Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MOP0FKXykntYJhNKixZ4G6foFdM.roa
File: MOP0FKXykntYJhNKixZ4G6foFdM.roa (raw, json)
Hash identifier: EDQ6IN/5P4kom0pzZxJOb/4ly8Qd847LtaFSMAzxr2c=
Subject key identifier: 30:E3:F4:14:A5:F2:92:7B:58:26:13:4A:8B:16:78:1B:A7:E8:15:D3
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A79FCB3BFFE256381771961709716C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MOP0FKXykntYJhNKixZ4G6foFdM.roa
Signing time: Mon 02 Jan 2023 08:44:48 +0000
ROA not before: Mon 02 Jan 2023 08:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8474
IP address blocks: 195.138.96.0/19 maxlen: 24
194.50.200.0/23 maxlen: 24
194.50.206.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:9f:cb:3b:ff:e2:56:38:17:71:96:17:09:71:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30e3f414a5f2927b5826134a8b16781ba7e815d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:6f:9c:22:56:cd:c8:70:93:9a:af:c3:db:
4e:a4:cb:49:95:6e:84:ab:75:30:23:91:b1:99:a3:
14:44:a1:c0:a2:94:73:14:44:7e:bf:13:80:c6:b8:
a0:3c:b7:4c:c7:32:03:8c:dd:3c:57:c9:ee:57:3f:
73:56:40:e5:f0:c9:bf:c1:ac:92:ee:42:35:3b:e0:
e4:ca:33:77:79:57:8c:89:4d:e1:9c:46:1f:41:e2:
0b:d0:0e:43:fe:f4:9d:7b:58:68:5e:d1:69:61:d4:
4d:df:49:59:59:1a:41:a7:a7:38:86:07:66:9e:cb:
dd:2a:bb:bc:18:e5:2d:01:21:9f:8b:1e:dc:4d:0b:
91:e6:50:ea:57:6c:33:2b:bd:4d:ff:9b:fd:b1:ee:
f9:1b:42:e5:a2:58:85:86:36:57:26:99:91:b8:a2:
c1:0f:43:f4:be:b4:77:6f:36:b4:a8:44:95:7e:c0:
90:2d:a0:57:cf:2a:69:7f:13:4e:04:78:36:8f:54:
8c:6a:6f:64:ef:36:2d:7d:e4:f2:0d:48:ab:63:0f:
d1:47:f2:e0:89:28:cf:87:3e:a9:8e:5f:cb:b5:fa:
cd:9f:b9:0d:7b:1b:11:d9:4c:d7:84:ed:19:cb:58:
08:3e:3f:20:30:f0:97:24:91:03:68:fa:49:e8:bc:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E3:F4:14:A5:F2:92:7B:58:26:13:4A:8B:16:78:1B:A7:E8:15:D3
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MOP0FKXykntYJhNKixZ4G6foFdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.200.0/23
194.50.206.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
35:ea:6a:fe:7f:fa:f3:a2:22:c4:da:c3:5f:ec:3e:8c:8f:0a:
2a:87:98:ee:41:3d:f6:31:46:d9:f4:d5:aa:65:ad:bc:8c:8b:
55:9c:67:4e:66:74:7a:b9:6b:17:3d:b3:5d:7d:d5:87:19:49:
7b:b6:e5:ce:ad:47:e7:2a:6b:61:6b:46:d4:bd:21:82:2c:6c:
a0:35:fb:b5:65:f6:be:0f:06:7d:a1:ee:a5:09:05:73:7d:47:
52:9b:d1:f4:41:73:64:50:4c:0f:95:66:c7:e1:2b:9c:80:6c:
57:47:f4:89:e2:f9:0c:25:ff:3a:a8:fc:03:80:16:3e:ec:0e:
96:2f:72:58:16:6e:96:89:f6:ca:77:5d:54:04:bd:6c:46:22:
ba:14:08:0a:57:d5:45:e3:2a:ea:71:8b:4e:ee:a1:a9:20:af:
4f:00:f2:43:d2:20:08:e0:87:68:fe:90:5b:d4:1b:74:95:75:
7a:99:07:f1:70:c9:3a:f7:5e:88:9a:a9:38:6f:99:aa:ed:5b:
d8:ac:09:49:a2:a0:7b:f3:37:d7:57:f3:db:7b:5a:de:76:30:
2b:e9:9d:41:87:f1:6c:d7:2a:12:94:4d:b5:5a:78:57:df:8e:
21:da:db:4b:93:d8:0e:dc:1b:92:97:c3:8e:cf:fe:36:08:f8:
bc:c8:56:35
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVxp5/LO//iVjgXcZYXCXFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwMTAyMDg0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGUzZjQxNGE1ZjI5MjdiNTgyNjEzNGE4YjE2NzgxYmE3ZTgxNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPhvnCJWzchwk5qvw9tOpMtJlW6E
q3UwI5GxmaMURKHAopRzFER+vxOAxrigPLdMxzIDjN08V8nuVz9zVkDl8Mm/wayS
7kI1O+DkyjN3eVeMiU3hnEYfQeIL0A5D/vSde1hoXtFpYdRN30lZWRpBp6c4hgdm
nsvdKru8GOUtASGfix7cTQuR5lDqV2wzK71N/5v9se75G0LloliFhjZXJpmRuKLB
D0P0vrR3bza0qESVfsCQLaBXzyppfxNOBHg2j1SMam9k7zYtfeTyDUirYw/RR/Lg
iSjPhz6pjl/LtfrNn7kNexsR2UzXhO0Zy1gIPj8gMPCXJJEDaPpJ6LyH0QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDDj9BSl8pJ7WCYTSosWeBun6BXTMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvTU9QMEZLWHlrbnRZSmhOS2l4WjRHNmZvRmRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwjLIAwQB
wjLOAwQFw4pgMA0GCSqGSIb3DQEBCwUAA4IBAQA16mr+f/rzoiLE2sNf7D6Mjwoq
h5juQT32MUbZ9NWqZa28jItVnGdOZnR6uWsXPbNdfdWHGUl7tuXOrUfnKmtha0bU
vSGCLGygNfu1Zfa+DwZ9oe6lCQVzfUdSm9H0QXNkUEwPlWbH4SucgGxXR/SJ4vkM
Jf86qPwDgBY+7A6WL3JYFm6WifbKd11UBL1sRiK6FAgKV9VF4yrqcYtO7qGpIK9P
APJD0iAI4Ido/pBb1Bt0lXV6mQfxcMk6916Imqk4b5mq7VvYrAlJoqB78zfXV/Pb
e1redjAr6Z1Bh/Fs1yoSlE21WnhX344h2ttLk9gO3BuSl8OOz/42CPi8yFY1
-----END CERTIFICATE-----
Generated at Wed Oct 4 17:50:32 2023 by rpki-client on console-fra.rpki-client.org