Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/MbNR97yXKH7qCvYtJ47Vyu86oQo.roa
File: MbNR97yXKH7qCvYtJ47Vyu86oQo.roa (raw, json)
Hash identifier: Xlyc9hWu5xKAT1muEoi4PYe6c+Lb27HPdBqDsBRUDUw=
Subject key identifier: 31:B3:51:F7:BC:97:28:7E:EA:0A:F6:2D:27:8E:D5:CA:EF:3A:A1:0A
Certificate issuer: /CN=bc075a22749762ecaaff9cbc217b82f17269e362
Certificate serial: 0187C8191B7A2C19843C9B54BD4488774E6A
Authority key identifier: BC:07:5A:22:74:97:62:EC:AA:FF:9C:BC:21:7B:82:F1:72:69:E3:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/MbNR97yXKH7qCvYtJ47Vyu86oQo.roa
Signing time: Fri 28 Apr 2023 13:41:41 +0000
ROA not before: Fri 28 Apr 2023 13:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25151
IP address blocks: 213.173.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:19:1b:7a:2c:19:84:3c:9b:54:bd:44:88:77:4e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc075a22749762ecaaff9cbc217b82f17269e362
Validity
Not Before: Apr 28 13:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31b351f7bc97287eea0af62d278ed5caef3aa10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:3c:7f:c2:39:67:11:7f:00:f7:dc:e1:f6:
58:ba:74:c0:52:8c:2b:86:20:c5:1e:5e:89:46:c6:
b7:03:6c:6e:89:72:40:5b:80:b4:9c:ef:51:00:fd:
fc:df:d8:84:2e:99:fc:42:9e:ef:fd:52:7d:5e:33:
25:66:ab:d3:88:b5:d3:b2:65:75:2d:a7:ea:1c:ca:
c0:69:47:4b:6e:50:7d:e2:a7:4a:c8:1c:52:60:1f:
ea:6d:ec:34:89:7e:22:35:1f:c5:ae:dd:c9:78:d0:
fe:88:50:03:b7:b6:6f:c4:7f:d0:06:97:e0:c4:f3:
d0:48:f4:99:45:89:08:eb:19:5f:59:24:42:15:f0:
e5:e8:eb:47:fe:8d:11:ae:6c:ae:94:f7:9d:94:27:
3e:f4:9f:de:25:a5:01:82:38:e1:77:8d:53:a4:66:
73:d2:fe:ee:f4:64:10:60:c0:f8:93:2f:19:cb:a8:
f1:5b:bb:83:d9:30:1a:2a:a1:1f:3c:e2:12:b3:62:
48:42:87:c8:17:ef:e2:ca:da:48:58:b4:a0:27:ea:
a3:13:b5:38:58:13:bb:28:b1:fb:8a:f4:18:e8:92:
2c:ff:5c:8c:82:8b:ae:57:fc:64:a2:76:a9:c7:68:
49:21:ea:cf:61:0f:ea:52:11:2d:a6:e8:6e:75:58:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B3:51:F7:BC:97:28:7E:EA:0A:F6:2D:27:8E:D5:CA:EF:3A:A1:0A
X509v3 Authority Key Identifier:
keyid:BC:07:5A:22:74:97:62:EC:AA:FF:9C:BC:21:7B:82:F1:72:69:E3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/MbNR97yXKH7qCvYtJ47Vyu86oQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.173.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b1:ed:e9:42:96:44:e6:1e:d5:b4:2c:d6:6a:07:ac:f7:a2:
8c:6b:16:94:a0:c7:0e:9c:e1:6f:cb:1f:6b:45:44:53:e1:38:
