Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/MVuxx9qXF2dVn-9EqXeC3HDbSTY.roa
File: MVuxx9qXF2dVn-9EqXeC3HDbSTY.roa (raw, json)
Hash identifier: NnQyv5wEr/CCmKGCjnIw4MuhrX+VVwoNYBYshzVf9D0=
Subject key identifier: 31:5B:B1:C7:DA:97:17:67:55:9F:EF:44:A9:77:82:DC:70:DB:49:36
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 0193D6868CD3E350B15BAE2B158340BCB353
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/MVuxx9qXF2dVn-9EqXeC3HDbSTY.roa
Signing time: Tue 17 Dec 2024 21:29:22 +0000
ROA not before: Tue 17 Dec 2024 21:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53856
IP address blocks: 93.157.28.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d6:86:8c:d3:e3:50:b1:5b:ae:2b:15:83:40:bc:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Dec 17 21:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=315bb1c7da971767559fef44a97782dc70db4936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:b2:d6:4f:1b:da:8a:44:2b:be:f3:8d:d3:
d8:73:7f:f7:02:c6:2f:31:c6:45:b8:2c:77:0a:74:
f6:2d:aa:f1:80:bc:6b:db:bd:2d:19:b6:b0:14:c8:
f1:86:c7:e0:a0:f9:2c:53:e0:a3:89:c0:fc:38:8b:
5d:85:24:5f:ab:42:89:69:f9:ca:2e:1a:58:c3:46:
b2:b3:a2:fc:ab:c6:7d:53:7e:ff:46:77:b6:2e:01:
c6:30:af:f8:08:b9:80:17:d1:a5:9a:7f:71:31:c4:
a8:5c:d6:f8:88:ee:61:06:f9:c2:3e:4a:f8:f6:da:
be:6d:0d:09:ea:b7:e1:95:fe:50:a7:04:00:ec:59:
36:75:f7:b1:e7:87:30:76:55:0e:24:bd:f9:b4:0a:
5b:ec:16:f0:5b:5b:56:9c:0a:92:c3:a7:3b:81:f9:
29:6a:03:f9:04:7e:4d:be:90:c1:7d:0d:09:e2:f9:
6a:cd:fe:d2:f5:60:39:26:14:f7:b8:72:9b:f6:ec:
0f:ee:f2:69:6b:fd:d6:94:99:31:68:27:53:e3:f6:
ce:be:1e:20:3c:71:3f:33:b9:dd:67:00:d0:f3:7c:
49:90:8e:de:d9:77:a5:b9:34:e9:93:9d:3f:f0:c6:
62:a9:b9:69:5d:3d:43:21:fb:a2:43:ad:c3:fc:dd:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5B:B1:C7:DA:97:17:67:55:9F:EF:44:A9:77:82:DC:70:DB:49:36
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/MVuxx9qXF2dVn-9EqXeC3HDbSTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.28.0/23
Signature Algorithm: sha256WithRSAEncryption
90:8d:15:f4:c2:33:a4:ea:21:e9:3b:58:7f:ea:85:35:ac:17:
6b:c3:a6:93:6b:37:7d:7f:64:e0:7b:e1:e1:fc:7a:3f:73:13:
07:2d:dc:5f:0b:b0:13:eb:91:0a:78:44:9c:e6:dc:12:d1:61:
73:f6:90:c4:9d:d6:4c:88:0f:31:04:74:f4:63:6e:db:33:d3:
8f:f9:a2:15:d8:a1:32:e1:24:7b:34:c1:32:1b:c5:2e:fb:ad:
ad:63:03:52:10:2d:f1:12:63:1a:9f:7d:1f:31:b4:af:f5:e6:
b0:9a:87:a1:42:75:77:88:86:d4:30:59:a3:2f:c7:76:65:53:
b5:50:8b:ed:a1:fd:1e:42:59:7a:49:9e:55:e1:41:17:e0:02:
df:68:a0:cd:5b:60:67:ef:13:ab:b9:f0:f9:af:4f:59:d8:58:
da:b3:72:0f:73:68:39:6d:21:df:68:49:c1:0b:97:86:24:ee:
7f:15:ab:d6:31:c7:fe:4b:40:24:94:fb:a8:bb:2e:93:b2:a7:
04:41:4d:d2:e2:1b:fa:52:c4:3d:88:a4:26:a4:3b:be:07:ea:
96:4e:0b:1b:e2:4e:82:22:ef:ac:e2:19:24:bb:73:5f:2a:6e:
d3:7b:ae:3e:74:51:71:8a:7b:8c:6a:e0:91:a7:26:e3:1e:3b:
3a:c9:cd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:57:01 2025 by rpki-client