Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/ffjXMlfZPORG51-WyvK47yNxWj4.roa
File: ffjXMlfZPORG51-WyvK47yNxWj4.roa (raw, json)
Hash identifier: R6nA8kN7OTFCEAjSbq24itNG9Tunla+LqY9epODwK6c=
Subject key identifier: 7D:F8:D7:32:57:D9:3C:E4:46:E7:5F:96:CA:F2:B8:EF:23:71:5A:3E
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01951BE6C26FEE1E07F3B8997C87C9FF3E98
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/ffjXMlfZPORG51-WyvK47yNxWj4.roa
Signing time: Wed 19 Feb 2025 01:51:02 +0000
ROA not before: Wed 19 Feb 2025 01:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213175
IP address blocks: 93.179.67.0/24 maxlen: 24
93.179.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 17:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1b:e6:c2:6f:ee:1e:07:f3:b8:99:7c:87:c9:ff:3e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Feb 19 01:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7df8d73257d93ce446e75f96caf2b8ef23715a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:91:1e:f5:73:3e:30:0e:a9:5e:ad:63:a3:
ae:0b:3f:c7:52:ee:5c:97:4c:1d:78:69:5d:6d:1a:
0d:3c:bc:2e:86:4a:d4:46:cc:01:3f:58:c4:7c:7e:
5f:00:7b:b8:b9:90:f2:5c:36:06:00:cc:7e:81:a2:
e4:eb:c8:ec:10:db:68:ef:10:ed:8e:34:8f:95:b2:
74:6f:bd:e5:f1:58:f7:3a:28:f9:38:17:bb:96:03:
0d:8c:b7:db:12:3b:79:04:75:14:1b:2c:67:36:87:
f0:33:b5:67:ec:20:6e:8c:79:7a:c7:2a:30:cb:08:
e5:be:d2:45:9c:6a:a7:cb:4a:d2:d4:7c:18:a2:e6:
c6:c8:b6:88:e3:8e:5c:b6:6c:31:e8:4c:88:04:2e:
92:e9:ca:f3:6e:8f:0f:02:68:29:22:99:38:78:7f:
59:62:d3:42:15:a6:da:5b:ae:f6:f4:65:c8:71:aa:
ad:f9:d0:50:2c:a6:cf:51:5d:9c:44:48:b3:21:39:
eb:cb:8e:f5:4f:9e:1a:18:e1:0f:29:5d:18:4a:02:
1f:7b:89:e7:be:ed:0e:50:13:58:ef:c1:95:67:19:
2d:b1:42:ae:6e:a5:b7:64:25:d7:01:59:16:ec:17:
7c:83:b3:14:08:24:5b:a0:9d:4b:bb:1a:09:6e:12:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F8:D7:32:57:D9:3C:E4:46:E7:5F:96:CA:F2:B8:EF:23:71:5A:3E
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/ffjXMlfZPORG51-WyvK47yNxWj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.67.0/24
93.179.93.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6f:22:7f:79:0d:99:ce:01:6e:ab:30:dd:5d:06:47:fd:c5:
3c:cc:4e:4d:f9:67:3e:2f:02:84:af:1f:38:6a:77:60:94:95:
9b:dc:81:c2:21:1d:17:98:b8:7f:25:82:67:63:a8:a7:99:4f:
02:64:2e:83:3c:ef:33:41:ff:e5:a6:d6:cc:dc:c9:e2:58:0e:
0c:ee:a1:97:56:07:2d:55:69:ec:9b:08:9d:91:23:5d:0e:3b:
13:e9:c3:8e:23:fc:9a:60:66:65:9e:ca:56:4d:bd:15:ea:25:
a2:38:12:8e:92:7f:9c:05:7d:16:5b:f3:b4:a4:29:c4:a0:98:
43:fd:65:02:20:06:f1:3f:29:8a:05:b0:e6:b0:ad:cb:4f:8f:
4a:4a:e6:c8:bb:af:e3:b5:8c:30:25:a4:86:27:4b:db:00:ae:
55:7e:fd:56:73:21:50:af:ad:20:82:22:22:2e:8b:18:3a:01:
36:4e:4d:ac:f9:af:52:c2:9f:e3:29:88:9c:6c:a3:17:b8:7a:
6a:ac:0d:0e:e7:2f:bb:9d:ae:46:75:4a:3c:1f:9d:a7:2a:ec:
a0:b7:69:b3:e0:6a:15:85:2a:5c:2b:69:ec:a2:c8:61:61:d3:
4b:3a:5b:d0:79:8b:8c:bd:e3:02:ea:67:70:5b:a7:a4:dc:cf:
7d:6b:32:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:29:38 2025 by rpki-client