Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/IgbBQu1NPXJn2X4eNPBU560WTj0.roa
File: IgbBQu1NPXJn2X4eNPBU560WTj0.roa (raw, json)
Hash identifier: yt6yJ5GJ32RTu1uPAgeY4kwx0OKhJOPuBineJYmrGDU=
Subject key identifier: 22:06:C1:42:ED:4D:3D:72:67:D9:7E:1E:34:F0:54:E7:AD:16:4E:3D
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0194B0EBBD099CC4006FE9283DB62A71AAA5
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/IgbBQu1NPXJn2X4eNPBU560WTj0.roa
Signing time: Wed 29 Jan 2025 07:17:06 +0000
ROA not before: Wed 29 Jan 2025 07:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 93.114.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 07:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:eb:bd:09:9c:c4:00:6f:e9:28:3d:b6:2a:71:aa:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 29 07:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2206c142ed4d3d7267d97e1e34f054e7ad164e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:21:31:eb:b1:e9:63:5e:9b:02:7e:63:71:
5a:95:f5:2b:73:87:78:a0:bc:69:fb:20:98:6e:13:
e3:c2:f4:65:ba:13:58:56:6f:23:4f:a4:8e:f5:b8:
01:78:8d:f7:1f:06:15:f5:ee:c7:bb:85:e6:3d:5d:
7a:ea:95:f9:93:5d:98:a3:f0:75:26:bd:74:d1:b5:
4e:ff:eb:c0:0a:25:34:4e:0c:14:84:3f:19:4e:5e:
20:c2:35:0b:d6:b4:95:f9:1f:6c:5f:02:ae:9e:a6:
70:c5:13:e4:3b:ad:78:62:3a:be:f9:15:2c:56:67:
68:5e:27:73:04:ce:bd:8d:3b:f0:ec:8f:76:47:3c:
ad:1b:1f:47:9c:f6:7c:a3:dc:e2:62:b5:a4:21:18:
a1:ee:14:c2:94:95:74:26:55:ef:e5:7f:b6:8d:35:
f4:5c:7b:fc:c7:ff:5e:6a:b5:40:53:bc:d5:1f:11:
b2:52:87:91:6b:c0:5a:ae:c3:14:25:0f:23:a4:8b:
2c:ba:bc:84:9c:30:73:9a:2b:48:8f:18:49:48:1a:
87:36:5d:2e:93:80:b1:6c:0c:d9:df:b4:1f:18:b6:
2a:26:1c:cc:45:09:6c:57:34:a9:a8:ae:8a:85:d1:
1d:41:01:b1:2a:0e:69:ff:e0:bb:1d:34:fd:c0:91:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:06:C1:42:ED:4D:3D:72:67:D9:7E:1E:34:F0:54:E7:AD:16:4E:3D
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/IgbBQu1NPXJn2X4eNPBU560WTj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.88.0/24
Signature Algorithm: sha256WithRSAEncryption
65:85:ae:2e:48:8b:ab:79:c0:91:cf:6c:0b:61:ac:55:42:26:
6e:c0:eb:69:8b:4e:38:f0:e1:a0:1f:fd:7b:3d:97:2f:a2:e3:
c2:5b:60:67:28:7b:e1:3c:b8:2f:fa:52:6c:d8:a0:c1:72:8c:
26:6f:d3:b5:e1:89:92:67:0f:5a:6a:48:e6:f3:c6:a9:cc:20:
ec:db:87:07:b4:6d:0d:87:0b:be:1c:25:29:5f:38:37:75:a2:
32:c1:56:8c:e4:f7:0e:84:2e:26:69:bf:73:93:a9:6d:15:20:
6b:9f:b7:61:fa:51:47:4e:2a:35:16:4b:db:fa:7c:73:27:9f:
0f:7c:05:0c:08:5b:c5:44:5c:73:30:6e:f4:23:16:88:a6:7c:
c9:9d:dc:6b:08:d4:4a:47:8e:0a:0e:df:ec:1f:48:91:8d:da:
73:0f:2e:6d:dc:6a:6b:8c:ef:0c:9a:20:d7:0c:da:0e:55:be:
2f:50:c8:cb:96:6b:b8:7b:43:9c:58:e1:9b:2d:22:4e:02:4e:
ce:36:77:03:32:02:c0:e8:af:86:b2:0a:4f:05:75:d8:d1:c7:
9f:f2:a2:a5:17:7e:83:5d:b4:a8:bf:23:cd:5b:52:ab:d6:53:
d3:a1:9a:10:61:7c:dc:89:cb:ec:52:88:23:bb:07:16:ca:cc:
90:b6:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:19 2025 by rpki-client