Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/w59UMrlmzVllvVgGRWQ_vSpYF6M.roa
File: w59UMrlmzVllvVgGRWQ_vSpYF6M.roa (raw, json)
Hash identifier: hcdRSGCpxKofH7nWAw8qkvVe3AWblmR5ykQLPOO4HaQ=
Subject key identifier: C3:9F:54:32:B9:66:CD:59:65:BD:58:06:45:64:3F:BD:2A:58:17:A3
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0196B31F3B004FD1830C7034B594190DF162
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/w59UMrlmzVllvVgGRWQ_vSpYF6M.roa
Signing time: Fri 09 May 2025 03:38:10 +0000
ROA not before: Fri 09 May 2025 03:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.42.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 18:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:1f:3b:00:4f:d1:83:0c:70:34:b5:94:19:0d:f1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: May 9 03:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c39f5432b966cd5965bd580645643fbd2a5817a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:aa:f5:97:30:47:25:09:a4:30:24:b5:f6:
b4:1a:34:76:5f:93:0b:3f:d8:a9:8c:56:4d:6a:6e:
46:00:36:9d:9e:e6:3a:dc:87:71:5a:d6:2b:80:cd:
71:34:87:40:26:60:a1:5b:dd:d1:ab:cf:33:4a:3b:
f7:e1:8d:e5:cc:98:d2:38:d5:89:6e:f0:11:72:b1:
cf:d1:9d:59:bd:b0:ca:35:a2:d8:c5:4b:be:cf:68:
41:e2:aa:22:76:3e:b0:4f:c9:b4:4e:74:52:44:c0:
c0:3d:4e:a7:16:cb:f4:6b:29:5e:34:01:78:fe:9e:
31:51:e1:65:71:d9:7e:26:ae:6d:b5:98:11:5d:8b:
6d:31:88:bb:d5:99:16:8e:29:09:de:36:53:b6:d1:
9c:85:08:c2:14:d6:89:1b:70:25:f8:7a:5b:52:58:
08:7f:32:1a:dd:66:55:a1:ad:d1:d3:38:b7:be:e3:
2f:0b:f4:4f:30:dd:9a:ce:a0:3d:01:73:9e:95:f6:
fc:12:5c:da:93:81:6e:5a:1d:3d:69:3d:c8:3b:35:
92:31:7f:2f:94:10:22:72:fe:f8:97:25:dc:7b:a0:
2c:f9:c2:57:60:cc:1d:91:6e:10:fa:96:0f:ec:95:
87:79:d5:12:93:5e:31:8e:ca:21:e7:bc:5d:75:59:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9F:54:32:B9:66:CD:59:65:BD:58:06:45:64:3F:BD:2A:58:17:A3
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/w59UMrlmzVllvVgGRWQ_vSpYF6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.42.87.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:31:6d:1c:09:74:b9:62:85:ae:ad:b1:3d:8c:38:25:89:25:
b5:0f:f6:4c:75:04:e6:47:da:99:78:07:1e:15:1e:76:7f:d1:
15:68:4a:dc:a6:28:ad:38:3a:53:81:ea:c0:b5:a6:d3:d7:8f:
99:3c:8e:33:9f:e8:36:8d:fd:94:0f:bb:c7:c5:59:73:20:b1:
44:33:02:16:0e:9c:f4:2b:25:28:7c:24:4d:2a:3a:17:94:29:
b3:92:90:bc:39:3f:6a:5c:b2:6c:c5:03:82:b0:d8:1c:30:d0:
97:82:b4:52:f8:0e:3c:27:69:f9:a1:93:c5:76:2e:fb:0a:bd:
07:35:c9:df:a0:a3:dc:00:9e:d1:e5:d9:15:93:50:79:d4:c9:
60:18:f6:17:e0:ec:d6:bd:7e:20:00:16:44:34:e4:78:51:ac:
53:60:c1:7d:9e:54:d9:24:d7:e7:78:3f:29:6e:e0:1d:b6:32:
6a:6d:12:82:65:52:c4:fc:91:ba:59:d5:cb:4e:d6:e2:30:db:
9d:b9:f4:46:c8:4f:8c:6f:1b:c6:d7:cd:d1:40:c3:dd:1c:7c:
a3:8a:1b:cf:99:be:7f:fe:d7:df:9d:6f:1f:ef:a9:f2:ec:9f:
be:26:46:03:bf:57:72:8c:9f:71:99:58:79:51:91:c2:d5:ba:
65:c8:43:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:10:28 2025 by rpki-client