Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/MZ4nVLA85zrLYXKjBUfbLmJpWcI.roa
File: MZ4nVLA85zrLYXKjBUfbLmJpWcI.roa (raw, json)
Hash identifier: IPXYpk8o9CkYoFjfenhcJmFpRzLwjtonvkwE9ZmMGoE=
Subject key identifier: 31:9E:27:54:B0:3C:E7:3A:CB:61:72:A3:05:47:DB:2E:62:69:59:C2
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01889E9AE7A9877E70E05E658011296629FB
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/MZ4nVLA85zrLYXKjBUfbLmJpWcI.roa
Signing time: Fri 09 Jun 2023 05:22:11 +0000
ROA not before: Fri 09 Jun 2023 05:22:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 194.15.98.0/24 maxlen: 24
194.15.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:9a:e7:a9:87:7e:70:e0:5e:65:80:11:29:66:29:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 9 05:22:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=319e2754b03ce73acb6172a30547db2e626959c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:e0:e6:f2:ff:43:ea:2b:49:3f:51:01:39:
bc:c6:89:98:b9:04:5a:aa:aa:ea:d0:e7:d4:16:7a:
e4:40:5d:8f:53:4d:55:8b:4b:c2:5e:30:c4:e2:16:
d2:b4:a0:7e:b9:1f:e4:16:35:fd:f4:69:22:ea:be:
aa:b7:10:27:25:b8:c6:5c:7a:e8:fe:7f:18:28:9f:
35:ef:2d:45:1d:4e:64:8b:16:00:91:c5:49:28:24:
b0:c0:bf:ca:d4:1a:15:94:6a:e4:d9:cc:01:00:8c:
b1:90:bb:03:c6:d0:52:d6:d1:e7:38:e7:c4:c5:ac:
8a:28:53:f1:1c:8d:e8:e5:fa:20:87:5f:88:d7:b5:
e8:0b:a7:d1:fc:0b:dd:3b:e7:08:38:43:4f:b2:db:
42:06:94:6e:7f:08:0d:ee:c2:4a:7f:aa:27:20:28:
b2:dd:03:70:f4:37:14:e3:10:b9:16:6e:eb:3a:b1:
5a:3b:69:06:3f:82:ff:fb:d3:e6:4e:b9:52:36:d6:
4a:30:7c:77:ed:e1:82:a2:24:56:52:32:2c:a6:bf:
14:7a:33:0a:f3:78:c0:86:0c:da:b6:06:0a:ff:a5:
d2:c0:b3:bb:23:36:e7:d5:59:8f:fa:35:9e:0e:b0:
fe:05:9e:bf:cc:17:da:0c:54:d8:83:63:7b:50:b9:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9E:27:54:B0:3C:E7:3A:CB:61:72:A3:05:47:DB:2E:62:69:59:C2
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/MZ4nVLA85zrLYXKjBUfbLmJpWcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.97.0-194.15.98.255
Signature Algorithm: sha256WithRSAEncryption
36:b3:bb:c0:dc:0c:a0:b0:2c:fa:35:e1:b9:8c:e9:3e:08:81:
8b:b8:e0:65:02:65:4f:16:9c:9b:79:c5:e9:f5:95:3e:6b:5f:
45:ad:59:20:37:45:bc:74:92:89:3a:6c:97:da:58:75:1b:33:
c4:b3:56:2a:1e:bf:67:30:81:3a:2d:e2:ff:11:5e:d1:77:e5:
9a:21:4b:3d:e7:9f:f4:ee:b2:d4:64:93:60:8f:45:e7:6d:9d:
e8:99:fc:48:2e:16:fd:81:26:85:51:5c:4b:c4:2a:f6:4d:d9:
a0:24:f5:cb:0a:b7:12:06:cf:4b:ff:91:63:9f:11:4f:e3:74:
a0:06:dd:90:af:8d:43:0c:b6:f3:34:c6:0f:00:df:bf:55:26:
4f:7d:b3:4d:ba:03:10:20:b6:fe:89:00:65:7c:34:b3:32:0e:
73:42:b1:0a:7a:9f:4e:ad:71:fc:14:cc:3f:de:6c:70:15:c6:
6c:de:f9:ca:59:d9:1e:25:6b:d9:b7:2e:80:3c:66:ed:54:6b:
20:ac:2a:f0:5f:b8:29:cf:bd:b9:f3:07:2c:7d:19:9d:ee:34:
89:3c:0d:d9:38:85:a8:2b:cf:8c:f0:19:13:17:00:86:df:4c:
95:03:b1:32:3f:06:71:b4:2a:85:12:85:23:b4:39:c3:51:c3:
32:4c:a2:7a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYiemueph35w4F5lgBEpZin7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjMwNjA5MDUyMjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTllMjc1NGIwM2NlNzNhY2I2MTcyYTMwNTQ3ZGIyZTYyNjk1OWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Sbg5vL/Q+orST9RATm8xomYuQRa
qqrq0OfUFnrkQF2PU01Vi0vCXjDE4hbStKB+uR/kFjX99Gki6r6qtxAnJbjGXHro
/n8YKJ817y1FHU5kixYAkcVJKCSwwL/K1BoVlGrk2cwBAIyxkLsDxtBS1tHnOOfE
xayKKFPxHI3o5fogh1+I17XoC6fR/AvdO+cIOENPsttCBpRufwgN7sJKf6onICiy
3QNw9DcU4xC5Fm7rOrFaO2kGP4L/+9PmTrlSNtZKMHx37eGCoiRWUjIspr8UejMK
83jAhgzatgYK/6XSwLO7Izbn1VmP+jWeDrD+BZ6/zBfaDFTYg2N7ULlmgwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDGeJ1SwPOc6y2FyowVH2y5iaVnCMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvTVo0blZMQTg1enJMWVhLakJVZmJMbUpwV2NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCD2ED
BADCD2IwDQYJKoZIhvcNAQELBQADggEBADazu8DcDKCwLPo14bmM6T4IgYu44GUC
ZU8WnJt5xen1lT5rX0WtWSA3Rbx0kok6bJfaWHUbM8SzVioev2cwgTot4v8RXtF3
5ZohSz3nn/TustRkk2CPRedtneiZ/EguFv2BJoVRXEvEKvZN2aAk9csKtxIGz0v/
kWOfEU/jdKAG3ZCvjUMMtvM0xg8A379VJk99s026AxAgtv6JAGV8NLMyDnNCsQp6
n06tcfwUzD/ebHAVxmze+cpZ2R4la9m3LoA8Zu1UayCsKvBfuCnPvbnzByx9GZ3u
NIk8Ddk4hagrz4zwGRMXAIbfTJUDsTI/BnG0KoUShSO0OcNRwzJMono=
-----END CERTIFICATE-----
Generated at Mon Aug 7 15:43:39 2023 by rpki-client on console-ams.rpki-client.org