Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/eRk6ou4SldptFKpjotU3CZofeWA.roa
File: eRk6ou4SldptFKpjotU3CZofeWA.roa (raw, json)
Hash identifier: pjfvPhYA50+whRyOV8tHax+5NT5sMEWKhZddge+xgqA=
Subject key identifier: 79:19:3A:A2:EE:12:95:DA:6D:14:AA:63:A2:D5:37:09:9A:1F:79:60
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 018CCA293F069AB274F6A5CB689FA708E7EF
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/eRk6ou4SldptFKpjotU3CZofeWA.roa
Signing time: Tue 02 Jan 2024 12:32:29 +0000
ROA not before: Tue 02 Jan 2024 12:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28742
IP address blocks: 185.158.28.0/23 maxlen: 23
185.158.29.0/24 maxlen: 24
185.158.28.0/24 maxlen: 24
93.93.16.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 25 Mar 2024 08:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:3f:06:9a:b2:74:f6:a5:cb:68:9f:a7:08:e7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jan 2 12:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79193aa2ee1295da6d14aa63a2d537099a1f7960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:38:d5:c3:a9:06:9e:ef:1f:0b:d0:26:3b:
c4:57:65:c6:c1:2e:a4:7e:a6:e9:d8:35:df:99:d3:
7c:b6:93:b9:f5:6f:a9:80:c8:72:b8:59:70:33:e3:
48:24:fa:f8:03:3f:9c:65:3b:7d:d1:ce:2d:de:7a:
66:4a:7c:84:e5:4e:16:d3:26:b8:34:37:42:15:78:
76:7c:0e:90:ce:c7:ab:f0:24:54:f1:2c:54:a5:25:
76:a0:62:08:af:76:2e:d5:e8:55:be:12:33:83:7b:
e3:55:f3:92:d1:17:25:e9:70:c5:89:2e:eb:04:8f:
3e:c6:9d:46:c9:dd:d4:c4:2f:5a:43:a9:af:7b:d9:
45:a7:fc:98:6b:ae:86:dd:87:2b:31:87:8b:af:e4:
24:eb:ed:74:74:4e:af:fd:9a:f9:28:2a:02:c4:ca:
0b:bd:1a:fc:4b:8d:5e:fa:16:75:42:a5:4a:38:50:
ea:b9:60:f0:87:89:1a:3f:3f:c9:08:f5:eb:39:0f:
11:01:4e:a2:29:8a:e4:41:e3:af:80:ea:e2:8f:8b:
dc:96:7a:01:28:11:e1:1c:71:f6:e0:12:32:81:12:
51:99:13:08:c9:0c:71:36:f9:c8:f4:08:07:85:42:
5b:ec:ab:cf:91:6a:f3:0e:f1:9d:ec:30:e8:4b:4f:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:3A:A2:EE:12:95:DA:6D:14:AA:63:A2:D5:37:09:9A:1F:79:60
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/eRk6ou4SldptFKpjotU3CZofeWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.16.0/23
185.158.28.0/23
Signature Algorithm: sha256WithRSAEncryption
23:b5:72:c4:f6:b9:a9:71:c8:2e:68:6f:a4:1f:3d:3b:e3:a1:
f1:26:44:46:3f:ad:03:21:38:73:40:46:11:d1:d1:cd:d3:f1:
a9:1d:ca:48:62:03:58:76:03:fc:ef:60:06:86:db:f4:5b:9f:
e0:cc:bc:ce:fc:e5:2c:33:07:bf:87:48:d3:af:50:c7:e3:2c:
34:22:2d:18:5d:93:21:33:9e:3d:83:79:fb:67:a6:58:a3:9d:
38:75:3b:12:3a:d4:13:08:77:46:da:20:3b:9a:ad:6d:ad:94:
c1:87:c7:7a:70:cd:83:97:0e:15:59:91:83:0e:e1:42:01:1f:
eb:46:06:8e:3b:8c:59:64:22:d4:c1:76:2d:55:b3:97:19:1b:
47:f8:52:42:65:58:07:18:aa:76:dd:57:57:73:97:5d:34:b0:
87:4b:1b:f6:44:d3:85:44:10:3b:9e:0a:8e:39:5c:d6:f9:78:
77:a4:98:26:fe:b1:52:59:bc:c1:c4:84:fb:ef:17:de:9f:a1:
d9:21:ed:01:61:0d:43:b6:12:07:09:8e:6a:33:40:31:bc:7b:
fe:bf:39:27:d8:2e:c4:32:e9:76:56:93:cc:5d:4c:85:6d:45:
5c:69:33:ab:63:6d:b2:58:5f:77:df:a5:e4:99:01:9a:55:bd:
2b:94:e8:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKKT8GmrJ09qXLaJ+nCOfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTQ5YjQ3ZGYzMTNjYmFiOTQ1MmRhOThmY2M2Mzc2MDhh
OTA5YmQwHhcNMjQwMTAyMTIzMjI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTE5M2FhMmVlMTI5NWRhNmQxNGFhNjNhMmQ1MzcwOTlhMWY3OTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn441cOpBp7vHwvQJjvEV2XGwS6k
fqbp2DXfmdN8tpO59W+pgMhyuFlwM+NIJPr4Az+cZTt90c4t3npmSnyE5U4W0ya4
NDdCFXh2fA6Qzser8CRU8SxUpSV2oGIIr3Yu1ehVvhIzg3vjVfOS0Rcl6XDFiS7r
BI8+xp1Gyd3UxC9aQ6mve9lFp/yYa66G3YcrMYeLr+Qk6+10dE6v/Zr5KCoCxMoL
vRr8S41e+hZ1QqVKOFDquWDwh4kaPz/JCPXrOQ8RAU6iKYrkQeOvgOrij4vclnoB
KBHhHHH24BIygRJRmRMIyQxxNvnI9AgHhUJb7KvPkWrzDvGd7DDoS0/zUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHkZOqLuEpXabRSqY6LVNwmaH3lgMB8GA1UdIwQY
MBaAFHGUm0ffMTy6uUUtqY/MY3YIqQm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt
MDA2NmY1NDFmYWVhLzEvZVJrNm91NFNsZHB0Rktwam90VTNDWm9mZVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh
LzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXV0QAwQB
uZ4cMA0GCSqGSIb3DQEBCwUAA4IBAQAjtXLE9rmpccguaG+kHz0746HxJkRGP60D
IThzQEYR0dHN0/GpHcpIYgNYdgP872AGhtv0W5/gzLzO/OUsMwe/h0jTr1DH4yw0
Ii0YXZMhM549g3n7Z6ZYo504dTsSOtQTCHdG2iA7mq1trZTBh8d6cM2Dlw4VWZGD
DuFCAR/rRgaOO4xZZCLUwXYtVbOXGRtH+FJCZVgHGKp23VdXc5ddNLCHSxv2RNOF
RBA7ngqOOVzW+Xh3pJgm/rFSWbzBxIT77xfen6HZIe0BYQ1DthIHCY5qM0AxvHv+
vzkn2C7EMul2VpPMXUyFbUVcaTOrY22yWF9336XkmQGaVb0rlOgq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:40 2024 by rpki-client on console-ams.rpki-client.org