Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/MgIiR4QPjshfYNAuJpmu_4aWyrw.roa
File: MgIiR4QPjshfYNAuJpmu_4aWyrw.roa (raw, json)
Hash identifier: ZhVnUNtLpbCC/j+MohwiFU1Fg7JKXw6WL3VjNfAvRR4=
Subject key identifier: 32:02:22:47:84:0F:8E:C8:5F:60:D0:2E:26:99:AE:FF:86:96:CA:BC
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 01859158ECD6A28F2F065CD74BAF08B6007F
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/MgIiR4QPjshfYNAuJpmu_4aWyrw.roa
Signing time: Sun 08 Jan 2023 12:26:42 +0000
ROA not before: Sun 08 Jan 2023 12:26:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209279
IP address blocks: 195.182.38.0/24 maxlen: 24
195.190.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:91:58:ec:d6:a2:8f:2f:06:5c:d7:4b:af:08:b6:00:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Jan 8 12:26:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32022247840f8ec85f60d02e2699aeff8696cabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:28:af:7a:40:d6:14:cc:36:54:b6:02:87:
14:aa:93:6c:9a:22:9f:41:c4:a1:77:12:f6:63:90:
f2:ad:5d:f0:e8:7c:44:e7:23:4a:b1:1b:47:45:45:
3b:32:82:f0:21:5f:94:5d:0b:31:a2:bb:43:75:e3:
1b:41:e8:84:63:e4:bf:3b:88:e0:ef:04:7c:e0:b0:
dc:77:60:01:5e:8a:6d:48:a2:e4:f0:f9:10:ca:b3:
5e:e0:e6:81:12:a8:5d:58:d0:f9:b4:8b:62:a5:c6:
25:94:1c:34:6c:87:d2:d7:34:c3:d4:9f:11:7a:5f:
20:34:55:fa:ac:ee:00:64:60:53:60:eb:c9:78:03:
ee:5d:b0:94:e7:8b:6b:9a:69:f5:10:19:39:06:3d:
1f:bc:22:2f:64:ce:92:8b:7a:35:b8:de:32:ea:8d:
0e:a4:ee:6b:88:8b:9b:58:a0:d7:06:65:89:fb:45:
e9:69:6a:0a:e5:d5:9d:fb:8a:7c:b5:0f:97:84:16:
48:d2:d8:7f:52:e1:85:33:ad:00:45:3a:f7:04:d5:
b9:22:c0:7e:b1:0d:58:e1:2f:3c:a6:d1:c1:99:9d:
bc:f1:6a:38:ac:3b:ed:4c:5d:41:77:c3:5b:2b:6d:
b1:49:d4:0a:64:59:be:76:90:02:38:22:75:92:71:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:02:22:47:84:0F:8E:C8:5F:60:D0:2E:26:99:AE:FF:86:96:CA:BC
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/MgIiR4QPjshfYNAuJpmu_4aWyrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.38.0/24
195.190.130.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e2:d4:a5:77:0e:61:09:c3:5a:e9:ca:9d:d9:03:3c:94:fd:
1b:d3:20:71:87:ba:9d:b6:e9:a4:a5:47:c9:7d:1b:0d:40:16:
7f:b1:73:7a:e7:21:67:95:a3:91:4a:9d:f1:a7:84:92:b3:3f:
3a:8e:0b:55:f3:99:0e:77:09:d3:06:1e:cb:70:ed:7a:12:2f:
eb:9b:65:92:91:84:77:9e:b1:e9:b9:24:ab:fe:85:80:4c:43:
e6:7f:f5:b5:ea:8d:d5:a9:9f:53:d8:6f:e5:5c:f8:98:d9:bb:
d0:a3:5e:ef:7a:3c:86:de:3b:54:3d:ba:a1:29:ef:2e:e3:19:
93:8d:de:4f:8d:a7:a5:74:37:88:3b:3a:67:f9:88:2a:36:5c:
e6:d4:34:0b:d6:72:ba:50:39:8b:42:bf:06:cc:77:c3:cc:16:
d2:7d:3c:51:dc:05:fb:b4:6e:86:d3:6a:0c:14:99:1e:e3:76:
cf:57:b5:a9:a9:5c:38:08:8e:14:a0:41:ef:b0:84:c9:93:d4:
6a:2a:20:c5:1d:2c:90:7d:a3:e3:c0:61:cc:71:4b:4b:68:56:
a5:3b:6e:7c:66:13:66:a7:10:da:a8:91:36:d5:8b:57:c0:7c:
1b:fb:33:16:ec:79:98:23:c4:ce:cc:b9:b4:22:59:a2:10:52:
f6:6e:17:e3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWRWOzWoo8vBlzXS68ItgB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODQ2NzQxMTM5MjYzMzg4ZDk4NGRiMWU5N2UwMzE2Njlj
NjQ4NmUwHhcNMjMwMTA4MTIyNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjAyMjI0Nzg0MGY4ZWM4NWY2MGQwMmUyNjk5YWVmZjg2OTZjYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS8or3pA1hTMNlS2AocUqpNsmiKf
QcShdxL2Y5DyrV3w6HxE5yNKsRtHRUU7MoLwIV+UXQsxortDdeMbQeiEY+S/O4jg
7wR84LDcd2ABXoptSKLk8PkQyrNe4OaBEqhdWND5tItipcYllBw0bIfS1zTD1J8R
el8gNFX6rO4AZGBTYOvJeAPuXbCU54trmmn1EBk5Bj0fvCIvZM6Si3o1uN4y6o0O
pO5riIubWKDXBmWJ+0XpaWoK5dWd+4p8tQ+XhBZI0th/UuGFM60ARTr3BNW5IsB+
sQ1Y4S88ptHBmZ288Wo4rDvtTF1Bd8NbK22xSdQKZFm+dpACOCJ1knFu3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDICIkeED47IX2DQLiaZrv+Glsq8MB8GA1UdIwQY
MBaAFJSEZ0ETkmM4jZhNsel+AxZpxkhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElSblFST1NZemlObUUyeDZYNERGbW5HU0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hNDkxMDItMDYxMi00N2EwLTgxMTct
Y2IxMTI1MDA3ZGZiLzEvTWdJaVI0UVBqc2hmWU5BdUpwbXVfNGFXeXJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hNDkxMDItMDYxMi00N2EwLTgxMTctY2IxMTI1MDA3ZGZi
LzEvbElSblFST1NZemlObUUyeDZYNERGbW5HU0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw7YmAwQA
w76CMA0GCSqGSIb3DQEBCwUAA4IBAQBn4tSldw5hCcNa6cqd2QM8lP0b0yBxh7qd
tumkpUfJfRsNQBZ/sXN65yFnlaORSp3xp4SSsz86jgtV85kOdwnTBh7LcO16Ei/r
m2WSkYR3nrHpuSSr/oWATEPmf/W16o3VqZ9T2G/lXPiY2bvQo17vejyG3jtUPbqh
Ke8u4xmTjd5PjaeldDeIOzpn+YgqNlzm1DQL1nK6UDmLQr8GzHfDzBbSfTxR3AX7
tG6G02oMFJke43bPV7WpqVw4CI4UoEHvsITJk9RqKiDFHSyQfaPjwGHMcUtLaFal
O258ZhNmpxDaqJE21YtXwHwb+zMW7HmYI8TOzLm0IlmiEFL2bhfj
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-fra.rpki-client.org