Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/s3RCZplgHPXD6rxo_wec0MspLOI.roa
File: s3RCZplgHPXD6rxo_wec0MspLOI.roa (raw, json)
Hash identifier: HZSXZE2JNcoJgiXmaH3d3n7YwWlDh1Z4FRYTr3zmRNc=
Subject key identifier: B3:74:42:66:99:60:1C:F5:C3:EA:BC:68:FF:07:9C:D0:CB:29:2C:E2
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0194940E8381B8FFB68E542A136C6558609E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/s3RCZplgHPXD6rxo_wec0MspLOI.roa
Signing time: Thu 23 Jan 2025 16:46:06 +0000
ROA not before: Thu 23 Jan 2025 16:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 89.47.114.0/24 maxlen: 24
93.114.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 18:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:0e:83:81:b8:ff:b6:8e:54:2a:13:6c:65:58:60:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 23 16:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b374426699601cf5c3eabc68ff079cd0cb292ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:76:e4:6a:46:f9:70:0a:c9:cf:54:1d:8d:
a0:e4:32:60:f6:1b:6c:48:3d:86:95:39:f0:df:5a:
bf:04:82:f6:fc:00:1d:94:be:38:4e:37:66:7f:fe:
67:ba:fa:75:70:ea:a0:0e:2e:16:f9:47:3c:03:0a:
80:8c:1a:e6:0c:64:e4:08:80:55:e6:1f:53:0a:e4:
0c:e1:02:c4:50:2d:b2:ec:c6:6b:d4:5d:46:af:d2:
fa:a9:65:f4:22:ef:eb:a2:7c:ea:e0:ea:4c:eb:d9:
ff:b3:06:d1:ae:6f:1d:2c:61:a5:e2:ed:bc:c5:c7:
56:59:bc:0b:f8:99:96:f0:30:1b:ca:3f:3d:41:ad:
a4:a4:5b:34:14:c6:d2:ea:57:70:37:96:02:52:d4:
c4:67:8a:91:07:56:51:49:02:cf:7e:a2:32:82:d8:
cb:40:c8:9d:ab:74:e4:11:62:10:71:29:9a:99:ba:
39:3f:f3:48:a7:73:70:77:a6:e1:e7:ff:dc:ca:4c:
8d:b8:1f:4d:91:db:b1:8b:e0:66:7e:cd:78:41:86:
36:b0:a5:ab:2c:10:f8:4c:b9:ca:e8:3b:55:16:9c:
71:62:f7:e2:83:b4:bb:0c:41:91:44:7a:93:ca:b0:
2b:e1:5d:18:1e:72:98:bb:82:2d:72:c2:fd:07:87:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:74:42:66:99:60:1C:F5:C3:EA:BC:68:FF:07:9C:D0:CB:29:2C:E2
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/s3RCZplgHPXD6rxo_wec0MspLOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.114.0/24
93.114.73.0/24
Signature Algorithm: sha256WithRSAEncryption
39:43:ae:0b:2b:91:cb:52:84:71:b9:a4:7a:5f:bb:f7:45:a5:
97:8c:cd:29:5e:ab:1f:39:ba:d4:25:8a:c7:b2:e2:ba:4b:ce:
b4:35:77:55:16:75:8b:e8:8a:16:a5:c9:fb:db:12:d6:8a:42:
17:d3:4c:f6:d1:fa:58:5c:7d:82:22:8a:c4:e4:8a:94:cd:81:
33:2a:b1:50:1f:03:4e:c0:1a:67:ee:e5:e2:24:99:bc:98:6a:
0c:b4:e9:6b:4f:5e:be:ea:95:1f:97:d5:5d:bb:26:a8:db:28:
b6:34:35:9b:18:a5:0e:37:29:29:a0:2e:7b:50:01:6e:f2:3b:
d3:29:cf:f8:c9:a8:5b:bd:ac:33:8a:6a:11:61:ea:2e:bd:3c:
5b:4f:49:2c:3a:2f:64:c9:91:97:43:b1:54:ff:26:f0:0f:83:
34:e0:8c:ae:e1:2f:c5:97:85:77:97:9b:78:7a:d3:d2:ee:70:
72:fc:f3:20:89:15:1a:bf:cb:fc:81:11:5e:d1:27:6b:27:5b:
7a:06:73:f3:8d:51:40:fc:8c:81:35:e0:9f:1e:f2:59:9e:80:
fc:cb:b5:8f:45:d4:66:6f:ee:01:2e:3d:03:b5:0b:ad:79:9b:
22:4d:d4:7b:ae:75:a1:12:a2:db:2e:dc:2d:52:16:b8:3d:9f:
49:c3:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:21:50 2025 by rpki-client