Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wQag-0NY2EXDLeifgx1oPlwLVik.roa
File: wQag-0NY2EXDLeifgx1oPlwLVik.roa (raw, json)
Hash identifier: ZkGMpC7OK4Z7r2y6LptoWG+bKNzeW25AMVfDdJvH14w=
Subject key identifier: C1:06:A0:FB:43:58:D8:45:C3:2D:E8:9F:83:1D:68:3E:5C:0B:56:29
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6B541B1FC8861D82C049BADD4E3CF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wQag-0NY2EXDLeifgx1oPlwLVik.roa
Signing time: Wed 01 Jan 2025 21:47:41 +0000
ROA not before: Wed 01 Jan 2025 21:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 89.33.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b5:41:b1:fc:88:61:d8:2c:04:9b:ad:d4:e3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c106a0fb4358d845c32de89f831d683e5c0b5629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:29:91:22:3f:0a:86:0e:2d:cf:6f:d3:ea:
97:9e:fa:4f:42:3b:ed:ed:c6:09:b6:14:7d:69:02:
a5:9b:3f:31:1c:17:72:4b:6b:85:cb:82:78:39:26:
5e:25:20:f3:af:e5:22:4b:be:01:40:1a:91:8d:33:
76:2d:70:6e:82:a2:a0:bf:18:97:98:70:20:26:1f:
d6:f9:1f:57:6d:bb:b6:02:5b:26:b4:bf:da:5c:9e:
ff:41:fd:f3:a1:5e:34:54:fc:ae:64:a4:b1:fe:1d:
43:16:e2:1c:cd:8f:2a:ef:f1:09:6c:a4:45:9a:15:
8a:64:88:93:2a:e1:94:5a:5b:be:02:8d:a9:e8:63:
bf:c8:92:26:4b:87:87:a2:a2:bb:e9:57:ff:72:8c:
f9:f1:d8:6a:89:08:d8:00:c4:ed:e7:14:ca:01:b7:
d0:4e:67:85:62:1e:df:36:ad:cd:18:55:bb:e1:84:
26:e1:58:30:42:37:e6:5f:4e:4b:22:14:4b:a1:8e:
fd:9a:b2:cd:77:7d:55:0b:2f:ea:85:2f:76:32:22:
f5:8e:e5:43:8b:5b:ce:85:dc:c7:7e:ec:ce:b9:2b:
79:fb:c1:7f:e3:31:c5:2a:e1:8a:9e:4a:40:d8:af:
93:b2:41:ed:3a:d2:78:82:35:39:cf:89:db:f8:f8:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:06:A0:FB:43:58:D8:45:C3:2D:E8:9F:83:1D:68:3E:5C:0B:56:29
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wQag-0NY2EXDLeifgx1oPlwLVik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
Signature Algorithm: sha256WithRSAEncryption
59:be:e6:ca:94:a7:e4:c7:a4:65:ef:64:a1:d1:52:5b:47:be:
0e:cd:53:ae:6f:a2:ec:fd:c3:26:1e:d4:56:fc:f2:d0:bd:93:
88:bc:b1:85:3d:58:8c:c7:2c:47:d1:b6:c4:20:f1:6a:05:27:
f3:59:15:09:86:50:43:71:5a:a9:18:31:92:8a:fa:88:86:56:
eb:8b:ef:64:24:0c:ea:2e:05:97:9d:55:b6:2f:49:e4:da:b9:
e1:b1:e9:34:c8:3a:f2:b9:c0:fd:f0:5c:92:7f:e3:41:f6:ea:
be:b7:30:73:6c:21:90:38:ef:c7:51:e3:6f:a8:d0:4b:d4:dd:
9b:6a:38:d5:86:93:56:53:b1:29:34:3e:20:68:b8:1d:f3:fe:
12:e8:1a:c3:8f:76:8b:d1:50:a4:2b:72:77:b2:be:bd:ee:f9:
70:53:77:44:52:a6:64:85:78:19:8d:4e:8c:7c:92:eb:be:6e:
f0:8e:cc:be:dd:43:97:28:a1:8b:cd:92:67:17:46:3b:c1:39:
b2:55:09:97:67:a4:23:60:37:cf:d6:4c:33:9f:46:84:22:14:
7a:12:e0:55:40:4d:ce:b4:be:30:ba:fc:a3:bc:6b:e7:9c:94:
5e:4b:2e:d1:68:f5:4d:d6:ea:61:1c:8e:13:26:cb:76:22:c2:
6b:aa:20:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:19:06 2025 by rpki-client