Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AbegBOgD7spHnYjZp7vTPJCpOIs.roa
File: AbegBOgD7spHnYjZp7vTPJCpOIs.roa (raw, json)
Hash identifier: JBcw5nRCfhpJ6sdfISNwNKpg+gBh1OWteU8r22HM7Pw=
Subject key identifier: 01:B7:A0:04:E8:03:EE:CA:47:9D:88:D9:A7:BB:D3:3C:90:A9:38:8B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01963B426ACC236F3ADE434002E81D553D98
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AbegBOgD7spHnYjZp7vTPJCpOIs.roa
Signing time: Tue 15 Apr 2025 21:02:10 +0000
ROA not before: Tue 15 Apr 2025 21:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62904
IP address blocks: 85.93.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 13:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:42:6a:cc:23:6f:3a:de:43:40:02:e8:1d:55:3d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 15 21:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01b7a004e803eeca479d88d9a7bbd33c90a9388b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:3a:90:4a:3c:b3:50:39:4b:12:9e:08:7e:
9d:9e:4c:a4:b2:7f:4c:ea:be:83:74:9d:20:9d:ec:
58:c1:3e:cd:e7:5c:df:0c:92:7f:c3:0c:7a:1d:1d:
b6:d5:ed:4d:6e:97:71:6a:27:8a:48:59:55:5d:54:
ec:40:6c:8c:47:1e:5d:9b:4e:65:ad:38:9f:f7:69:
76:51:3c:a8:3c:8a:1f:da:a9:81:ff:0b:00:c2:d2:
9d:ec:cd:04:4b:96:d2:63:c2:f5:d6:34:30:16:29:
b3:ec:6b:6b:96:cd:fc:bb:1b:fd:79:7c:1b:05:fd:
40:04:42:78:94:4f:67:dc:b9:07:cb:e4:f8:14:77:
0d:2f:d8:25:cc:04:e4:09:c4:3b:01:e1:d0:60:bb:
da:93:f6:eb:5e:ab:69:fc:56:28:4e:ae:e4:03:1b:
a6:ee:e8:d7:b9:41:d0:eb:60:0c:f4:10:ac:40:2d:
4c:98:e5:e6:12:79:72:6b:34:db:e5:38:b7:12:bd:
6a:62:f7:fa:51:1d:69:96:5b:55:21:cf:ae:8f:dd:
42:a7:83:4d:ca:c0:99:49:0d:b6:28:3f:3e:78:f7:
4f:30:40:a0:43:72:df:99:43:84:ca:59:ed:9b:f4:
19:36:27:41:80:0d:fb:af:2e:3e:7f:89:2b:d4:02:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:A0:04:E8:03:EE:CA:47:9D:88:D9:A7:BB:D3:3C:90:A9:38:8B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AbegBOgD7spHnYjZp7vTPJCpOIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.20.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:da:47:2a:94:c8:a3:28:e4:ad:cc:0a:b2:9e:56:a3:bf:95:
00:26:5c:31:0c:92:5c:96:fd:74:48:42:b9:d3:dd:0b:d0:33:
9b:ae:17:da:a2:db:15:72:65:df:62:e9:25:f4:fb:52:b6:ea:
73:18:56:e1:6b:bb:68:42:d5:77:18:b2:53:67:53:3c:c6:a6:
e1:97:91:f2:9b:54:ca:2a:79:19:80:5b:2f:89:d8:fa:f9:b4:
9c:58:60:db:03:d7:23:56:a9:c9:98:14:83:d1:14:a5:d8:be:
88:bb:cd:98:65:46:54:46:73:4c:ba:1e:46:be:61:24:3e:91:
ac:65:75:9c:1a:a9:74:8c:e4:c2:b5:8d:b1:8c:e5:2a:68:73:
86:e7:c5:56:7f:b4:e0:77:33:c6:d1:a2:46:aa:01:0c:b5:93:
89:ce:13:a2:29:2d:e9:3b:9c:b0:17:4e:cd:fe:71:87:01:ed:
3b:a0:6e:18:82:25:45:36:1e:a8:0f:cd:9a:03:77:3c:75:5c:
35:1b:cd:49:7e:b0:13:f7:f9:e5:7c:1e:3c:5e:a4:3a:e2:2d:
2a:52:6d:cd:8f:62:bd:ce:b5:26:11:4c:58:9c:11:70:ab:9c:
7b:35:d6:b4:3a:89:9f:d2:36:79:75:ad:1f:e3:82:d4:ff:54:
cd:a5:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:44:45 2025 by rpki-client