Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/mgDlERPjbbDMwWY4Rh6BxQGNOSY.roa
File: mgDlERPjbbDMwWY4Rh6BxQGNOSY.roa (raw, json)
Hash identifier: O/01VQU4AnWxnG3hhHpqC+HXM6JtapUKGJ87UV7SsuU=
Subject key identifier: 9A:00:E5:11:13:E3:6D:B0:CC:C1:66:38:46:1E:81:C5:01:8D:39:26
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018570E7511C59F0EA759F5521D3CACAC4CD
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/mgDlERPjbbDMwWY4Rh6BxQGNOSY.roa
Signing time: Mon 02 Jan 2023 05:14:45 +0000
ROA not before: Mon 02 Jan 2023 05:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43811
IP address blocks: 194.176.54.0/23 maxlen: 23
85.206.140.0/24 maxlen: 24
85.206.141.0/24 maxlen: 24
85.206.142.0/24 maxlen: 24
85.206.143.0/24 maxlen: 24
82.135.217.0/24 maxlen: 24
82.135.218.0/24 maxlen: 24
85.206.148.0/22 maxlen: 22
195.12.180.0/24 maxlen: 24
194.176.36.0/24 maxlen: 24
194.176.32.0/24 maxlen: 24
194.176.33.0/24 maxlen: 24
194.176.35.0/24 maxlen: 24
88.119.222.0/24 maxlen: 24
88.119.220.0/24 maxlen: 24
88.119.221.0/24 maxlen: 24
212.47.123.0/24 maxlen: 24
88.119.246.0/24 maxlen: 24
31.193.192.0/24 maxlen: 24
31.193.197.0/24 maxlen: 24
31.193.198.0/24 maxlen: 24
31.193.199.0/24 maxlen: 24
31.193.193.0/24 maxlen: 24
31.193.194.0/24 maxlen: 24
31.193.195.0/24 maxlen: 24
31.193.196.0/24 maxlen: 24
88.119.180.0/24 maxlen: 24
81.7.105.0/24 maxlen: 24
88.118.143.0/24 maxlen: 24
81.7.107.0/24 maxlen: 24
81.7.106.0/24 maxlen: 24
81.7.114.0/24 maxlen: 24
81.7.115.0/24 maxlen: 24
82.135.132.0/24 maxlen: 24
92.61.32.0/20 maxlen: 32
185.3.231.0/24 maxlen: 24
185.3.228.0/24 maxlen: 24
185.3.229.0/24 maxlen: 24
185.3.230.0/24 maxlen: 24
2a00:1eb8:c004::/48 maxlen: 48
2a02:118:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:51:1c:59:f0:ea:75:9f:55:21:d3:ca:ca:c4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 05:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a00e51113e36db0ccc16638461e81c5018d3926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:7d:75:10:9a:76:3b:8e:2b:53:92:b4:3e:
ad:4e:27:e5:74:fa:6d:5a:83:20:c4:ad:90:81:e3:
1b:a1:03:fa:27:d9:ce:bf:57:f1:a2:fc:f5:ac:e1:
00:94:27:b4:28:72:73:69:7d:04:85:7a:be:62:02:
62:75:05:77:4a:e1:bb:ff:40:9b:d2:c7:ac:cb:64:
f5:e6:2c:b3:c9:7f:9f:4c:cd:fb:f9:ca:e8:ba:d7:
4c:8e:ec:e1:b2:9c:59:c6:8a:a2:ea:17:62:15:73:
5d:10:82:d1:1e:a7:4c:91:9a:5c:23:97:2b:d4:e2:
4b:e9:ab:09:f7:96:c2:92:ad:9a:2c:ed:09:60:b9:
cc:25:0b:89:22:6f:f9:5b:f0:53:ac:2b:1b:e9:f4:
8c:c2:e1:d7:71:85:7a:bf:46:df:ac:84:6b:c6:0a:
bb:d7:e2:8d:6d:1c:9a:f8:4e:8a:df:97:e5:fe:45:
02:bf:4e:ba:e4:31:c8:ac:13:e0:11:63:9d:6d:f1:
44:38:9a:af:01:c3:2f:d8:49:db:cc:82:bf:82:2a:
a5:cb:06:ab:cc:bb:7d:d8:3e:ee:5d:e0:1f:61:69:
74:cc:b9:d9:7c:a7:72:48:70:50:c6:b6:4e:99:41:
9d:3a:dc:02:21:8f:d6:41:bb:6b:6c:2e:36:80:58:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:00:E5:11:13:E3:6D:B0:CC:C1:66:38:46:1E:81:C5:01:8D:39:26
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/mgDlERPjbbDMwWY4Rh6BxQGNOSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.192.0/21
