Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DyjfFoZLeX9czarBvgclJ40ZRBI.roa
File: DyjfFoZLeX9czarBvgclJ40ZRBI.roa (raw, json)
Hash identifier: TzbQrExf+97pz196e0lNnr6bjgFYeXQ0xdSK/0akgvw=
Subject key identifier: 0F:28:DF:16:86:4B:79:7F:5C:CD:AA:C1:BE:07:25:27:8D:19:44:12
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0197AFBCE932F340D5EB2B76C1E52B25651F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DyjfFoZLeX9czarBvgclJ40ZRBI.roa
Signing time: Fri 27 Jun 2025 04:54:42 +0000
ROA not before: Fri 27 Jun 2025 04:54:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56913
IP address blocks: 93.113.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 06:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:af:bc:e9:32:f3:40:d5:eb:2b:76:c1:e5:2b:25:65:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 27 04:54:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f28df16864b797f5ccdaac1be0725278d194412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:11:31:7e:ee:76:fb:7e:8d:d4:90:71:6f:
22:52:5b:1f:03:a5:ec:41:10:13:f3:92:ab:67:d2:
7b:45:7f:4d:d2:a6:fe:e1:20:ab:d5:9e:7f:71:3b:
c4:6c:4f:7e:e9:cd:fc:d8:94:92:7c:b5:7e:ef:e2:
90:32:10:56:7a:48:1f:82:97:e4:28:92:30:41:66:
ff:6d:02:74:f1:35:c2:71:02:d8:d3:90:01:77:9b:
7d:d2:18:64:fa:fb:76:82:ec:7b:54:e5:a7:66:c0:
14:18:52:81:9e:6c:48:70:91:32:85:b0:eb:d2:e2:
2f:56:d4:e3:f7:d9:32:56:60:e1:1c:cf:26:0a:1a:
99:0f:3c:39:49:d1:bd:d0:67:1f:e1:f9:a3:1b:ac:
cf:96:3d:e1:ab:b3:52:a6:ea:56:98:f2:fe:da:3e:
03:88:c0:50:eb:fa:28:24:1c:35:86:cc:72:bf:3f:
e1:51:f6:38:52:41:4e:f2:8b:c6:51:c7:03:de:84:
e5:53:d0:f8:f5:a1:b1:55:32:3e:68:a0:03:f9:fb:
67:fd:a2:91:2f:86:0e:14:ec:8f:83:ad:4f:ab:bf:
6c:cf:8e:62:c0:5d:68:89:8f:b4:8c:08:21:64:0f:
ba:a5:cd:8a:7d:c2:06:ac:9b:81:66:ad:1b:c4:8b:
a8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:28:DF:16:86:4B:79:7F:5C:CD:AA:C1:BE:07:25:27:8D:19:44:12
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DyjfFoZLeX9czarBvgclJ40ZRBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.177.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a8:ba:87:10:af:32:e4:11:2f:59:18:c6:56:85:14:be:07:
18:9a:2d:36:a7:52:cb:2b:c9:51:8a:6b:d3:4b:25:e2:e4:34:
6b:0b:57:7d:25:0c:e1:b5:ea:07:df:12:81:ea:66:ff:3a:3b:
9d:44:80:aa:05:d3:ac:a8:de:3b:c7:76:57:64:c3:51:5d:d5:
82:b0:16:dc:52:22:62:bc:22:2f:8f:76:1a:00:8f:2d:8e:51:
fa:f1:8f:b7:31:58:8a:4c:56:0e:34:92:17:f2:13:fe:d8:a0:
d4:53:24:63:30:9c:aa:5b:aa:67:b2:28:36:fc:d8:37:1b:10:
9e:38:66:78:62:0a:a5:24:6e:8e:f6:99:0a:21:24:aa:01:c2:
71:2e:6a:c9:da:3f:18:c0:d3:b6:83:66:5c:c5:9c:bd:b3:6c:
88:cc:58:7c:23:83:48:fb:ca:23:a2:57:80:4f:c4:0d:85:71:
86:27:52:7a:4a:72:cd:38:c0:b3:76:08:4e:bb:6a:22:38:0f:
c7:00:ba:e7:55:90:24:81:e5:6d:a5:6e:bd:94:99:64:03:aa:
d6:8a:c3:9e:00:3d:ee:2e:73:3a:40:0f:5e:e5:b9:c2:f4:61:
4a:a2:c6:80:1d:7f:ec:e1:93:b0:2a:b6:c8:8e:76:58:1c:0e:
60:7b:47:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:09:51 2025 by rpki-client