Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/r4EtNd9-O20-o0wjohM22vEM_GY.roa
File: r4EtNd9-O20-o0wjohM22vEM_GY.roa (raw, json)
Hash identifier: z40uDmk1E3is2YP2rOLMch49nr63Sf7nS4HuBDQN0ak=
Subject key identifier: AF:81:2D:35:DF:7E:3B:6D:3E:A3:4C:23:A2:13:36:DA:F1:0C:FC:66
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0194B7FDBB4F934F2DD0B89E3DC83898E57A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/r4EtNd9-O20-o0wjohM22vEM_GY.roa
Signing time: Thu 30 Jan 2025 16:14:06 +0000
ROA not before: Thu 30 Jan 2025 16:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 03 Feb 2025 08:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:fd:bb:4f:93:4f:2d:d0:b8:9e:3d:c8:38:98:e5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 30 16:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af812d35df7e3b6d3ea34c23a21336daf10cfc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:c3:54:88:7a:b6:8e:5f:fd:a5:b6:2f:e8:
c9:68:56:4b:15:b0:51:34:a9:75:b4:d1:68:a4:5a:
1e:10:25:e8:0e:86:f5:0e:67:aa:24:16:39:a4:43:
a1:87:6e:c3:25:ab:a1:e6:61:f4:17:7c:e2:13:7a:
1c:c0:73:4b:62:d6:e3:c6:84:82:c3:bd:63:e7:56:
d3:43:0b:26:6f:d0:29:75:68:6d:c9:85:2d:fa:a5:
30:21:2f:53:6b:d8:26:b0:f4:d1:b8:b6:02:b1:35:
fd:b4:a3:d0:ae:97:1d:28:7b:ec:c4:fa:ba:cd:f7:
d5:6f:d3:31:50:42:24:0e:10:7b:1a:9a:25:18:d7:
09:24:16:1b:26:b9:64:b6:ce:f1:0c:06:b1:cd:52:
bd:a7:50:23:4e:ae:8f:56:6c:f3:f1:63:74:b9:36:
62:40:51:e6:e6:2d:7a:ed:97:f6:e5:f0:77:c8:71:
48:e7:83:9b:49:f9:01:b9:6b:69:ae:fc:dd:12:51:
a9:0a:6e:02:ec:aa:22:68:60:da:03:57:d6:97:a8:
c7:32:2a:91:c9:f8:e7:c8:8b:bf:46:9c:39:cf:03:
55:fd:13:ec:0e:b8:f4:74:4b:e0:f7:32:d1:a9:84:
90:47:37:f1:58:df:9a:ff:74:03:6e:cf:ec:99:b8:
04:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:81:2D:35:DF:7E:3B:6D:3E:A3:4C:23:A2:13:36:DA:F1:0C:FC:66
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/r4EtNd9-O20-o0wjohM22vEM_GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
7c:4c:4b:61:ed:80:61:2d:30:f3:ce:f6:78:5e:fa:50:42:91:
72:e1:9f:1e:4f:f0:50:ae:03:89:29:9d:88:91:59:7c:51:1c:
8a:88:d0:a9:5e:4c:a2:8d:f3:06:36:e2:10:f8:84:66:95:f9:
37:48:35:3a:44:be:44:40:98:3e:f0:73:a2:2c:7e:19:e4:5c:
38:66:42:95:11:dc:af:04:20:2c:8f:6f:c4:a9:50:9d:f0:e2:
aa:57:d4:80:30:1b:52:da:db:ca:27:2d:fd:22:85:ad:5e:8e:
8b:aa:db:f6:58:08:7e:ec:da:c0:67:1a:b2:70:0e:63:bd:b8:
8a:95:eb:9d:49:72:6d:f1:a6:3f:88:8b:2f:76:0a:d5:bc:0f:
5f:e5:48:50:fb:ac:43:50:05:7a:f0:8d:cd:e0:93:be:60:af:
81:36:10:2d:d6:cc:02:69:10:be:1b:c1:39:05:89:3c:c3:2b:
f8:11:65:3c:16:5d:e7:32:a7:97:1e:88:6f:d7:a8:6b:20:5e:
ca:23:d6:3d:d6:6e:49:92:4a:f5:b6:f0:3b:c5:f7:95:46:b3:
81:da:90:5b:68:09:31:5f:74:cf:ad:83:a6:ce:3f:79:e9:11:
36:21:38:10:96:d0:69:1d:76:e6:5b:55:c7:29:3e:ba:79:ac:
71:45:93:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:05 2025 by rpki-client