Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/msk9vl_R9_bBy7zKbTrSRhnfJLc.roa
File: msk9vl_R9_bBy7zKbTrSRhnfJLc.roa (raw, json)
Hash identifier: ZuWuQ27DkPNbffVmzPkV6tWNY08QfSOByCarHJXXHD0=
Subject key identifier: 9A:C9:3D:BE:5F:D1:F7:F6:C1:CB:BC:CA:6D:3A:D2:46:19:DF:24:B7
Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial: 01900BDDF6DC7F5F1D7718883307257071B0
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/msk9vl_R9_bBy7zKbTrSRhnfJLc.roa
Signing time: Wed 12 Jun 2024 09:53:34 +0000
ROA not before: Wed 12 Jun 2024 09:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29314
IP address blocks: 213.92.128.0/17 maxlen: 17
213.92.128.0/18 maxlen: 18
213.92.160.0/19 maxlen: 19
213.92.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Wed 06 Nov 2024 14:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0b:dd:f6:dc:7f:5f:1d:77:18:88:33:07:25:70:71:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Validity
Not Before: Jun 12 09:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ac93dbe5fd1f7f6c1cbbcca6d3ad24619df24b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:3e:4c:3c:97:2f:6f:d9:e4:6e:76:23:f7:
8c:b2:88:43:ab:3e:b4:cf:35:c9:6b:26:f9:4f:87:
f2:bc:ff:af:ea:d0:49:51:5e:73:f9:70:f4:e6:01:
63:3a:73:ac:cc:40:0b:e4:6d:e3:95:5a:ea:cf:fb:
92:ee:ac:e2:19:22:13:9c:a3:98:f8:5e:89:85:ff:
74:59:56:43:06:fe:b5:0b:29:fa:b4:5e:36:48:8e:
a9:b8:4c:65:8c:4b:a8:13:20:d4:9f:9b:a3:b6:66:
40:c0:2b:03:d9:cc:d8:49:84:d0:9b:f1:4f:62:a2:
45:02:db:54:c2:c2:5e:3e:b1:df:23:de:fc:65:26:
36:82:99:76:17:b0:37:57:12:36:07:eb:34:99:8b:
a2:4a:98:a9:74:80:44:94:55:90:55:2e:82:b7:84:
53:09:16:a6:0d:6e:1f:1f:4a:3d:a8:81:e6:57:64:
ff:0b:bb:60:81:6b:a1:17:d5:e6:2d:8a:ed:e3:48:
86:da:a1:e0:9d:88:8b:1b:19:2d:a3:60:e4:4e:95:
15:b3:b9:54:6d:a9:a1:e8:43:4e:bc:ff:d4:5b:7a:
34:01:f0:04:94:15:ed:bc:0b:b3:84:0c:25:a1:ff:
ca:f9:95:4d:82:43:7b:fe:ea:87:0f:0d:54:5c:65:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C9:3D:BE:5F:D1:F7:F6:C1:CB:BC:CA:6D:3A:D2:46:19:DF:24:B7
X509v3 Authority Key Identifier:
keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/msk9vl_R9_bBy7zKbTrSRhnfJLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.92.128.0/17
Signature Algorithm: sha256WithRSAEncryption
71:8b:15:e2:b2:9f:a3:94:b4:76:cd:d4:78:7b:e7:96:53:2b:
1d:12:f2:58:0a:9e:eb:ff:80:19:05:6e:52:25:3d:f2:a5:82:
0a:f1:bb:94:82:fd:f2:80:d8:f4:2b:de:1e:d3:75:20:f1:d4:
26:ca:e0:ae:98:e6:63:66:74:1c:b7:2c:bc:bf:1a:2f:54:91:
9b:6d:24:f7:00:7c:d1:29:44:e6:1d:d5:3e:b5:05:91:cb:94:
b0:72:f9:bd:86:00:50:89:8e:0a:78:ff:d1:f2:05:f0:f6:af:
34:e8:a3:9e:39:12:05:ee:58:a3:a1:a0:3a:3f:18:f3:c8:ff:
1f:d2:e0:c6:f7:5a:10:2e:26:6f:2c:6d:fd:9e:fc:76:ad:f6:
85:27:02:18:69:2b:69:1c:61:09:00:af:d1:64:aa:92:f1:bd:
2b:d1:48:65:85:90:3c:bc:a3:5b:ea:cb:7c:f3:47:11:9c:34:
21:ac:64:0e:32:e9:be:63:ef:39:19:9a:31:5e:42:71:1d:62:
86:ff:0a:30:2b:44:8f:23:1c:bf:7b:9c:05:aa:0f:7a:cd:7c:
7d:7e:12:24:d0:8d:f2:e8:40:cc:d0:6a:07:e0:fa:09:5c:b1:
a2:d1:be:f5:d8:df:2f:60:81:60:ff:f6:75:cb:2a:9d:e4:6c:
15:f6:dc:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAL3fbcf18ddxiIMwclcHGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj
ZGM2NWMwHhcNMjQwNjEyMDk1MzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWM5M2RiZTVmZDFmN2Y2YzFjYmJjY2E2ZDNhZDI0NjE5ZGYyNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfs+TDyXL2/Z5G52I/eMsohDqz60
zzXJayb5T4fyvP+v6tBJUV5z+XD05gFjOnOszEAL5G3jlVrqz/uS7qziGSITnKOY
+F6Jhf90WVZDBv61Cyn6tF42SI6puExljEuoEyDUn5ujtmZAwCsD2czYSYTQm/FP
YqJFAttUwsJePrHfI978ZSY2gpl2F7A3VxI2B+s0mYuiSpipdIBElFWQVS6Ct4RT
CRamDW4fH0o9qIHmV2T/C7tggWuhF9XmLYrt40iG2qHgnYiLGxkto2DkTpUVs7lU
bamh6ENOvP/UW3o0AfAElBXtvAuzhAwlof/K+ZVNgkN7/uqHDw1UXGX2awIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJrJPb5f0ff2wcu8ym060kYZ3yS3MB8GA1UdIwQY
MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct
NjZlZGEyMjhmZWM3LzEvbXNrOXZsX1I5X2JCeTd6S2JUclNSaG5mSkxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3
LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH1VyAMA0G
CSqGSIb3DQEBCwUAA4IBAQBxixXisp+jlLR2zdR4e+eWUysdEvJYCp7r/4AZBW5S
JT3ypYIK8buUgv3ygNj0K94e03Ug8dQmyuCumOZjZnQctyy8vxovVJGbbST3AHzR
KUTmHdU+tQWRy5Swcvm9hgBQiY4KeP/R8gXw9q806KOeORIF7lijoaA6PxjzyP8f
0uDG91oQLiZvLG39nvx2rfaFJwIYaStpHGEJAK/RZKqS8b0r0UhlhZA8vKNb6st8
80cRnDQhrGQOMum+Y+85GZoxXkJxHWKG/wowK0SPIxy/e5wFqg96zXx9fhIk0I3y
6EDM0GoH4PoJXLGi0b712N8vYIFg//Z1yyqd5GwV9txo
-----END CERTIFICATE-----
Generated at Wed Nov 6 18:35:52 2024 by rpki-client on console-fra.rpki-client.org