Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/MwiBLKTah_MGY-RC_77XOD8MCvI.roa
File: MwiBLKTah_MGY-RC_77XOD8MCvI.roa (raw, json)
Hash identifier: HFXhYBPkyV7Hb+mGVJ5NUdwcbm93bs0R4XjIxZXFw6Q=
Subject key identifier: 33:08:81:2C:A4:DA:87:F3:06:63:E4:42:FF:BE:D7:38:3F:0C:0A:F2
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 018CCA287C07E37500122698E74A011F63E5
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/MwiBLKTah_MGY-RC_77XOD8MCvI.roa
Signing time: Tue 02 Jan 2024 12:31:39 +0000
ROA not before: Tue 02 Jan 2024 12:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 45.15.18.0/24 maxlen: 24
2a0e:1c80:15::/48 maxlen: 48
2a0e:1c80:e::/48 maxlen: 48
2a0e:1c80:11::/48 maxlen: 48
2a0e:1c80:14::/48 maxlen: 48
2a0e:1c80:12::/48 maxlen: 48
2a0e:1c80:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:7c:07:e3:75:00:12:26:98:e7:4a:01:1f:63:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 2 12:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3308812ca4da87f30663e442ffbed7383f0c0af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:32:5d:ab:09:04:4f:37:33:04:b1:22:66:7d:
20:99:af:34:c2:1f:4d:64:21:65:5f:5d:56:8f:12:
d9:73:e1:25:8d:e9:f5:2f:b6:6d:f9:d5:a9:40:d3:
3a:cc:9b:4d:32:77:7b:c6:36:5b:33:8b:60:b8:ae:
1f:76:80:96:c2:30:ba:03:a7:2f:03:6c:d6:43:e0:
8c:4e:2a:21:4a:fd:50:1f:dd:1a:e2:c7:25:63:d9:
8a:f5:a0:8f:dc:73:53:de:aa:f1:47:9b:97:46:13:
fc:8d:be:90:a8:34:e7:6e:f9:ec:a0:2c:19:f4:60:
73:32:8a:3a:75:61:59:e0:64:18:24:5c:ba:10:99:
4f:cb:34:fa:61:2e:72:1d:35:8b:c4:3a:a8:3c:b9:
4d:b2:6a:e8:dc:d9:5b:13:d4:cd:67:41:47:30:f1:
a5:67:e7:45:d1:76:e6:b2:9b:9a:4e:de:9e:b9:9a:
da:be:79:44:5c:43:4d:20:16:4a:c4:7c:4f:a8:a2:
08:bd:e6:7a:e9:ae:ce:32:a1:a1:f7:b4:4d:bb:69:
77:06:04:20:06:cd:6a:1d:21:dc:48:2a:3b:f4:67:
03:36:ec:50:1b:64:d6:99:09:df:08:98:0c:df:4c:
31:f8:17:04:4e:ff:6c:1f:73:aa:2a:17:7e:b4:0d:
06:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:08:81:2C:A4:DA:87:F3:06:63:E4:42:FF:BE:D7:38:3F:0C:0A:F2
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/MwiBLKTah_MGY-RC_77XOD8MCvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.18.0/24
IPv6:
2a0e:1c80:a::/48
2a0e:1c80:e::/48
2a0e:1c80:11::-2a0e:1c80:12:ffff:ffff:ffff:ffff:ffff
2a0e:1c80:14::/47
Signature Algorithm: sha256WithRSAEncryption
75:2e:60:37:ac:78:bf:7f:85:40:d4:cb:df:a3:70:65:93:25:
3d:e1:ff:97:fd:7b:cb:97:22:be:de:19:46:7e:11:d6:93:59:
07:7e:ea:f8:b0:a8:28:54:21:f1:09:1a:7d:b5:0c:4f:40:a3:
d0:03:2d:0a:60:12:2b:10:73:21:1d:f0:39:33:68:7f:36:25:
0a:7d:e0:3f:c7:b3:6f:b3:82:42:c6:45:40:e4:4a:b8:18:cd:
f7:57:20:68:e6:ee:33:53:7d:aa:55:1e:78:8a:ca:c5:87:8e:
a5:5c:e0:64:a4:a1:02:d5:f0:74:e3:5f:44:b9:03:d1:dc:42:
03:f6:ce:d9:0a:5a:4f:b7:ad:fe:01:aa:9c:d2:d6:29:87:19:
5b:27:a4:81:df:ee:e0:51:fb:1c:dd:90:03:67:60:d4:2c:79:
cb:26:f6:60:00:97:f7:c1:8d:4f:c5:55:60:51:71:42:da:db:
47:84:e1:7a:bf:2a:ac:ee:a6:5c:9b:0d:b6:da:9c:2d:8d:c2:
c8:cb:1c:d5:07:3c:9e:6f:ce:86:bb:fb:25:e4:fe:44:77:57:
16:c9:0e:a3:49:3b:1b:0e:0c:ab:ac:0e:1c:e3:c8:21:43:38:
96:fc:f5:86:22:49:2f:e2:b3:9d:77:14:2f:d7:73:24:0d:53:
a3:3c:d6:be
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAYzKKHwH43UAEiaY50oBH2PlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk
OTgzZjYwHhcNMjQwMTAyMTIzMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzA4ODEyY2E0ZGE4N2YzMDY2M2U0NDJmZmJlZDczODNmMGMwYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzJdqwkETzczBLEiZn0gma80wh9N
ZCFlX11WjxLZc+Eljen1L7Zt+dWpQNM6zJtNMnd7xjZbM4tguK4fdoCWwjC6A6cv
A2zWQ+CMTiohSv1QH90a4sclY9mK9aCP3HNT3qrxR5uXRhP8jb6QqDTnbvnsoCwZ
9GBzMoo6dWFZ4GQYJFy6EJlPyzT6YS5yHTWLxDqoPLlNsmro3NlbE9TNZ0FHMPGl
Z+dF0XbmspuaTt6euZravnlEXENNIBZKxHxPqKIIveZ66a7OMqGh97RNu2l3BgQg
Bs1qHSHcSCo79GcDNuxQG2TWmQnfCJgM30wx+BcETv9sH3OqKhd+tA0G3QIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFDMIgSyk2ofzBmPkQv++1zg/DAryMB8GA1UdIwQY
MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt
MDliZTlkYjExZjY2LzEvTXdpQkxLVGFoX01HWS1SQ183N1hPRDhNQ3ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2
LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAMBAIAATAGAwQALQ8SMDUE
AgACMC8DBwAqDhyAAAoDBwAqDhyAAA4wEgMHACoOHIAAEQMHACoOHIAAEgMHASoO
HIAAFDANBgkqhkiG9w0BAQsFAAOCAQEAdS5gN6x4v3+FQNTL36NwZZMlPeH/l/17
y5civt4ZRn4R1pNZB37q+LCoKFQh8QkafbUMT0Cj0AMtCmASKxBzIR3wOTNofzYl
Cn3gP8ezb7OCQsZFQORKuBjN91cgaObuM1N9qlUeeIrKxYeOpVzgZKShAtXwdONf
RLkD0dxCA/bO2QpaT7et/gGqnNLWKYcZWyekgd/u4FH7HN2QA2dg1Cx5yyb2YACX
98GNT8VVYFFxQtrbR4Ther8qrO6mXJsNttqcLY3CyMsc1Qc8nm/Ohrv7JeT+RHdX
FskOo0k7Gw4Mq6wOHOPIIUM4lvz1hiJJL+KznXcUL9dzJA1TozzWvg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:16:32 2025 by rpki-client