Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OgjE9h3ynXZwy6OiYvMsMIUfsCw.roa
File: OgjE9h3ynXZwy6OiYvMsMIUfsCw.roa (raw, json)
Hash identifier: KldwpBYUzN8zjxfZXRDE3AJuqgBEoD1EgbCSgXtcm0M=
Subject key identifier: 3A:08:C4:F6:1D:F2:9D:76:70:CB:A3:A2:62:F3:2C:30:85:1F:B0:2C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6CDB3507807A82A7874B2968537B4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OgjE9h3ynXZwy6OiYvMsMIUfsCw.roa
Signing time: Wed 01 Jan 2025 21:47:47 +0000
ROA not before: Wed 01 Jan 2025 21:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214136
IP address blocks: 93.114.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 08:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:cd:b3:50:78:07:a8:2a:78:74:b2:96:85:37:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a08c4f61df29d7670cba3a262f32c30851fb02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:7c:16:25:8a:37:1a:40:b3:8c:90:31:3c:
92:4e:38:d6:50:85:41:1c:1e:81:02:9b:b0:6f:21:
13:e8:57:f6:5e:3c:1b:66:71:3d:1d:cd:5f:f1:cf:
2c:7a:02:6d:fa:e0:81:d1:23:7d:b4:68:c1:7b:0a:
77:04:b5:c2:b0:59:4f:11:9b:a2:9d:a8:48:39:f4:
53:df:2a:27:a7:4e:9d:79:18:0c:e8:8d:09:a3:2f:
21:a2:bf:06:0a:5b:50:3f:53:4e:26:2e:e0:db:1e:
7a:45:9c:06:eb:76:22:cd:c1:e7:25:ee:ac:a8:e3:
bc:dd:03:b5:77:81:58:4f:28:e7:00:84:fd:0a:94:
a1:1f:b6:bf:cb:fc:0b:c5:73:28:70:14:0e:7c:ef:
35:c6:6c:f9:75:2d:c1:cf:f1:5b:a5:e5:67:05:b3:
07:27:81:90:ba:fe:f5:3a:94:55:e6:95:5e:96:6e:
35:5a:27:2e:d6:d1:ed:ec:57:29:36:7b:1c:48:f7:
1a:c0:41:ae:c8:a0:68:10:a6:dd:45:26:2c:73:37:
fd:e1:09:ee:78:a9:e0:ca:53:b5:83:4b:80:3c:39:
d4:a4:07:78:59:1d:55:7c:15:c3:bd:e4:c9:a0:5f:
54:bc:de:ea:e6:6d:77:d6:e5:29:8e:90:68:d4:94:
2d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:08:C4:F6:1D:F2:9D:76:70:CB:A3:A2:62:F3:2C:30:85:1F:B0:2C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OgjE9h3ynXZwy6OiYvMsMIUfsCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.88.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f7:6d:08:b2:81:78:da:48:c0:2b:9e:6e:85:39:db:53:f8:
fa:29:00:ac:6d:3c:fb:42:00:e6:4d:39:f7:e3:f1:7c:fb:9f:
61:8f:4d:8b:01:dd:ad:71:0b:18:c5:d6:46:f8:41:0f:63:3b:
62:1b:cf:2d:2d:4e:11:40:11:c0:fb:5a:b2:71:e9:21:1d:8d:
87:12:7b:2a:49:37:ee:14:88:db:3f:17:69:ef:a4:be:47:a2:
6a:57:9d:10:9d:84:34:c6:bf:4a:48:7a:66:27:54:cf:29:0e:
c3:a3:01:30:8b:34:e2:2b:32:7a:0c:45:56:f0:39:a1:b9:47:
fd:88:c3:9b:c5:85:d9:bd:63:1f:0b:d8:7e:63:f9:20:22:55:
52:6e:dd:bd:93:ff:9c:77:a8:fc:9d:d9:5f:0f:47:6e:f3:e7:
13:73:ef:46:9c:69:57:5d:7a:84:f5:42:1a:47:4c:12:7b:73:
d0:f4:18:47:b9:39:f5:83:60:92:40:31:bb:ec:45:6e:2d:45:
6b:cd:96:6d:e5:75:7f:57:53:d7:71:fb:0a:3d:7b:64:54:c2:
64:11:6b:c0:15:68:66:6d:f0:d2:db:01:26:fc:77:4b:3d:26:
09:f6:39:f3:e4:45:cf:37:f5:a9:85:80:37:ca:96:dd:3a:99:
c9:78:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:51 2025 by rpki-client