c0:4f:85:78:94:18:fa:ee:8a:ea:ec:7f:63:31:4f:d8:9e:54:
0e:5d:4f:19:be:e0:eb:8a:6d:5c:c9:57:bc:4b:1f:56:95:38:
e5:bc:5d:aa:e7:00:4d:ec:2b:79:3a:39:fc:3d:dc:3b:08:63:
15:cc:5e:a3:cd:25:85:1e:54:ed:7d:83:4f:ce:fd:2a:5c:69:
53:59:8f:d3:c9:b3:27:4f:66:d0:89:41:59:b5:e5:6e:45:9f:
69:76:96:34:26:8a:1f:1b:5f:2e:1a:69:db:76:0b:e8:be:4c:
af:0c:4a:57:1f:26:5c:ac:96:0e:c0:9e:a3:24:8f:a0:cb:a3:
8f:19:57:e1:ed:d1:4b:ad:a4:ef:d4:2d:18:75:a6:d9:5c:2b:
7d:f1:b9:ea:6e:e3:a1:44:af:a8:aa:f5:ef:b5:e3:a1:6a:6d:
a7:64:2a:43:fe:f5:ae:e6:1b:19:d5:1b:9b:87:dc:11:dc:0b:
e6:6d:c7:13:5e:4e:c3:b9:e7:6b:51:d5:98:36:4d:79:71:8a:
f4:48:6e:95:39:10:9f:94:60:5d:bd:3a:cb:b6:d5:43:e1:3b:
f0:81:4f:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfIGRt6LBmEPJtUvUSId05qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMDc1YTIyNzQ5NzYyZWNhYWZmOWNiYzIxN2I4MmYxNzI2
OWUzNjIwHhcNMjMwNDI4MTM0MTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWIzNTFmN2JjOTcyODdlZWEwYWY2MmQyNzhlZDVjYWVmM2FhMTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb48f8I5ZxF/APfc4fZYunTAUowr
hiDFHl6JRsa3A2xuiXJAW4C0nO9RAP3839iELpn8Qp7v/VJ9XjMlZqvTiLXTsmV1
LafqHMrAaUdLblB94qdKyBxSYB/qbew0iX4iNR/Frt3JeND+iFADt7ZvxH/QBpfg
xPPQSPSZRYkI6xlfWSRCFfDl6OtH/o0RrmyulPedlCc+9J/eJaUBgjjhd41TpGZz
0v7u9GQQYMD4ky8Zy6jxW7uD2TAaKqEfPOISs2JIQofIF+/iytpIWLSgJ+qjE7U4
WBO7KLH7ivQY6JIs/1yMgouuV/xkonapx2hJIerPYQ/qUhEtpuhudVhV4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDGzUfe8lyh+6gr2LSeO1crvOqEKMB8GA1UdIwQY
MBaAFLwHWiJ0l2Lsqv+cvCF7gvFyaeNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkFkYUluU1hZdXlxXzV5OElYdUM4WEpwNDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80OTJjOGQtNjFhOS00ODA0LTliMDUt
YzM5YzJjZGM4MzYyLzEvTWJOUjk3eVhLSDdxQ3ZZdEo0N1Z5dTg2b1FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi80OTJjOGQtNjFhOS00ODA0LTliMDUtYzM5YzJjZGM4MzYy
LzEvdkFkYUluU1hZdXlxXzV5OElYdUM4WEpwNDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a0nMA0G
CSqGSIb3DQEBCwUAA4IBAQCose3pQpZE5h7VtCzWages96KMaxaUoMcOnOFvyx9r
RURT4TjAT4V4lBj67orq7H9jMU/YnlQOXU8ZvuDrim1cyVe8Sx9WlTjlvF2q5wBN
7Ct5Ojn8Pdw7CGMVzF6jzSWFHlTtfYNPzv0qXGlTWY/TybMnT2bQiUFZteVuRZ9p
dpY0JoofG18uGmnbdgvovkyvDEpXHyZcrJYOwJ6jJI+gy6OPGVfh7dFLraTv1C0Y
dabZXCt98bnqbuOhRK+oqvXvteOham2nZCpD/vWu5hsZ1Rubh9wR3AvmbccTXk7D
uedrUdWYNk15cYr0SG6VORCflGBdvTrLttVD4TvwgU9F
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:48 2024 by rpki-client on console-ams.rpki-client.org