Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/MnUrk_qGdjDWpQCT2CHLfepcpUc.roa
File: MnUrk_qGdjDWpQCT2CHLfepcpUc.roa (raw, json)
Hash identifier: 42a7IoJs+XyWrswNDbqNdynUw5oxebwREyK3+z/MMB0=
Subject key identifier: 32:75:2B:93:FA:86:76:30:D6:A5:00:93:D8:21:CB:7D:EA:5C:A5:47
Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial: 01856F26DEE78588A111CD426050D10CFBA4
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/MnUrk_qGdjDWpQCT2CHLfepcpUc.roa
Signing time: Sun 01 Jan 2023 21:04:56 +0000
ROA not before: Sun 01 Jan 2023 21:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206190
IP address blocks: 185.194.10.0/24 maxlen: 24
185.194.9.0/24 maxlen: 24
185.194.11.0/24 maxlen: 24
185.194.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:de:e7:85:88:a1:11:cd:42:60:50:d1:0c:fb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
Validity
Not Before: Jan 1 21:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32752b93fa867630d6a50093d821cb7dea5ca547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8c:c2:9b:75:a2:a6:98:ba:54:d9:2c:ae:c9:
ce:de:05:e7:44:4f:b0:bb:ef:f8:8d:a6:42:18:7e:
c9:8a:11:1e:2c:73:e1:e7:49:b1:de:05:6b:d5:97:
08:d6:ce:96:8b:72:9c:54:90:f8:54:e8:95:34:be:
a6:26:79:af:64:16:3d:49:6a:e5:f6:32:4d:76:3a:
6e:60:eb:ba:cb:a6:cf:aa:ab:cb:65:21:16:ab:93:
5f:bc:1e:ad:3a:34:4d:cb:7a:a3:c6:98:48:36:00:
cc:29:59:b8:bf:68:0f:46:f0:c3:63:44:19:d5:fb:
e7:49:2a:1d:54:54:50:63:71:48:84:c1:b5:04:26:
1f:7e:b9:fb:c1:61:7c:10:64:75:55:8d:fb:22:00:
28:64:66:b0:0e:6d:05:02:de:a4:fc:3d:61:95:ca:
d8:2a:91:11:fa:d2:c5:7a:fa:ab:99:95:95:5a:14:
c9:b9:b2:c6:20:92:18:f4:7f:37:ae:de:72:b9:ee:
98:23:e6:91:9f:62:29:f1:1f:75:f2:bb:83:df:bb:
98:00:69:c8:81:61:5e:61:7a:f5:ba:ba:57:f5:03:
15:f3:69:41:66:07:97:5b:9d:3c:48:db:50:a0:46:
1f:b0:5b:89:51:ca:8f:63:99:3a:8b:30:5b:84:8f:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:75:2B:93:FA:86:76:30:D6:A5:00:93:D8:21:CB:7D:EA:5C:A5:47
X509v3 Authority Key Identifier:
keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/MnUrk_qGdjDWpQCT2CHLfepcpUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
07:54:96:21:2e:d1:a2:2f:9a:bc:29:d2:92:2c:25:c1:ce:7e:
6d:1a:e6:f8:20:c5:8e:d7:d4:55:e7:ab:71:d6:d4:12:a5:92:
f0:e7:f6:31:af:11:bb:53:6b:e7:3a:22:c5:11:22:a3:64:50:
d7:ea:f1:f0:90:dd:bc:35:e3:eb:19:ba:4a:40:8f:d2:d0:7d:
5a:75:9a:40:a6:41:90:4f:f8:16:e7:8c:af:45:e8:b4:5d:66:
bf:d9:94:ad:e6:ef:37:8a:95:93:2e:28:fe:93:72:2b:27:45:
1c:e3:8f:c6:14:43:c0:fd:7a:14:37:70:41:1a:21:89:8f:f6:
3f:8b:5e:ee:ac:aa:64:1e:d4:6c:2a:e2:65:34:4d:01:21:fa:
88:c9:4c:1f:57:5c:0d:24:ef:50:e3:cc:cd:55:30:5c:fb:93:
e8:73:0f:0e:e1:fe:dd:b3:2b:d5:b6:92:b0:b2:93:33:09:e9:
9f:bc:cf:78:c4:e4:1a:c0:3b:50:58:16:44:62:34:85:84:7c:
a0:5f:a3:57:6e:07:d4:a2:ea:93:f9:2d:28:0e:bc:c3:cc:5b:
eb:74:03:87:8e:f2:23:59:ee:29:27:6a:4f:1c:05:1e:42:d0:
3d:cd:6c:c4:c7:68:9c:8d:ab:10:8f:30:fd:29:fb:20:5c:c9:
a9:9b:6e:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvJt7nhYihEc1CYFDRDPukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NzI3N2ZjNDdkODQ4ZmE1NjM0Y2U4MDMxYTE3NGZjMjQ5
ZmE2NzMwHhcNMjMwMTAxMjEwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjc1MmI5M2ZhODY3NjMwZDZhNTAwOTNkODIxY2I3ZGVhNWNhNTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4zCm3Wippi6VNksrsnO3gXnRE+w
u+/4jaZCGH7JihEeLHPh50mx3gVr1ZcI1s6Wi3KcVJD4VOiVNL6mJnmvZBY9SWrl
9jJNdjpuYOu6y6bPqqvLZSEWq5NfvB6tOjRNy3qjxphINgDMKVm4v2gPRvDDY0QZ
1fvnSSodVFRQY3FIhMG1BCYffrn7wWF8EGR1VY37IgAoZGawDm0FAt6k/D1hlcrY
KpER+tLFevqrmZWVWhTJubLGIJIY9H83rt5yue6YI+aRn2Ip8R918ruD37uYAGnI
gWFeYXr1urpX9QMV82lBZgeXW508SNtQoEYfsFuJUcqPY5k6izBbhI+0kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDJ1K5P6hnYw1qUAk9ghy33qXKVHMB8GA1UdIwQY
MBaAFJhyd/xH2Ej6VjTOgDGhdPwkn6ZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUhKM19FZllTUHBXTk02QU1hRjBfQ1NmcG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUt
MTJlODI3NmZkYWM0LzEvTW5VcmtfcUdkakRXcFFDVDJDSExmZXBjcFVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUtMTJlODI3NmZkYWM0
LzEvbUhKM19FZllTUHBXTk02QU1hRjBfQ1NmcG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucIIMA0G
CSqGSIb3DQEBCwUAA4IBAQAHVJYhLtGiL5q8KdKSLCXBzn5tGub4IMWO19RV56tx
1tQSpZLw5/YxrxG7U2vnOiLFESKjZFDX6vHwkN28NePrGbpKQI/S0H1adZpApkGQ
T/gW54yvRei0XWa/2ZSt5u83ipWTLij+k3IrJ0Uc44/GFEPA/XoUN3BBGiGJj/Y/
i17urKpkHtRsKuJlNE0BIfqIyUwfV1wNJO9Q48zNVTBc+5Pocw8O4f7dsyvVtpKw
spMzCemfvM94xOQawDtQWBZEYjSFhHygX6NXbgfUouqT+S0oDrzDzFvrdAOHjvIj
We4pJ2pPHAUeQtA9zWzEx2icjasQjzD9KfsgXMmpm27Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:55 2024 by rpki-client on console-fra.rpki-client.org