Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qRrOP8k_rsbRfJxENh_B4lmzsro.roa
File: qRrOP8k_rsbRfJxENh_B4lmzsro.roa (raw, json)
Hash identifier: svPY5I6lmiTG9r3pxyz3d+p3pDx6fMtTtikFluIaezQ=
Subject key identifier: A9:1A:CE:3F:C9:3F:AE:C6:D1:7C:9C:44:36:1F:C1:E2:59:B3:B2:BA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01950E70B6E05D00978D700773E392B14524
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qRrOP8k_rsbRfJxENh_B4lmzsro.roa
Signing time: Sun 16 Feb 2025 11:07:02 +0000
ROA not before: Sun 16 Feb 2025 11:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 03 Mar 2025 06:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:70:b6:e0:5d:00:97:8d:70:07:73:e3:92:b1:45:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 16 11:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a91ace3fc93faec6d17c9c44361fc1e259b3b2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:b2:94:09:6b:2a:d5:ec:44:13:41:47:68:
e8:c8:9d:25:73:dc:cf:54:91:30:7e:82:b9:61:74:
08:9c:9d:f7:fb:7d:48:4d:96:f7:9b:70:df:28:0c:
b5:1f:63:57:91:6a:ec:31:da:b5:00:8c:cc:27:d1:
56:49:c4:db:dd:73:71:9c:79:04:d7:a2:1d:13:8b:
73:10:08:d0:47:22:b4:1e:68:08:e8:c9:05:c2:c2:
dc:18:83:2d:52:b5:1b:10:00:4f:89:80:0b:93:7b:
61:fa:c0:c8:b1:fc:e8:e2:0d:eb:f8:a0:74:02:61:
ac:2b:31:48:d8:bc:33:81:68:7d:9d:82:99:3f:54:
9b:e5:eb:ba:c5:14:01:85:36:0f:43:5a:76:e0:10:
36:ad:64:12:20:5a:d1:9b:db:e7:e9:04:3c:54:50:
79:e2:b3:06:0b:13:46:4d:c8:9d:ba:95:e5:bd:28:
ab:17:1c:5f:53:4c:3e:b4:e3:2e:a8:de:87:01:6f:
ab:0b:82:9a:e7:b0:b3:f6:c2:d7:07:d1:54:98:05:
ef:ea:5b:84:59:a2:c0:f2:50:12:4c:ed:14:46:4c:
43:3c:d2:d3:ae:a9:70:30:44:95:33:72:03:08:95:
7f:3e:70:af:6d:3d:2f:da:d5:00:3b:23:9c:fe:96:
61:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1A:CE:3F:C9:3F:AE:C6:D1:7C:9C:44:36:1F:C1:E2:59:B3:B2:BA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qRrOP8k_rsbRfJxENh_B4lmzsro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
11:ed:52:fb:c8:11:c6:6c:b1:0c:a0:dd:eb:1a:0f:a4:37:1f:
10:88:d4:28:48:cf:26:83:b9:c8:52:2e:e8:b7:b3:4c:2f:d6:
6c:66:4f:be:0b:37:95:4d:07:25:20:ce:24:9e:6b:2d:fa:2e:
f1:68:8a:d9:71:26:25:50:35:11:ef:09:d3:64:32:e5:2b:e3:
8f:4d:9c:e7:cd:cd:73:99:b7:1b:37:5b:4b:7e:a2:2a:52:46:
6b:c7:57:18:d5:5a:15:a0:35:b3:f4:85:43:40:16:6c:d2:20:
44:3b:dd:e3:c0:e5:70:e0:62:a2:08:fc:d9:7b:fb:18:31:d6:
b8:0a:9d:ec:b9:7a:71:24:5e:2a:b9:0b:c9:1b:8f:91:c9:05:
f3:ff:16:07:41:0f:37:d1:d5:a7:14:4d:47:cd:2c:78:d9:b3:
a2:e0:8a:f9:e0:98:cf:c0:a0:df:cf:a5:40:99:2f:0c:da:0c:
99:f0:2e:ed:87:a7:6f:88:ee:85:e2:8d:a3:7e:4d:1a:c5:8f:
72:63:c0:17:18:be:67:d5:18:9f:28:6f:a7:d4:4a:f0:cc:03:
f3:de:02:f1:9e:67:eb:9e:01:41:2a:6d:57:c1:e6:bf:b6:70:
05:47:16:a5:d4:c4:37:ef:17:cd:3a:0a:6a:85:49:8b:c0:fe:
84:80:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:21 2025 by rpki-client