Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/L-nMfehm18Vg5rObkMsBgV9WsHE.roa
File: L-nMfehm18Vg5rObkMsBgV9WsHE.roa (raw, json)
Hash identifier: alBEf5KSwT1tCRd/SQmr4FO18veO09OeGXOzDqbTuR0=
Subject key identifier: 2F:E9:CC:7D:E8:66:D7:C5:60:E6:B3:9B:90:CB:01:81:5F:56:B0:71
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 018CC7276439EC1AC9F5C4BB4EEA0EA27402
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/L-nMfehm18Vg5rObkMsBgV9WsHE.roa
Signing time: Mon 01 Jan 2024 22:31:36 +0000
ROA not before: Mon 01 Jan 2024 22:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57559
IP address blocks: 93.180.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 13:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:64:39:ec:1a:c9:f5:c4:bb:4e:ea:0e:a2:74:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fe9cc7de866d7c560e6b39b90cb01815f56b071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:d5:6a:9b:d4:25:af:ee:6d:35:98:55:02:
48:d5:a5:41:c4:0e:3f:5e:43:e3:cc:76:ea:62:a0:
e7:69:b7:e0:7f:87:4e:9b:64:fc:ca:59:dd:01:79:
15:66:6f:cf:29:13:c0:01:c7:96:6f:cc:f9:9c:1e:
a5:4d:48:38:65:fa:0e:ba:8b:bd:7e:1f:d4:53:06:
a2:3d:d1:e8:91:e0:65:89:9d:c7:7e:b7:74:00:87:
43:60:c0:0d:3f:99:2b:60:39:1d:87:95:e0:1c:e8:
00:6c:ac:fb:00:61:11:00:ab:38:81:4b:69:3b:1d:
76:26:7c:3c:bd:2d:94:46:24:e3:63:74:8b:d0:ee:
23:19:7a:2d:85:66:c0:2c:05:66:75:1d:db:df:47:
81:72:79:41:a4:4a:26:b4:b7:97:8d:f3:79:ee:1e:
66:97:9c:e6:2b:5f:83:74:93:e2:ee:ff:ad:61:a4:
80:42:54:0e:e0:5d:52:66:46:e7:a2:11:33:01:82:
77:95:6c:fe:62:87:2e:6f:d6:6e:b6:be:db:e6:6a:
c0:63:c0:f5:b3:f4:97:ca:a7:ed:ed:1b:40:b3:b5:
ca:f0:6b:cf:86:2e:77:4c:e5:72:41:82:7c:1e:df:
92:22:c7:90:32:28:82:bd:be:97:46:98:9f:fe:41:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E9:CC:7D:E8:66:D7:C5:60:E6:B3:9B:90:CB:01:81:5F:56:B0:71
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/L-nMfehm18Vg5rObkMsBgV9WsHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.88.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9f:cf:62:8d:5e:cd:0b:04:fa:83:57:e0:f5:75:31:a4:ea:
a4:b5:5f:da:c2:6e:6a:c1:dc:e1:fc:65:d0:13:25:53:bd:cc:
d7:fc:39:63:9a:92:9d:3a:16:91:39:0c:9d:b0:19:43:3d:8d:
45:b2:0c:8b:db:5e:7e:b4:38:f2:99:e5:0e:3e:1b:c5:82:40:
1c:75:59:55:68:3a:68:2b:0c:fe:46:7f:b5:e9:df:b6:87:82:
ef:d2:a5:f4:0a:35:34:79:b5:75:2a:d4:03:d5:c0:ba:f6:f3:
a9:18:e3:90:1e:47:05:a2:dd:08:27:bb:b1:be:11:4e:52:02:
8b:24:5f:5d:37:a4:ae:7e:1f:3f:7a:6a:7a:a8:c7:3c:7e:b9:
e9:4f:b6:24:de:fb:82:31:05:2e:7b:85:18:99:0b:27:40:47:
9a:76:18:ef:4e:52:ad:bd:04:ff:b1:e6:ec:65:6d:c6:41:d2:
cf:aa:9d:f2:b2:a5:48:c4:29:37:83:c4:aa:ab:dc:eb:48:03:
93:5e:c6:34:0f:19:71:04:c7:e8:ba:14:81:67:6b:64:fe:17:
86:cf:6f:6d:32:29:62:07:c6:a5:1a:fe:3e:e3:e1:ce:df:97:
7f:9e:3e:d6:37:fe:19:7b:57:40:20:3b:d4:cb:cd:e4:cd:29:
e7:cb:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 16:06:19 2024 by rpki-client on console.sobornost.net