Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/MtqbBpOPOT8b4ddIscdbLN8y9CQ.roa
File: MtqbBpOPOT8b4ddIscdbLN8y9CQ.roa (raw, json)
Hash identifier: EFFUrg9Te/mqFGRL+OhivuQIXVFzziiG7GL7AW/Y8Tw=
Subject key identifier: 32:DA:9B:06:93:8F:39:3F:1B:E1:D7:48:B1:C7:5B:2C:DF:32:F4:24
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0191380B85170AC8AE00E6B5CADCC9611A4A
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/MtqbBpOPOT8b4ddIscdbLN8y9CQ.roa
Signing time: Fri 09 Aug 2024 16:49:24 +0000
ROA not before: Fri 09 Aug 2024 16:49:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42708
IP address blocks: 43.225.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:38:0b:85:17:0a:c8:ae:00:e6:b5:ca:dc:c9:61:1a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 9 16:49:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32da9b06938f393f1be1d748b1c75b2cdf32f424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:96:9c:ac:f0:ec:97:55:b4:85:d7:41:dc:
35:03:eb:6a:4c:09:2b:43:41:69:64:d5:49:53:b1:
b4:eb:3a:57:47:c6:25:e4:a2:22:f4:19:e3:cf:50:
9f:96:fc:83:1d:4c:e2:51:19:b0:c4:41:e7:a2:67:
bf:44:11:c2:15:6c:61:ab:6a:ca:99:d4:22:2c:f2:
c7:06:90:41:68:bf:dd:ab:38:91:a0:1f:51:25:dd:
72:52:59:9f:63:f8:43:1c:28:99:53:65:a6:5d:a8:
96:46:49:67:52:20:e3:21:5e:2c:5c:d5:15:98:99:
1f:3a:a8:c2:82:c0:b9:8c:04:eb:ba:f0:bf:8e:11:
8a:9c:4e:06:f9:e0:58:b9:35:3e:93:5a:92:89:2a:
e9:1c:80:f3:2b:a1:50:03:3a:10:26:2b:e1:08:2f:
d5:20:45:84:bd:47:38:33:45:7c:8e:dc:89:be:63:
9c:5c:87:86:d8:2c:c3:8a:50:7c:0b:a3:07:f2:a3:
c0:e4:ec:09:61:7c:db:50:d6:5d:d2:dc:11:ed:a3:
27:bc:7a:11:24:c0:ce:58:b3:c0:7c:3a:fe:02:e1:
ac:a7:77:57:0a:cf:ad:56:12:97:df:31:27:4c:15:
c3:0c:72:0f:e8:fd:a1:6c:1e:59:5e:f8:44:20:d3:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DA:9B:06:93:8F:39:3F:1B:E1:D7:48:B1:C7:5B:2C:DF:32:F4:24
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/MtqbBpOPOT8b4ddIscdbLN8y9CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.91.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:56:c1:42:07:3d:7d:4a:6c:e0:49:9c:5e:a6:46:cb:b9:c5:
5d:05:c7:c3:95:ec:cd:38:ae:10:bf:58:c0:5c:96:aa:89:99:
7d:ad:f9:18:ed:90:86:01:52:fc:ef:82:9f:b7:50:94:25:e4:
aa:72:b6:e6:00:16:1b:47:bb:b9:41:b7:3d:8b:6e:f5:de:c2:
05:af:ff:17:1a:c7:6c:e4:86:be:fc:98:22:7b:27:b1:47:7b:
a7:8f:f4:63:a2:02:96:ca:d0:7c:3d:52:33:83:d5:d0:40:4a:
11:84:f7:2c:7a:93:e2:60:e7:a8:14:00:80:e0:3a:9d:07:b4:
2b:ba:5c:09:bb:0f:f4:73:72:c3:c6:7c:91:65:2d:d9:25:59:
68:d6:9d:15:fd:e3:51:45:9f:e3:29:93:3d:7d:f9:cb:5a:36:
dc:a3:d5:65:75:b9:a6:ef:f6:90:ff:3c:cc:0b:ab:55:0b:ed:
37:8e:81:ef:4b:08:90:1c:60:65:4c:36:df:34:33:42:e1:5e:
66:75:13:2d:e5:9c:ba:b5:f5:ba:17:75:49:0f:04:77:91:04:
4d:27:12:62:70:8f:1d:ee:49:de:42:3b:7b:b4:89:1b:ca:8a:
c9:d6:eb:fa:8e:bc:b3:b5:e4:6a:89:b5:1c:8f:b8:b6:55:d2:
90:c2:01:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZE4C4UXCsiuAOa1ytzJYRpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQwODA5MTY0OTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmRhOWIwNjkzOGYzOTNmMWJlMWQ3NDhiMWM3NWIyY2RmMzJmNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXyWnKzw7JdVtIXXQdw1A+tqTAkr
Q0FpZNVJU7G06zpXR8Yl5KIi9Bnjz1CflvyDHUziURmwxEHnome/RBHCFWxhq2rK
mdQiLPLHBpBBaL/dqziRoB9RJd1yUlmfY/hDHCiZU2WmXaiWRklnUiDjIV4sXNUV
mJkfOqjCgsC5jATruvC/jhGKnE4G+eBYuTU+k1qSiSrpHIDzK6FQAzoQJivhCC/V
IEWEvUc4M0V8jtyJvmOcXIeG2CzDilB8C6MH8qPA5OwJYXzbUNZd0twR7aMnvHoR
JMDOWLPAfDr+AuGsp3dXCs+tVhKX3zEnTBXDDHIP6P2hbB5ZXvhEINMfcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDLamwaTjzk/G+HXSLHHWyzfMvQkMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvTXRxYkJwT1BPVDhiNGRkSXNjZGJMTjh5OUNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+FbMA0G
CSqGSIb3DQEBCwUAA4IBAQC5VsFCBz19SmzgSZxepkbLucVdBcfDlezNOK4Qv1jA
XJaqiZl9rfkY7ZCGAVL874Kft1CUJeSqcrbmABYbR7u5Qbc9i2713sIFr/8XGsds
5Ia+/JgieyexR3unj/RjogKWytB8PVIzg9XQQEoRhPcsepPiYOeoFACA4DqdB7Qr
ulwJuw/0c3LDxnyRZS3ZJVlo1p0V/eNRRZ/jKZM9ffnLWjbco9Vldbmm7/aQ/zzM
C6tVC+03joHvSwiQHGBlTDbfNDNC4V5mdRMt5Zy6tfW6F3VJDwR3kQRNJxJicI8d
7kneQjt7tIkbyorJ1uv6jryzteRqibUcj7i2VdKQwgFI
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:59 2025 by rpki-client