eb:f9:7e:27:fd:2d:ac:bb:16:5e:
98:80:2b:66:19:0a:67:79:0c:44:89:a6:b4:8b:75:
7c:e9:9c:82:b4:3e:7a:c4:ac:d8:f8:ff:8f:cf:6e:
42:c1:f1:53:95:0b:f7:fe:e5:61:34:fe:ba:92:6e:
a8:4b:2e:49:10:c3:af:7d:33:e7:86:6d:40:8e:04:
4e:7a:58:46:dc:ea:72:96:92:af:61:50:dc:21:fd:
4c:96:4d:22:fc:56:ad:5c:d8:ec:73:b3:94:61:c0:
a2:8b:71:c3:5d:8b:a5:88:ba:3b:c6:ad:c5:b1:92:
f8:ac:55:b3:83:d2:6f:89:8c:db:1c:75:5a:01:cc:
4f:8c:64:00:2d:65:68:78:fd:91:45:94:27:3b:00:
77:01:b8:c4:a2:f9:69:50:2c:24:58:58:9b:36:0c:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E5:32:0C:75:4B:4E:E7:92:1D:D5:F6:3E:15:D2:ED:F8:0D:11:96
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/feUyDHVLTueSHdX2PhXS7fgNEZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.114.0/24
93.114.73.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:39:a6:32:af:08:58:09:17:f7:c9:3d:7d:6b:fe:3c:07:17:
63:fb:d4:73:88:ed:92:47:0e:dd:a1:25:58:5d:3f:84:b4:66:
34:6a:3f:38:59:fb:82:d3:6d:4d:4c:70:3c:83:d2:39:68:4b:
73:4f:d2:46:67:18:f3:4d:45:17:e0:38:aa:11:8a:f4:a1:20:
5e:3c:f1:95:a6:41:8d:be:d2:4c:12:30:62:23:61:c5:25:d9:
7e:dd:a8:3e:7e:03:60:90:bc:93:0b:99:ae:d8:63:a6:83:ab:
b9:f3:1f:c3:6d:e7:53:c2:f8:23:32:af:da:0a:d3:7a:c8:db:
9f:4d:fa:a5:b8:4f:12:12:c3:a1:c7:d3:f2:bc:5b:cb:43:e0:
df:70:b8:2b:09:15:5c:80:f8:be:bf:d0:65:1f:25:97:d0:aa:
5d:05:4e:00:1b:26:ce:6c:55:a5:17:13:22:fe:68:6a:33:58:
41:8a:91:55:03:ad:09:32:fd:ac:5f:fa:51:ba:59:0f:60:82:
74:65:dc:32:87:b3:11:d2:07:24:70:4c:20:2b:bb:f5:77:68:
30:8b:21:65:b2:40:b8:23:c2:69:96:56:df:30:6c:9c:fc:20:
e1:e1:c6:55:c1:f5:76:86:3e:6e:d9:79:2f:df:f5:6c:75:0f:
bf:8f:5d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:54:26 2025 by rpki-client