Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MJKBhEcapzgSIXbZLmOCnhP6uK8.roa
File: MJKBhEcapzgSIXbZLmOCnhP6uK8.roa (raw, json)
Hash identifier: 7vcCMfAnce1f32OGEvR/1Nx3EkqollKWZX5Ml02xqOI=
Subject key identifier: 30:92:81:84:47:1A:A7:38:12:21:76:D9:2E:63:82:9E:13:FA:B8:AF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0188D8C6C1222A48ADC794FB315FD5700612
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MJKBhEcapzgSIXbZLmOCnhP6uK8.roa
Signing time: Tue 20 Jun 2023 12:28:04 +0000
ROA not before: Tue 20 Jun 2023 12:28:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8708
IP address blocks: 217.156.14.0/24 maxlen: 24
193.231.226.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
217.156.41.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.106.0/23 maxlen: 23
217.156.92.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.82.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.12.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
193.230.217.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:c6:c1:22:2a:48:ad:c7:94:fb:31:5f:d5:70:06:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 20 12:28:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30928184471aa738122176d92e63829e13fab8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:46:b1:d6:e4:75:7d:e1:10:c3:df:02:f6:
b2:a9:c7:30:e5:e6:4f:2f:d0:46:63:b5:39:94:2e:
8a:81:95:c9:d4:85:53:7d:38:52:fe:0e:c5:f4:ad:
20:42:c8:dc:e9:21:f7:e9:4d:e8:9d:de:4a:39:91:
62:bc:5d:84:7c:6d:8e:68:c7:d2:a7:99:fd:18:12:
72:f2:48:ef:77:e5:a1:66:fe:d7:a3:f9:3f:b4:80:
c4:d7:18:51:73:14:89:e2:f5:d6:8d:52:13:5c:68:
7d:9c:e9:b8:cf:65:0a:9f:3e:2c:df:ba:cf:34:b1:
74:ff:f8:10:dd:63:66:d1:36:82:09:ae:4b:b5:c4:
b6:46:76:3e:d6:5e:d5:a5:c4:d9:70:0a:77:17:62:
e5:b8:3a:67:e7:95:8c:02:fb:a9:94:60:f0:85:72:
5c:4a:dc:bb:93:ab:ad:55:c1:76:8c:de:3e:a1:8c:
19:ed:8f:45:17:b7:f9:ed:54:c1:38:54:9e:2e:43:
34:45:b4:98:ac:ab:99:6f:01:ea:09:a2:84:0a:19:
5a:80:32:7c:5d:14:74:f5:93:71:cf:ea:ae:b7:a5:
f8:2d:38:18:30:f7:fc:bb:2f:3f:96:b0:57:b8:32:
6c:da:5b:6a:fa:c9:d3:c1:f0:1c:9f:6c:b7:4b:e7:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:92:81:84:47:1A:A7:38:12:21:76:D9:2E:63:82:9E:13:FA:B8:AF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MJKBhEcapzgSIXbZLmOCnhP6uK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/23
80.96.79.0/24
80.96.82.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.112.0/24
81.181.128.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.217.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.226.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.106.0/23
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
217.156.14.0/24
217.156.41.0/24
217.156.92.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e4:90:9b:a2:1e:f9:82:c6:5c:59:a7:ab:92:a6:0e:89:01:
73:60:2b:50:45:0c:6c:64:08:77:e5:9b:48:11:77:d7:68:69:
f0:84:71:28:07:29:5a:be:32:35:9f:a4:3d:d4:ea:04:00:8f:
9c:ec:eb:7d:70:62:73:ff:3b:2e:c3:54:02:e1:74:4c:d1:65:
6b:58:dc:f3:c4:ba:f3:68:e7:bb:c2:5d:5f:c3:e9:da:c3:c7:
2a:fe:24:16:39:74:3f:75:aa:a2:59:24:13:54:fd:31:18:a8:
20:43:d2:76:06:b5:fb:ed:46:c8:bc:83:74:1e:d5:f4:2c:ad:
00:f2:1e:f3:7c:91:3f:78:03:ff:fc:7e:95:89:ee:32:37:0d:
e0:83:79:8d:37:d9:b8:6d:29:70:e5:e9:e8:09:38:2a:25:85:
89:31:74:30:bd:b6:b2:75:1f:80:4a:f0:b5:9d:68:c2:2f:ca:
1f:2e:3e:7d:89:34:bb:19:81:d0:fb:84:71:42:21:15:58:1f:
ac:98:9c:91:52:df:6c:18:3b:00:61:ac:7c:86:5d:75:ec:3f:
91:50:3c:ae:dd:be:6f:d1:8b:c0:76:9f:29:6d:ea:29:af:37:
05:9c:20:81:35:d5:89:dc:e5:66:14:78:b1:c1:cc:5c:1c:ce:
ce:94:ff:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 07:37:49 2023 by rpki-client on console-ams.rpki-client.org