Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MDNRjVDHNATJ_bIdUwZMvZyOK9k.roa
File: MDNRjVDHNATJ_bIdUwZMvZyOK9k.roa (raw, json)
Hash identifier: rss/F78v0sD/b0SDeMclIpBdpxmnbhuJKV+OaM8QRJc=
Subject key identifier: 30:33:51:8D:50:C7:34:04:C9:FD:B2:1D:53:06:4C:BD:9C:8E:2B:D9
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0186749F3B02B01C75C1B918D924EE579608
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MDNRjVDHNATJ_bIdUwZMvZyOK9k.roa
Signing time: Tue 21 Feb 2023 15:37:17 +0000
ROA not before: Tue 21 Feb 2023 15:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 194.50.201.0/24 maxlen: 24
194.50.200.0/24 maxlen: 24
91.242.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:9f:3b:02:b0:1c:75:c1:b9:18:d9:24:ee:57:96:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Feb 21 15:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3033518d50c73404c9fdb21d53064cbd9c8e2bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:87:7a:2a:41:8a:c3:4e:6d:40:e7:72:4c:
59:b7:50:57:88:7d:28:ae:35:ee:9a:71:9b:33:5c:
31:5a:cf:8f:ab:17:16:a6:dd:bd:5d:a3:10:2a:9a:
3c:bc:01:59:df:28:ac:4f:33:57:03:0b:c9:63:75:
c1:ab:c0:b3:90:76:c5:a3:be:48:c9:b0:e6:00:6a:
5d:99:db:14:8a:27:4f:07:4b:32:cc:f7:a6:68:44:
cb:66:3c:61:91:17:ec:d6:b2:10:69:5b:62:06:93:
a1:c1:43:c8:9b:e3:82:69:61:bd:32:bf:2c:64:46:
ec:2c:83:ae:b4:84:b3:31:cc:21:da:08:72:be:37:
df:3b:fa:4a:42:8e:6c:14:c4:48:53:d6:16:e2:1f:
b7:00:59:6f:f1:32:65:16:f3:21:02:94:df:9c:70:
0c:27:db:c1:d7:f1:8d:f4:57:fd:6a:d9:72:d4:d4:
64:3c:48:16:5d:cf:58:44:29:df:42:34:05:1d:01:
81:5b:25:42:9e:1b:41:34:35:40:11:9a:f0:80:ef:
56:f4:db:59:e0:4e:42:66:25:04:26:46:2c:42:a7:
bd:47:6c:bb:90:82:8b:f2:e9:08:cb:77:c6:3c:55:
67:b4:3c:f5:80:5e:29:5a:22:9b:17:25:91:eb:d1:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:51:8D:50:C7:34:04:C9:FD:B2:1D:53:06:4C:BD:9C:8E:2B:D9
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MDNRjVDHNATJ_bIdUwZMvZyOK9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.100.0/24
194.50.200.0/23
Signature Algorithm: sha256WithRSAEncryption
61:3d:12:eb:b1:83:f0:6f:4e:3a:d2:d6:c1:b1:5a:f1:7b:60:
d5:8e:c0:4b:9f:a6:a3:5c:0d:d8:d4:91:61:43:89:51:04:5f:
16:ae:b6:d9:1d:05:33:f1:cb:c1:1e:ef:8a:b9:30:a5:30:69:
92:3d:1b:d9:b6:39:cf:92:3c:c9:37:a2:5a:65:17:5d:b3:2e:
ea:c2:b3:49:22:ec:c5:31:a6:68:3b:0c:2b:dc:9c:eb:bc:d5:
ca:12:0c:7f:ae:0e:f2:aa:c0:9a:17:fa:cb:27:45:a0:1c:da:
ab:ef:1a:b0:4b:2e:b6:75:cc:c0:a0:62:e9:e6:a6:ed:f0:62:
f5:e8:04:b4:bf:8d:69:18:fa:36:90:54:1a:90:51:e7:85:b3:
0c:d2:85:a2:ba:5c:fc:64:5b:c9:91:0e:ca:a6:56:17:5e:03:
76:e4:67:e3:bc:a9:3b:96:17:b9:30:18:5c:03:69:05:fd:66:
c7:6a:91:7d:da:e0:56:7b:d0:45:2a:b5:ec:0d:d3:75:e7:87:
e1:4f:39:42:6e:41:dd:b3:8e:74:9b:8a:61:fd:02:75:1f:7a:
12:0f:8f:c3:13:ea:6e:b0:aa:e7:56:17:e2:0b:11:69:78:a8:
45:0e:37:57:22:8c:c9:98:35:c1:cd:21:d7:18:ce:21:da:fb:
30:26:19:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZ0nzsCsBx1wbkY2STuV5YIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwMjIxMTUzNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDMzNTE4ZDUwYzczNDA0YzlmZGIyMWQ1MzA2NGNiZDljOGUyYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuyHeipBisNObUDnckxZt1BXiH0o
rjXumnGbM1wxWs+PqxcWpt29XaMQKpo8vAFZ3yisTzNXAwvJY3XBq8CzkHbFo75I
ybDmAGpdmdsUiidPB0syzPemaETLZjxhkRfs1rIQaVtiBpOhwUPIm+OCaWG9Mr8s
ZEbsLIOutISzMcwh2ghyvjffO/pKQo5sFMRIU9YW4h+3AFlv8TJlFvMhApTfnHAM
J9vB1/GN9Ff9atly1NRkPEgWXc9YRCnfQjQFHQGBWyVCnhtBNDVAEZrwgO9W9NtZ
4E5CZiUEJkYsQqe9R2y7kIKL8ukIy3fGPFVntDz1gF4pWiKbFyWR69GcPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDAzUY1QxzQEyf2yHVMGTL2cjivZMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvTUROUmpWREhOQVRKX2JJZFV3Wk12WnlPSzlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/JkAwQB
wjLIMA0GCSqGSIb3DQEBCwUAA4IBAQBhPRLrsYPwb0460tbBsVrxe2DVjsBLn6aj
XA3Y1JFhQ4lRBF8WrrbZHQUz8cvBHu+KuTClMGmSPRvZtjnPkjzJN6JaZRddsy7q
wrNJIuzFMaZoOwwr3JzrvNXKEgx/rg7yqsCaF/rLJ0WgHNqr7xqwSy62dczAoGLp
5qbt8GL16AS0v41pGPo2kFQakFHnhbMM0oWiulz8ZFvJkQ7KplYXXgN25GfjvKk7
lhe5MBhcA2kF/WbHapF92uBWe9BFKrXsDdN154fhTzlCbkHds450m4ph/QJ1H3oS
D4/DE+pusKrnVhfiCxFpeKhFDjdXIozJmDXBzSHXGM4h2vswJhmH
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-fra.rpki-client.org