Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/mhf_9KmzmxjgSku_PZ0LjuZQgCA.roa
File: mhf_9KmzmxjgSku_PZ0LjuZQgCA.roa (raw, json)
Hash identifier: ZR7vbj+OglrpIawbjnTbp21gMsX1BXyYVdM366hFfAg=
Subject key identifier: 9A:17:FF:F4:A9:B3:9B:18:E0:4A:4B:BF:3D:9D:0B:8E:E6:50:80:20
Certificate issuer: /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial: 018CC94E4AA6CCF702E3F4DD495A965A2306
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/mhf_9KmzmxjgSku_PZ0LjuZQgCA.roa
Signing time: Tue 02 Jan 2024 08:33:20 +0000
ROA not before: Tue 02 Jan 2024 08:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41692
IP address blocks: 194.54.92.0/22 maxlen: 22
2001:7f8:3a::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4a:a6:cc:f7:02:e3:f4:dd:49:5a:96:5a:23:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
Validity
Not Before: Jan 2 08:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a17fff4a9b39b18e04a4bbf3d9d0b8ee6508020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:e7:2d:56:a9:bc:5d:bb:10:89:1f:e0:a2:
5e:37:08:22:4f:01:8a:16:bb:41:ad:d5:57:48:6f:
3b:e9:e9:f9:3a:6f:81:d5:6b:fe:d0:71:9e:1b:ba:
5d:c1:6e:c7:28:9b:30:cc:bc:22:e1:3f:ee:5e:c7:
0d:fc:e2:6c:29:4d:43:ae:cb:22:fb:39:55:8e:d2:
20:70:bf:4c:59:b1:4a:b6:7b:78:ac:44:76:c8:82:
9a:95:0d:65:01:4c:7c:9d:9f:e0:d1:a6:db:13:97:
45:1b:bc:df:39:b4:e7:cd:eb:fb:2c:72:d3:fe:3d:
cd:fc:c7:52:7c:32:a5:88:78:f8:94:a8:22:0c:fb:
17:20:ea:d0:71:21:15:26:20:53:c6:3d:67:6f:d7:
83:90:fa:15:95:0e:11:20:a3:f0:db:98:32:18:5b:
9f:68:1c:2b:52:d9:3a:ee:32:b3:2a:e0:f7:99:c8:
e4:5b:6f:1f:7b:c5:ab:43:e1:a0:68:8d:ba:a9:5c:
a9:a8:9d:0b:ad:94:0c:23:60:2a:92:42:48:18:d2:
6d:f5:21:71:21:0e:5a:a0:d0:0e:49:67:41:8a:8b:
30:ed:48:71:52:bc:3b:ed:05:4c:f7:0f:c6:68:d1:
5e:c8:9c:ed:14:c4:3a:d3:ae:3c:b7:42:ef:19:68:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:17:FF:F4:A9:B3:9B:18:E0:4A:4B:BF:3D:9D:0B:8E:E6:50:80:20
X509v3 Authority Key Identifier:
keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/mhf_9KmzmxjgSku_PZ0LjuZQgCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.92.0/22
IPv6:
2001:7f8:3a::/48
Signature Algorithm: sha256WithRSAEncryption
30:0a:f2:05:45:08:76:ca:55:ca:58:3e:30:cc:b0:57:0f:6b:
ca:7a:db:ba:a7:04:78:ee:a0:be:dd:46:b3:2e:c1:90:dd:1e:
9a:7e:f0:49:26:92:0c:9a:d0:af:c1:39:d3:6a:7b:22:67:86:
79:d4:f3:7c:d2:7c:a8:77:d7:9d:74:57:91:ca:0c:96:d2:c0:
3c:da:8c:9a:0a:62:77:6d:7c:20:20:73:c8:bc:9e:18:62:d1:
02:a0:d6:06:68:d7:d5:c1:52:dd:ba:dd:c4:a7:eb:1f:d4:34:
32:0d:2c:b9:53:1b:38:9c:4d:b1:d1:02:84:6a:5a:03:b6:6e:
4f:bb:07:64:da:ac:1e:b5:c6:1b:c2:cb:ca:31:9b:da:41:2f:
39:3c:f1:b9:93:97:25:64:77:6a:ab:77:25:68:3d:b2:16:af:
ad:f8:da:1d:90:76:74:d0:48:c6:29:8e:9f:59:81:5f:69:70:
09:78:9a:4f:c4:ba:a3:5f:ab:4d:c9:5c:92:6b:c9:8d:34:49:
b6:91:a2:6f:ae:08:3f:f7:90:d7:4c:fb:46:ae:3c:f7:d7:b1:
b3:b0:44:fe:ae:59:00:47:9c:0a:93:41:2e:bf:02:c9:c2:2d:
06:15:c5:f7:7e:eb:99:50:f0:d5:53:4c:c0:3e:90:21:12:f5:
46:90:e6:30
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzJTkqmzPcC4/TdSVqWWiMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZDk5MzMxOWRjYzkyOTc2OTQzMThiMjQ2ZWIzNmY1NWZm
MTM3MGUwHhcNMjQwMTAyMDgzMzIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTE3ZmZmNGE5YjM5YjE4ZTA0YTRiYmYzZDlkMGI4ZWU2NTA4MDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLTnLVapvF27EIkf4KJeNwgiTwGK
FrtBrdVXSG876en5Om+B1Wv+0HGeG7pdwW7HKJswzLwi4T/uXscN/OJsKU1Drssi
+zlVjtIgcL9MWbFKtnt4rER2yIKalQ1lAUx8nZ/g0abbE5dFG7zfObTnzev7LHLT
/j3N/MdSfDKliHj4lKgiDPsXIOrQcSEVJiBTxj1nb9eDkPoVlQ4RIKPw25gyGFuf
aBwrUtk67jKzKuD3mcjkW28fe8WrQ+GgaI26qVypqJ0LrZQMI2AqkkJIGNJt9SFx
IQ5aoNAOSWdBiosw7UhxUrw77QVM9w/GaNFeyJztFMQ60648t0LvGWhXfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJoX//Sps5sY4EpLvz2dC47mUIAgMB8GA1UdIwQY
MBaAFFfZkzGdzJKXaUMYskbrNvVf8TcOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEt
MDNhZmFjZWE3MDEwLzEvbWhmXzlLbXpteGpnU2t1X1BaMExqdVpRZ0NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEtMDNhZmFjZWE3MDEw
LzEvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwjZcMA8E
AgACMAkDBwAgAQf4ADowDQYJKoZIhvcNAQELBQADggEBADAK8gVFCHbKVcpYPjDM
sFcPa8p627qnBHjuoL7dRrMuwZDdHpp+8Ekmkgya0K/BOdNqeyJnhnnU83zSfKh3
1510V5HKDJbSwDzajJoKYndtfCAgc8i8nhhi0QKg1gZo19XBUt263cSn6x/UNDIN
LLlTGzicTbHRAoRqWgO2bk+7B2TarB61xhvCy8oxm9pBLzk88bmTlyVkd2qrdyVo
PbIWr6342h2QdnTQSMYpjp9ZgV9pcAl4mk/EuqNfq03JXJJryY00SbaRom+uCD/3
kNdM+0auPPfXsbOwRP6uWQBHnAqTQS6/AsnCLQYVxfd+65lQ8NVTTMA+kCES9UaQ
5jA=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:27 2025 by rpki-client