Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/MsksMVotERSi4FaapZ9pxAh32mQ.roa
File: MsksMVotERSi4FaapZ9pxAh32mQ.roa (raw, json)
Hash identifier: sw8E9WFHRlWi8vdao9rAEcxMORDEzmGbGPg4zPUSfj8=
Subject key identifier: 32:C9:2C:31:5A:2D:11:14:A2:E0:56:9A:A5:9F:69:C4:08:77:DA:64
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 018571553390C63F983860D97A26F16E5CE4
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/MsksMVotERSi4FaapZ9pxAh32mQ.roa
Signing time: Mon 02 Jan 2023 07:14:47 +0000
ROA not before: Mon 02 Jan 2023 07:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60039
IP address blocks: 185.60.236.0/24 maxlen: 24
185.98.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:33:90:c6:3f:98:38:60:d9:7a:26:f1:6e:5c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Jan 2 07:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32c92c315a2d1114a2e0569aa59f69c40877da64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:c8:90:cd:b4:9b:29:dd:74:ce:78:1c:da:
ae:b7:12:08:6c:a8:d3:70:80:57:c1:dc:f9:c7:35:
31:7e:8f:04:46:01:84:04:5a:11:6b:ba:99:9a:6e:
a0:44:49:0d:0e:95:30:76:27:85:07:48:27:13:dd:
8c:96:89:18:24:1c:c8:58:4f:01:5d:83:19:03:ce:
25:ea:03:bc:a8:76:57:f0:5f:3c:c6:f5:ed:39:09:
3b:ce:46:a1:81:c9:17:5b:3b:fb:bd:8f:47:8f:75:
71:89:13:29:6a:8c:1e:b8:c0:a3:9d:ca:d0:b5:3d:
95:17:6a:51:07:9e:a7:08:bd:64:c6:fe:f8:91:a4:
14:26:f0:cc:7b:1e:e9:ee:b6:06:14:40:f5:60:7b:
37:7e:10:6d:1d:ad:03:bf:7f:bd:d7:d7:7f:40:2b:
e3:79:57:e6:41:11:1b:e7:7c:74:e9:05:fb:3f:d7:
b1:5d:c0:40:97:80:10:e2:a2:08:eb:dd:c6:49:e1:
26:5e:3a:4b:c1:87:44:c8:5c:26:45:85:bb:71:f2:
d0:bf:51:e5:01:33:9e:ec:f4:91:e6:37:d0:12:95:
2d:4e:5b:68:56:7a:28:26:b6:4b:9a:f7:71:cf:47:
93:c1:a7:0f:2d:e1:0b:17:42:16:07:c3:fe:67:1f:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C9:2C:31:5A:2D:11:14:A2:E0:56:9A:A5:9F:69:C4:08:77:DA:64
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/MsksMVotERSi4FaapZ9pxAh32mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.236.0/24
185.98.104.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:34:33:e3:04:45:a7:c6:55:78:e3:d8:f4:5f:26:f9:77:7e:
eb:ce:f7:1d:a2:ca:ac:63:c5:4d:83:70:fd:27:b2:1b:be:66:
64:62:66:38:6c:c7:80:52:15:e1:3d:17:73:b4:87:f8:df:d1:
13:5d:cc:ac:47:13:bb:b1:48:97:96:74:8e:d7:99:2d:ef:d5:
62:96:6f:45:7e:3f:d5:4d:d7:d7:da:77:97:59:77:f5:6f:b2:
e0:b0:dc:18:26:84:dd:d3:a3:b1:3f:6d:aa:0f:c6:bb:4e:07:
fd:1e:e4:91:26:dc:37:8b:0e:d0:92:9d:1d:f6:0e:29:12:8a:
3f:2a:bc:cd:09:e6:0b:91:c4:3e:70:aa:d4:6d:ba:f2:fd:17:
56:8b:ff:18:0c:f6:c4:11:36:f6:bd:70:fd:50:54:06:74:06:
ec:dd:78:6f:01:b5:4c:8c:58:42:4d:3a:ea:ae:1f:5a:45:e1:
4c:92:8c:71:ef:da:e0:2e:f6:87:26:85:f1:33:1e:af:59:cb:
d4:5b:3f:df:12:44:1b:e1:8d:5e:19:79:43:86:8b:c5:ca:1c:
4a:2e:7f:54:5b:81:a4:bd:3f:ae:50:e4:de:7b:20:32:28:fc:
56:57:de:5e:9b:d0:fe:dd:cc:fa:6c:29:f4:ee:ee:57:28:32:
59:b7:d8:7e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxVTOQxj+YOGDZeibxblzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWNjN2YzYjIxOGM0OTJkODhkYmViYzljZGNiOWEyZDJk
MzBlZDEwHhcNMjMwMTAyMDcxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmM5MmMzMTVhMmQxMTE0YTJlMDU2OWFhNTlmNjljNDA4NzdkYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5DIkM20mynddM54HNqutxIIbKjT
cIBXwdz5xzUxfo8ERgGEBFoRa7qZmm6gREkNDpUwdieFB0gnE92MlokYJBzIWE8B
XYMZA84l6gO8qHZX8F88xvXtOQk7zkahgckXWzv7vY9Hj3VxiRMpaoweuMCjncrQ
tT2VF2pRB56nCL1kxv74kaQUJvDMex7p7rYGFED1YHs3fhBtHa0Dv3+919d/QCvj
eVfmQREb53x06QX7P9exXcBAl4AQ4qII693GSeEmXjpLwYdEyFwmRYW7cfLQv1Hl
ATOe7PSR5jfQEpUtTltoVnooJrZLmvdxz0eTwacPLeELF0IWB8P+Zx9yuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDLJLDFaLREUouBWmqWfacQId9pkMB8GA1UdIwQY
MBaAFI6sx/OyGMSS2I2+vJzcuaLS0w7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAt
Nzc1ZGE2YWEzMTIzLzEvTXNrc01Wb3RFUlNpNEZhYXBaOXB4QWgzMm1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAtNzc1ZGE2YWEzMTIz
LzEvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuTzsAwQA
uWJoMA0GCSqGSIb3DQEBCwUAA4IBAQA/NDPjBEWnxlV449j0Xyb5d37rzvcdosqs
Y8VNg3D9J7IbvmZkYmY4bMeAUhXhPRdztIf439ETXcysRxO7sUiXlnSO15kt79Vi
lm9Ffj/VTdfX2neXWXf1b7LgsNwYJoTd06OxP22qD8a7Tgf9HuSRJtw3iw7Qkp0d
9g4pEoo/KrzNCeYLkcQ+cKrUbbry/RdWi/8YDPbEETb2vXD9UFQGdAbs3XhvAbVM
jFhCTTrqrh9aReFMkoxx79rgLvaHJoXxMx6vWcvUWz/fEkQb4Y1eGXlDhovFyhxK
Ln9UW4GkvT+uUOTeeyAyKPxWV95em9D+3cz6bCn07u5XKDJZt9h+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:18 2024 by rpki-client on console-ams.rpki-client.org