Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/MgbRBSr2GjH-eddDKgLQ3yuN2Tc.roa
File: MgbRBSr2GjH-eddDKgLQ3yuN2Tc.roa (raw, json)
Hash identifier: ohfHxeJ2Lqf23BaRZVpGeTnvx720fMR9De+XKdBaAwk=
Subject key identifier: 32:06:D1:05:2A:F6:1A:31:FE:79:D7:43:2A:02:D0:DF:2B:8D:D9:37
Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial: 018DD10FC6CB82A46F13D08CB2E3A1BF9C27
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/MgbRBSr2GjH-eddDKgLQ3yuN2Tc.roa
Signing time: Thu 22 Feb 2024 13:44:48 +0000
ROA not before: Thu 22 Feb 2024 13:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59701
IP address blocks: 79.171.144.0/21 maxlen: 21
185.147.72.0/22 maxlen: 22
2a06:d480::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 28 Feb 2024 11:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:0f:c6:cb:82:a4:6f:13:d0:8c:b2:e3:a1:bf:9c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Validity
Not Before: Feb 22 13:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3206d1052af61a31fe79d7432a02d0df2b8dd937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:08:2f:b3:f2:d2:0f:69:17:8b:eb:45:c0:24:
85:66:80:36:1e:39:d1:a7:a5:09:e5:df:6d:ed:7d:
86:8b:40:b7:0d:01:16:d2:b1:cd:50:bb:1f:ef:8b:
6f:2d:21:64:6c:65:e9:01:57:67:ca:6d:c3:1f:44:
7f:19:38:6d:4b:8d:31:de:8b:ae:4e:14:b1:e5:46:
4a:58:7f:c9:a0:08:6c:09:0f:06:9f:5a:ef:3d:15:
77:37:9b:11:ef:8f:5f:97:21:3a:3d:72:3a:44:fc:
16:a1:d8:c5:b9:09:0e:18:39:ec:d6:24:82:2f:be:
bc:4b:73:d8:ce:d2:48:8f:db:db:f9:6f:c6:05:83:
fb:bb:0e:82:3e:6e:d2:a4:ce:85:21:cb:6d:f0:f9:
b5:f6:f9:15:2b:0a:5d:e3:4b:4a:fd:26:30:66:e8:
25:98:68:30:68:cf:d7:53:15:85:2a:6f:f1:78:e2:
37:31:44:40:72:4f:02:6e:d6:93:cd:ce:53:37:2b:
b8:51:33:c5:83:7b:fe:3f:36:d3:5c:c0:5b:21:87:
4c:e0:46:a8:b6:af:a2:fd:f5:d6:00:26:9a:60:9e:
e9:b7:b5:e3:32:b0:de:08:90:b0:75:76:10:9d:07:
0e:39:d8:e4:be:0c:88:28:38:b1:c7:1d:04:9f:7c:
9e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:06:D1:05:2A:F6:1A:31:FE:79:D7:43:2A:02:D0:DF:2B:8D:D9:37
X509v3 Authority Key Identifier:
keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/MgbRBSr2GjH-eddDKgLQ3yuN2Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.144.0/21
185.147.72.0/22
IPv6:
2a06:d480::/29
Signature Algorithm: sha256WithRSAEncryption
99:e4:66:ae:5e:0c:dd:1f:6d:d6:8f:d8:d5:6a:b3:08:dd:de:
16:04:93:c5:49:6a:83:1e:ff:d0:2a:53:0c:04:98:5e:5f:d1:
a1:e7:fd:60:ea:0f:f8:d3:1f:3a:df:6a:b2:7e:a1:6b:8c:f3:
d7:16:3d:6a:87:c7:d5:79:f8:14:f5:b9:7b:99:a4:cc:0c:a4:
f7:c1:00:1e:88:c4:d0:b0:e8:f4:f9:6a:8d:a4:69:d3:ee:bb:
d3:47:57:b1:1a:59:2a:6d:b4:7e:36:81:24:cd:22:d4:0c:02:
1d:47:59:fc:3f:ff:81:ea:b2:90:61:29:35:94:47:1f:1c:dd:
5a:0d:97:38:c4:77:d6:0b:7e:0c:97:69:96:f2:27:ee:ff:4c:
36:3a:b1:76:5d:a8:d7:b4:d2:b4:95:c2:6b:6b:56:a0:4a:f7:
77:f0:15:65:2e:59:7c:1b:2f:77:88:87:da:95:0e:ee:23:d2:
d0:09:3a:3a:3d:25:24:5a:2e:37:15:fe:a0:d8:a2:eb:7c:40:
ea:3c:1f:da:e5:56:a4:ea:4e:3f:5f:ce:97:61:e1:7e:d5:4f:
e7:98:03:71:86:ee:32:7b:0d:5a:a3:9d:68:ae:26:ec:48:91:
13:e5:59:e8:e6:6f:54:00:bf:5c:5e:fd:b9:c6:c9:dd:8c:fd:
eb:4f:db:56
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAY3RD8bLgqRvE9CMsuOhv5wnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjhkZTdjNDcwMmZlNTA5MzJkN2VjZGEyZjI3ODM5MWY0
YjlhY2UwHhcNMjQwMjIyMTM0NDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjA2ZDEwNTJhZjYxYTMxZmU3OWQ3NDMyYTAyZDBkZjJiOGRkOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAgvs/LSD2kXi+tFwCSFZoA2HjnR
p6UJ5d9t7X2Gi0C3DQEW0rHNULsf74tvLSFkbGXpAVdnym3DH0R/GThtS40x3ouu
ThSx5UZKWH/JoAhsCQ8Gn1rvPRV3N5sR749flyE6PXI6RPwWodjFuQkOGDns1iSC
L768S3PYztJIj9vb+W/GBYP7uw6CPm7SpM6FIctt8Pm19vkVKwpd40tK/SYwZugl
mGgwaM/XUxWFKm/xeOI3MURAck8CbtaTzc5TNyu4UTPFg3v+PzbTXMBbIYdM4Eao
tq+i/fXWACaaYJ7pt7XjMrDeCJCwdXYQnQcOOdjkvgyIKDixxx0En3yevQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDIG0QUq9hox/nnXQyoC0N8rjdk3MB8GA1UdIwQY
MBaAFH1o3nxHAv5Qky1+zaLyeDkfS5rOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQt
MGMwMjQ2YzZmNjIzLzEvTWdiUkJTcjJHakgtZWRkREtnTFEzeXVOMlRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQtMGMwMjQ2YzZmNjIz
LzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDT6uQAwQC
uZNIMA0EAgACMAcDBQMqBtSAMA0GCSqGSIb3DQEBCwUAA4IBAQCZ5GauXgzdH23W
j9jVarMI3d4WBJPFSWqDHv/QKlMMBJheX9Gh5/1g6g/40x8632qyfqFrjPPXFj1q
h8fVefgU9bl7maTMDKT3wQAeiMTQsOj0+WqNpGnT7rvTR1exGlkqbbR+NoEkzSLU
DAIdR1n8P/+B6rKQYSk1lEcfHN1aDZc4xHfWC34Ml2mW8ifu/0w2OrF2XajXtNK0
lcJra1agSvd38BVlLll8Gy93iIfalQ7uI9LQCTo6PSUkWi43Ff6g2KLrfEDqPB/a
5Vak6k4/X86XYeF+1U/nmANxhu4yew1ao51oribsSJET5Vno5m9UAL9cXv25xsnd
jP3rT9tW
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:53:17 2025 by rpki-client