Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wE9tnhPYu6wDdOzHP27JLm8j_7k.roa
File: wE9tnhPYu6wDdOzHP27JLm8j_7k.roa (raw, json)
Hash identifier: uH0DakNf1/lPbuKYQziiQOGUsGzCmMPRf5P1G2PHOyg=
Subject key identifier: C0:4F:6D:9E:13:D8:BB:AC:03:74:EC:C7:3F:6E:C9:2E:6F:23:FF:B9
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0194CC8EEE21E89B89CC7E333A8D68F35CDF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wE9tnhPYu6wDdOzHP27JLm8j_7k.roa
Signing time: Mon 03 Feb 2025 16:05:06 +0000
ROA not before: Mon 03 Feb 2025 16:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:8e:ee:21:e8:9b:89:cc:7e:33:3a:8d:68:f3:5c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 3 16:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c04f6d9e13d8bbac0374ecc73f6ec92e6f23ffb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:e4:cd:dc:c8:1b:00:da:87:de:51:17:32:
be:dd:f0:3d:11:52:7a:3e:ac:9b:e4:cd:59:13:f0:
f6:ec:2a:30:b3:04:5d:16:06:f4:dc:ed:e6:7a:a0:
66:f5:7b:bf:d6:6c:38:b2:57:a9:c2:8f:ae:d9:b4:
2b:ac:26:1d:c4:b3:13:36:7c:51:08:fd:92:e9:7d:
c9:46:8e:1c:27:f4:9e:b8:09:cd:6b:20:c9:2d:77:
6f:8c:43:b4:41:08:70:18:1e:78:f8:0a:e9:69:20:
32:2a:97:eb:0b:a8:7d:17:22:03:26:ae:ef:73:5a:
d9:84:e6:a9:a8:d6:33:74:b0:11:e4:d9:0a:14:81:
b0:4d:85:c8:4e:f2:55:a2:e4:7c:0c:a4:1c:f6:ef:
42:fe:79:f5:f0:1a:5e:89:5a:76:df:68:f4:ad:b6:
17:83:e5:14:7a:b7:e4:df:91:0a:fc:81:c6:37:b7:
3e:78:42:63:da:7e:67:4f:d9:14:1b:fa:22:62:c3:
66:9b:28:07:80:90:18:7c:75:c8:89:08:81:5b:5f:
50:fe:77:4b:6b:bb:d2:b9:b2:89:8f:a6:d1:44:ec:
0c:ee:e2:e8:b6:7b:a9:ab:0d:02:2e:3c:15:66:e3:
26:6e:df:d9:73:a8:83:49:31:e7:92:f3:ae:23:3d:
c5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4F:6D:9E:13:D8:BB:AC:03:74:EC:C7:3F:6E:C9:2E:6F:23:FF:B9
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wE9tnhPYu6wDdOzHP27JLm8j_7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
43:34:64:e5:68:50:f2:c5:67:b0:11:60:8f:b9:9c:91:ce:c6:
66:ba:81:dd:79:99:90:45:5c:a5:1b:33:a5:e6:35:ad:c8:e8:
54:44:73:74:4e:ba:e6:95:ef:37:8b:77:af:14:b6:a9:9f:6e:
a0:04:8a:95:cc:b2:22:61:01:f6:2d:fe:ba:55:7c:da:98:87:
df:59:03:3a:eb:2c:90:e4:15:6f:8f:27:67:2d:bf:cf:94:e7:
e0:4b:2d:58:92:7b:fd:1c:cf:7c:bc:0e:9f:13:7a:8c:a6:36:
bb:30:3a:b8:45:c9:5f:63:8d:af:31:1d:a5:09:da:44:c4:82:
ba:bc:e4:33:61:16:bf:1e:b5:1f:38:c7:b3:76:4e:0a:0c:1f:
a8:28:b5:34:cf:26:b3:0b:19:58:da:d6:f4:d7:b5:74:a8:46:
3e:30:33:0c:e5:9f:22:34:00:34:35:e2:4a:9e:20:d9:a8:d4:
8b:eb:47:f7:03:7a:4d:50:74:8a:47:67:91:7b:66:90:e8:17:
8f:b2:07:c5:ad:db:ee:8e:af:d5:48:4d:ab:9e:77:72:0a:24:
83:92:97:a9:50:32:4b:0b:7a:b6:00:18:fb:14:33:61:b3:fd:
ad:e0:7f:70:d6:83:02:f6:3d:9b:3a:6b:3a:e7:31:a7:43:a8:
06:ac:93:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:37 2025 by rpki-client