Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cyd8s7wvZBc_3Rw8jVdyxNyMOKc.roa
File: cyd8s7wvZBc_3Rw8jVdyxNyMOKc.roa (raw, json)
Hash identifier: v/96b+0baMBVCz9lRKIOQDH/8gIBFZd2e2SWY3cNbpA=
Subject key identifier: 73:27:7C:B3:BC:2F:64:17:3F:DD:1C:3C:8D:57:72:C4:DC:8C:38:A7
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 018BBA09840E78D94CA0616689B0458BEAAF
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cyd8s7wvZBc_3Rw8jVdyxNyMOKc.roa
Signing time: Fri 10 Nov 2023 16:21:07 +0000
ROA not before: Fri 10 Nov 2023 16:21:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28742
IP address blocks: 185.158.29.0/24 maxlen: 24
185.158.28.0/24 maxlen: 24
93.93.16.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 15 Nov 2023 10:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:09:84:0e:78:d9:4c:a0:61:66:89:b0:45:8b:ea:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Nov 10 16:21:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73277cb3bc2f64173fdd1c3c8d5772c4dc8c38a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:86:59:52:1c:d0:c3:8a:8b:61:7b:c1:23:ee:
24:5c:6a:84:60:dd:d2:8e:b9:97:0a:6c:d5:c0:1a:
7c:cb:fd:83:2a:91:78:55:4b:45:50:ec:b5:71:4e:
67:dc:c6:3d:c1:ed:66:7e:fb:18:bd:5c:60:d7:b6:
b5:31:0b:94:b9:ab:64:ff:e1:56:56:87:70:2a:30:
a2:78:f7:56:26:96:42:06:62:4f:16:85:ce:c1:29:
12:c5:ae:8b:25:10:10:ce:8e:e2:52:b0:c5:b8:37:
eb:39:1a:e0:fd:6d:f6:1b:1d:ce:97:f6:b0:73:09:
14:a9:c9:9d:12:86:c6:fb:3e:c4:a5:69:29:a2:a8:
5e:66:9c:bc:59:e6:4c:7c:84:97:91:e3:bc:8e:3f:
a4:59:9a:ce:04:b6:66:d8:f8:a4:0a:61:b7:99:53:
d3:f8:a4:fb:f4:4c:ba:ed:c4:8e:11:f2:19:d7:55:
e5:bb:da:bf:0c:8a:b9:cb:92:a3:d4:c1:40:5d:2e:
06:4c:ae:86:9a:cd:10:05:f3:9d:82:c9:9b:e8:2e:
58:dc:ef:f3:48:47:7d:a1:1d:46:05:4d:bf:f5:d0:
65:95:21:0a:29:d8:dc:05:9b:da:53:30:d9:23:f6:
9c:9b:2b:02:12:f2:05:73:09:17:fe:85:89:3c:10:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:27:7C:B3:BC:2F:64:17:3F:DD:1C:3C:8D:57:72:C4:DC:8C:38:A7
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cyd8s7wvZBc_3Rw8jVdyxNyMOKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.16.0/23
185.158.28.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:2e:39:90:37:70:88:28:83:47:39:df:f8:3d:0d:be:96:41:
ac:d4:ef:a5:50:57:d9:ce:27:c0:f1:ad:18:0e:07:80:d4:42:
b5:80:52:15:6b:d6:c4:19:f2:1e:19:a4:e7:06:da:c3:66:31:
29:2f:89:a2:cc:21:6b:e8:90:f0:b6:20:84:11:a0:ad:18:e5:
76:51:c6:a3:99:8f:e2:36:d1:5a:e4:74:4c:52:c3:6f:a8:be:
46:20:cb:74:b3:ff:80:19:02:8b:d0:60:fe:04:3e:c4:e8:62:
7a:a5:cc:3c:4d:b7:4f:d7:a6:29:75:3b:25:92:9a:14:1c:a9:
1e:d0:30:0d:2e:a5:3e:1a:1e:56:b5:e2:ff:20:07:c2:b6:ea:
f0:2f:d8:f9:2e:04:3b:4d:0b:58:06:01:8d:15:23:d3:c9:7a:
29:c6:df:69:bc:7a:a7:5f:b4:68:dd:5c:02:23:bd:69:9c:7d:
c8:88:ea:e7:a9:a5:a3:f9:2a:63:4a:63:93:44:9b:29:7f:08:
6d:0b:d3:4e:10:bd:9c:4f:61:e6:77:42:a7:77:33:c6:8e:47:
d6:c7:35:e1:2e:53:ed:4a:86:43:9e:fc:17:82:c2:87:d4:d4:
b7:ca:85:77:32:55:ec:49:20:c4:d4:fc:9e:d4:e8:fb:c1:53:
a3:97:84:c3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYu6CYQOeNlMoGFmibBFi+qvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTQ5YjQ3ZGYzMTNjYmFiOTQ1MmRhOThmY2M2Mzc2MDhh
OTA5YmQwHhcNMjMxMTEwMTYyMTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzI3N2NiM2JjMmY2NDE3M2ZkZDFjM2M4ZDU3NzJjNGRjOGMzOGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+oZZUhzQw4qLYXvBI+4kXGqEYN3S
jrmXCmzVwBp8y/2DKpF4VUtFUOy1cU5n3MY9we1mfvsYvVxg17a1MQuUuatk/+FW
VodwKjCiePdWJpZCBmJPFoXOwSkSxa6LJRAQzo7iUrDFuDfrORrg/W32Gx3Ol/aw
cwkUqcmdEobG+z7EpWkpoqheZpy8WeZMfISXkeO8jj+kWZrOBLZm2PikCmG3mVPT
+KT79Ey67cSOEfIZ11Xlu9q/DIq5y5Kj1MFAXS4GTK6Gms0QBfOdgsmb6C5Y3O/z
SEd9oR1GBU2/9dBllSEKKdjcBZvaUzDZI/acmysCEvIFcwkX/oWJPBADRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHMnfLO8L2QXP90cPI1XcsTcjDinMB8GA1UdIwQY
MBaAFHGUm0ffMTy6uUUtqY/MY3YIqQm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt
MDA2NmY1NDFmYWVhLzEvY3lkOHM3d3ZaQmNfM1J3OGpWZHl4TnlNT0tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh
LzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXV0QAwQB
uZ4cMA0GCSqGSIb3DQEBCwUAA4IBAQA9LjmQN3CIKINHOd/4PQ2+lkGs1O+lUFfZ
zifA8a0YDgeA1EK1gFIVa9bEGfIeGaTnBtrDZjEpL4mizCFr6JDwtiCEEaCtGOV2
UcajmY/iNtFa5HRMUsNvqL5GIMt0s/+AGQKL0GD+BD7E6GJ6pcw8TbdP16YpdTsl
kpoUHKke0DANLqU+Gh5WteL/IAfCturwL9j5LgQ7TQtYBgGNFSPTyXopxt9pvHqn
X7Ro3VwCI71pnH3IiOrnqaWj+SpjSmOTRJspfwhtC9NOEL2cT2Hmd0KndzPGjkfW
xzXhLlPtSoZDnvwXgsKH1NS3yoV3MlXsSSDE1Pye1Oj7wVOjl4TD
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:06 2024 by rpki-client on console-fra.rpki-client.org