81.7.105.0-81.7.107.255
81.7.114.0/23
82.135.132.0/24
82.135.217.0-82.135.218.255
85.206.140.0/22
85.206.148.0/22
88.118.143.0/24
88.119.180.0/24
88.119.220.0-88.119.222.255
88.119.246.0/24
92.61.32.0/20
185.3.228.0/22
194.176.32.0/23
194.176.35.0-194.176.36.255
194.176.54.0/23
195.12.180.0/24
212.47.123.0/24
IPv6:
2a00:1eb8:c004::/48
2a02:118:2::/48
Signature Algorithm: sha256WithRSAEncryption
07:d8:53:8c:9b:fd:45:95:c9:07:f2:49:12:3b:d3:ba:3c:6a:
eb:18:51:5a:68:c4:c1:25:01:7b:6a:4e:05:4e:79:44:59:48:
b5:17:11:75:79:f3:e5:7c:93:d7:0f:f6:a9:dc:70:2e:ed:7e:
2d:ff:b5:48:d8:09:e2:23:67:2b:52:16:24:71:65:92:c0:f6:
aa:2e:32:ba:d7:59:47:00:b5:fc:bb:1f:d6:c4:91:11:b1:1d:
54:8f:e5:39:84:46:07:25:2a:e0:04:b0:9c:84:db:fc:ec:79:
2d:b9:d1:30:8c:0d:fd:29:73:9a:5f:22:86:55:71:b8:71:d6:
26:0e:70:1b:ab:0a:13:e1:5f:bd:26:68:68:72:8e:dc:c5:f8:
3d:16:72:26:e4:e5:ca:61:0c:05:99:ed:e4:08:80:b7:26:23:
3f:00:07:39:0a:1a:f2:d8:14:6a:d8:78:3a:7d:ba:60:bc:e2:
7c:c5:f2:09:6f:49:5f:50:2b:5b:a8:dd:1f:87:03:7b:05:f8:
fd:53:ac:ca:58:c1:f7:84:01:91:7a:41:a2:8c:9d:60:5a:19:
cb:91:19:01:d1:07:9a:62:6e:ed:3a:98:d9:86:a4:ea:67:ad:
da:3c:3c:ea:4a:c9:77:c7:5d:53:f9:8a:34:e0:a8:55:6f:3e:
57:a9:64:12
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAYVw51EcWfDqdZ9VIdPKysTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm
NDYyZWEwHhcNMjMwMTAyMDUxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTAwZTUxMTEzZTM2ZGIwY2NjMTY2Mzg0NjFlODFjNTAxOGQzOTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTx9dRCadjuOK1OStD6tTifldPpt
WoMgxK2QgeMboQP6J9nOv1fxovz1rOEAlCe0KHJzaX0EhXq+YgJidQV3SuG7/0Cb
0sesy2T15iyzyX+fTM37+croutdMjuzhspxZxoqi6hdiFXNdEILRHqdMkZpcI5cr
1OJL6asJ95bCkq2aLO0JYLnMJQuJIm/5W/BTrCsb6fSMwuHXcYV6v0bfrIRrxgq7
1+KNbRya+E6K35fl/kUCv0665DHIrBPgEWOdbfFEOJqvAcMv2EnbzIK/giqlywar
zLt92D7uXeAfYWl0zLnZfKdySHBQxrZOmUGdOtwCIY/WQbtrbC42gFg+zQIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFJoA5RET422wzMFmOEYegcUBjTkmMB8GA1UdIwQY
MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw
LWJlNTgzMmQ1ZjdhYS8xL21nRGxFUlBqYmJETXdXWTRSaDZCeFFHTk9TWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh
YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgcMGCCsGAQUFBwEHAQH/BIGzMIGwMIGTBAIAATCBjAME
Ax/BwDAMAwQAUQdpAwQCUQdoAwQBUQdyAwQAUoeEMAwDBABSh9kDBABSh9oDBAJV
zowDBAJVzpQDBABYdo8DBABYd7QwDAMEAlh33AMEAFh33gMEAFh39gMEBFw9IAME
ArkD5AMEAcKwIDAMAwQAwrAjAwQAwrAkAwQBwrA2AwQAwwy0AwQA1C97MBgEAgAC
MBIDBwAqAB64wAQDBwAqAgEYAAIwDQYJKoZIhvcNAQELBQADggEBAAfYU4yb/UWV
yQfySRI707o8ausYUVpoxMElAXtqTgVOeURZSLUXEXV58+V8k9cP9qnccC7tfi3/
tUjYCeIjZytSFiRxZZLA9qouMrrXWUcAtfy7H9bEkRGxHVSP5TmERgclKuAEsJyE
2/zseS250TCMDf0pc5pfIoZVcbhx1iYOcBurChPhX70maGhyjtzF+D0Wcibk5cph
DAWZ7eQIgLcmIz8ABzkKGvLYFGrYeDp9umC84nzF8glvSV9QK1uo3R+HA3sF+P1T
rMpYwfeEAZF6QaKMnWBaGcuRGQHRB5pibu06mNmGpOpnrdo8POpKyXfHXVP5ijTg
qFVvPlepZBI=
-----END CERTIFICATE-----
Generated at Wed Oct 11 06:06:49 2023 by rpki-client on console-fra.rpki-client.org