Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/Mw-Cq1pSJi9epU26dxXBj6zhQFs.roa
File: Mw-Cq1pSJi9epU26dxXBj6zhQFs.roa (raw, json)
Hash identifier: VO2z110hWV5bvtjuVHHhNalNItYs6A7SS41A0Nq/Vgk=
Subject key identifier: 33:0F:82:AB:5A:52:26:2F:5E:A5:4D:BA:77:15:C1:8F:AC:E1:40:5B
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 018E74B298222662248A8C9F57ADBAD694F5
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/Mw-Cq1pSJi9epU26dxXBj6zhQFs.roa
Signing time: Mon 25 Mar 2024 08:20:45 +0000
ROA not before: Mon 25 Mar 2024 08:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28742
IP address blocks: 93.93.16.0/23 maxlen: 23
93.93.16.0/24 maxlen: 24
185.158.28.0/23 maxlen: 23
185.158.28.0/24 maxlen: 24
185.158.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 16:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:b2:98:22:26:62:24:8a:8c:9f:57:ad:ba:d6:94:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Mar 25 08:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=330f82ab5a52262f5ea54dba7715c18face1405b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:0a:7e:b5:d8:3f:86:ca:79:af:09:98:c4:
d8:de:f9:e9:0c:83:ae:e6:f4:4d:d5:96:49:31:53:
f3:4a:8a:09:ee:50:35:da:5e:bf:c6:26:98:2c:2d:
37:09:9a:04:50:c8:93:55:51:a0:d4:3d:d2:7b:76:
3d:26:ad:26:05:05:73:bb:04:9c:05:52:e3:d5:0d:
04:43:c3:3d:13:54:27:67:14:b1:4f:14:05:00:5b:
76:8a:76:bc:58:aa:fc:8c:7e:c1:4b:ab:49:57:e1:
45:3a:c7:62:af:b5:15:87:25:ed:df:17:f1:2a:a5:
09:0d:05:9e:49:c1:e7:e0:7f:fb:b7:9f:54:1e:b8:
31:4f:91:61:55:13:b9:b0:75:0a:34:1c:be:79:96:
ac:cd:78:26:24:d4:e8:f0:f0:fa:e4:5b:52:82:9f:
78:00:0b:fd:7d:39:da:7b:a6:61:02:b8:15:46:cd:
32:83:75:0b:47:21:71:a9:40:22:75:ce:d7:9a:6d:
8d:04:60:db:0f:3b:62:c1:87:a1:e9:51:63:2a:11:
11:84:b7:a9:9f:67:82:2a:2e:ce:7b:93:fb:04:9f:
1b:9b:3c:a2:a8:46:92:9b:a9:f4:c8:3e:f7:5c:a6:
5c:bb:ef:d9:ec:c6:48:c1:14:db:49:e2:b3:99:b9:
a1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0F:82:AB:5A:52:26:2F:5E:A5:4D:BA:77:15:C1:8F:AC:E1:40:5B
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/Mw-Cq1pSJi9epU26dxXBj6zhQFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.16.0/23
185.158.28.0/23
Signature Algorithm: sha256WithRSAEncryption
61:b5:90:6f:95:4c:e8:2a:4a:58:2a:0f:3d:df:93:4d:10:6d:
df:46:7c:93:08:8f:57:e5:c4:9c:e1:85:6f:c8:7e:f6:d9:9e:
a4:dd:76:d2:5d:a6:43:86:5f:42:f1:c1:64:55:c6:b8:64:ea:
3d:c5:fc:f1:cd:fb:c9:4e:74:00:36:41:39:81:c8:1e:a5:d5:
65:c4:3e:45:00:96:f5:f3:ea:73:a3:99:27:ed:4e:7f:c0:b4:
5a:6f:6b:24:a5:21:10:72:18:8c:d8:6d:ad:9b:09:0a:a2:c7:
1f:cc:ff:47:f2:08:15:d2:15:9d:c9:be:41:a9:96:80:93:f0:
2f:e9:0f:23:e3:20:d2:77:65:37:a8:2b:bb:4e:47:2c:8a:b7:
a5:ea:f0:88:13:e5:a9:d6:c2:2e:8d:e6:66:f9:57:41:ef:40:
06:d5:11:59:f6:3e:54:40:e2:e2:4c:78:89:16:94:e5:9b:47:
d5:f2:f0:f6:1f:f7:a7:47:ed:b1:c6:f3:3b:9b:e9:f1:d4:07:
51:e3:e1:73:c5:ff:ef:12:e0:0e:1a:9f:55:4f:62:00:85:c3:
9f:36:91:a1:10:08:22:26:44:c0:53:60:38:46:38:a3:bb:b4:
86:45:cc:e7:dc:2e:fd:44:9d:a0:c6:02:12:58:26:e0:21:e6:
58:d8:d6:66
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY50spgiJmIkioyfV6261pT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTQ5YjQ3ZGYzMTNjYmFiOTQ1MmRhOThmY2M2Mzc2MDhh
OTA5YmQwHhcNMjQwMzI1MDgyMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzBmODJhYjVhNTIyNjJmNWVhNTRkYmE3NzE1YzE4ZmFjZTE0MDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5sKfrXYP4bKea8JmMTY3vnpDIOu
5vRN1ZZJMVPzSooJ7lA12l6/xiaYLC03CZoEUMiTVVGg1D3Se3Y9Jq0mBQVzuwSc
BVLj1Q0EQ8M9E1QnZxSxTxQFAFt2ina8WKr8jH7BS6tJV+FFOsdir7UVhyXt3xfx
KqUJDQWeScHn4H/7t59UHrgxT5FhVRO5sHUKNBy+eZaszXgmJNTo8PD65FtSgp94
AAv9fTnae6ZhArgVRs0yg3ULRyFxqUAidc7Xmm2NBGDbDztiwYeh6VFjKhERhLep
n2eCKi7Oe5P7BJ8bmzyiqEaSm6n0yD73XKZcu+/Z7MZIwRTbSeKzmbmhqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDMPgqtaUiYvXqVNuncVwY+s4UBbMB8GA1UdIwQY
MBaAFHGUm0ffMTy6uUUtqY/MY3YIqQm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt
MDA2NmY1NDFmYWVhLzEvTXctQ3ExcFNKaTllcFUyNmR4WEJqNnpoUUZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh
LzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXV0QAwQB
uZ4cMA0GCSqGSIb3DQEBCwUAA4IBAQBhtZBvlUzoKkpYKg8935NNEG3fRnyTCI9X
5cSc4YVvyH722Z6k3XbSXaZDhl9C8cFkVca4ZOo9xfzxzfvJTnQANkE5gcgepdVl
xD5FAJb18+pzo5kn7U5/wLRab2skpSEQchiM2G2tmwkKoscfzP9H8ggV0hWdyb5B
qZaAk/Av6Q8j4yDSd2U3qCu7Tkcsirel6vCIE+Wp1sIujeZm+VdB70AG1RFZ9j5U
QOLiTHiJFpTlm0fV8vD2H/enR+2xxvM7m+nx1AdR4+Fzxf/vEuAOGp9VT2IAhcOf
NpGhEAgiJkTAU2A4Rjiju7SGRczn3C79RJ2gxgISWCbgIeZY2NZm
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:06 2024 by rpki-client on console-fra.rpki-client.org