Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/ohyErou3JfYrHi5yXOX-TfTA9l8.roa
File: ohyErou3JfYrHi5yXOX-TfTA9l8.roa (raw, json)
Hash identifier: mERzn/RY/GSCEgB/c/Dnv7iFQEIY5tjAmMcdmxxXXNs=
Subject key identifier: A2:1C:84:AE:8B:B7:25:F6:2B:1E:2E:72:5C:E5:FE:4D:F4:C0:F6:5F
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 018DEAB2461E74070BC551FE0DD741EC375E
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/ohyErou3JfYrHi5yXOX-TfTA9l8.roa
Signing time: Tue 27 Feb 2024 13:12:48 +0000
ROA not before: Tue 27 Feb 2024 13:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57559
IP address blocks: 93.180.88.0/24 maxlen: 24
93.180.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ea:b2:46:1e:74:07:0b:c5:51:fe:0d:d7:41:ec:37:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Feb 27 13:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a21c84ae8bb725f62b1e2e725ce5fe4df4c0f65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7c:36:98:82:69:a2:f2:cb:58:2f:52:59:3c:
7b:46:e3:78:6c:7e:44:cb:64:a5:56:3c:dc:83:94:
eb:3b:84:94:54:d4:e0:d9:bb:7d:a6:14:99:43:ae:
3e:11:49:c8:eb:09:7c:fd:49:d7:a7:45:d8:0e:e4:
68:3b:79:49:30:1e:b9:bd:14:07:e7:cc:2a:46:87:
14:d7:4e:c2:2d:92:df:59:3b:03:9b:4f:ed:c5:63:
cb:b3:e1:bb:ea:04:24:99:25:dc:57:23:2f:e7:90:
a5:f5:a0:9c:7a:0c:3b:06:28:00:a2:1d:06:26:db:
c4:31:72:fc:a8:be:84:cf:1a:b1:3c:8b:62:09:c2:
3c:4f:b1:98:a1:df:0f:41:2c:be:ff:b0:42:f4:8b:
5d:93:ed:cc:00:0b:81:1e:19:d2:db:2d:e4:f4:bd:
77:cd:41:1c:9d:26:65:9b:c4:8a:ae:5e:97:39:2c:
73:e0:97:b6:ad:5b:f0:a5:7f:3f:90:88:0d:44:71:
b5:2a:b5:ee:32:19:6c:7c:23:e2:21:1b:9a:b7:42:
80:d3:2a:25:1e:c9:ac:ab:ec:f6:e2:72:96:7c:3a:
d9:ca:fc:cf:3f:10:b6:1f:c4:42:96:20:6e:44:e7:
4d:fe:e6:e4:60:ad:d2:ea:7f:bf:dd:5d:63:49:89:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1C:84:AE:8B:B7:25:F6:2B:1E:2E:72:5C:E5:FE:4D:F4:C0:F6:5F
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/ohyErou3JfYrHi5yXOX-TfTA9l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.88.0/24
93.180.94.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:87:56:03:ad:fc:ea:59:64:44:ab:07:2e:63:7a:d5:f6:01:
6c:9a:74:17:51:42:0c:1b:55:02:56:55:05:b5:07:08:de:29:
6a:e0:15:75:90:06:c0:a6:a9:7e:71:43:9c:06:8f:56:94:34:
86:19:3a:b2:b6:43:d2:e2:86:b0:42:8f:84:9f:9d:dc:60:16:
07:30:13:0b:f6:a6:0d:2c:25:14:3a:13:ee:fa:5f:92:7f:5b:
10:01:f8:cb:1d:02:37:22:d6:c7:4c:68:3b:95:7c:dd:cf:0a:
fe:f0:40:11:7e:67:8f:f1:52:8b:ec:ec:c2:88:f3:27:7b:09:
2f:01:ab:ef:e2:06:ff:b5:be:fe:9a:0a:09:fc:28:6d:c6:71:
76:e3:f9:b7:a9:26:ae:c8:75:a3:99:de:90:a3:f1:d4:4b:e1:
c8:6f:cf:3a:ca:f5:7e:66:d7:f3:c7:eb:88:00:7f:d9:45:f6:
a9:b2:1d:05:c6:a5:79:1e:84:48:ab:ca:9d:57:c8:ca:95:70:
cc:9a:4a:78:42:d1:ed:69:70:c6:8a:cf:ac:f3:62:0a:6f:ac:
a5:8e:7c:6c:8d:80:b0:97:56:c4:08:f3:24:4c:a8:d5:21:65:
4b:40:81:8b:18:64:f0:c1:60:7e:b2:ce:0c:2c:af:37:71:57:
8a:3e:35:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:24:22 2025 by rpki-client