Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/c-MpFnMaqXVuBjg8JQcVcpgeyqU.roa
File: c-MpFnMaqXVuBjg8JQcVcpgeyqU.roa (raw, json)
Hash identifier: 4GdsATp6QaC8GlEuAKD+jGT0Exu7F3yAlP39BZevao8=
Subject key identifier: 73:E3:29:16:73:1A:A9:75:6E:06:38:3C:25:07:15:72:98:1E:CA:A5
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 01856FCB9FA7DD7AEE899ABC7AEDEE3C9DF9
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/c-MpFnMaqXVuBjg8JQcVcpgeyqU.roa
Signing time: Mon 02 Jan 2023 00:04:53 +0000
ROA not before: Mon 02 Jan 2023 00:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44909
IP address blocks: 195.66.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:9f:a7:dd:7a:ee:89:9a:bc:7a:ed:ee:3c:9d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Jan 2 00:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73e32916731aa9756e06383c25071572981ecaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:e8:b0:80:42:3b:08:31:91:07:7b:ca:ef:
03:5f:23:ff:2f:c9:fb:87:1e:87:0f:83:9a:d4:85:
93:90:f8:06:57:35:ed:08:f7:7b:da:e6:18:ed:b4:
03:3c:10:9b:36:96:6d:4b:83:e2:da:86:ec:1d:09:
a2:02:cb:18:18:c6:4f:48:54:44:c6:6d:2d:4d:74:
01:e0:bb:8b:67:23:7a:01:47:f6:09:37:44:29:12:
8b:06:a2:a0:70:c6:00:c6:fe:6e:dd:f4:29:3c:95:
18:a7:65:9b:32:99:a6:58:7e:38:a3:10:59:0d:5e:
d4:04:d8:55:e0:27:5c:88:2d:87:c6:c9:c0:5f:0b:
23:07:2a:f7:05:ae:43:f6:16:63:a9:4a:cc:ef:13:
95:d9:21:3b:49:a2:ac:29:71:23:ce:0d:76:db:fc:
07:cc:ae:27:ca:e4:b2:f3:cc:ec:9a:d3:8d:8a:43:
14:a0:ca:74:ca:72:80:1a:be:ef:af:31:60:90:3e:
f6:b1:14:93:ef:79:f1:73:08:e0:e1:cc:f3:5c:94:
43:30:cf:be:d4:fe:9a:ba:74:21:60:66:66:2b:96:
31:1f:7a:c7:73:31:60:5e:dc:da:17:00:ee:f6:78:
aa:6d:12:24:62:61:3a:c9:ab:c3:bc:c3:78:b7:8d:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E3:29:16:73:1A:A9:75:6E:06:38:3C:25:07:15:72:98:1E:CA:A5
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/c-MpFnMaqXVuBjg8JQcVcpgeyqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:12:8a:9f:41:a8:ea:62:f7:bd:5c:a3:28:bd:43:ad:59:0f:
6c:fa:4a:c1:2e:32:01:d1:7c:27:ba:8c:5b:1a:99:76:4f:87:
9b:10:54:fc:af:15:3e:8e:48:0a:61:59:4b:13:d3:61:11:40:
02:e0:73:ef:b0:6c:b4:81:de:3a:e4:f1:0e:5c:c2:bc:2f:a3:
11:15:65:0a:c5:63:d7:93:31:d9:f6:4f:0f:61:89:b2:c4:82:
35:dc:db:88:88:9f:f4:ca:86:14:4e:a6:73:91:c1:d9:9d:8d:
d4:de:75:5a:15:19:22:ed:bd:2f:b4:53:47:5a:fa:58:f0:fc:
19:53:a9:ca:aa:dd:ff:2f:80:8e:24:a0:3d:83:5f:7d:4e:f7:
30:22:d2:20:d4:6b:16:7d:26:46:bd:18:43:4b:81:f1:3c:b7:
1a:01:57:14:7e:de:34:a8:71:17:f1:93:8c:13:25:b9:53:2b:
e7:79:d5:d4:7e:a4:7c:fe:1c:19:de:6b:bf:43:28:e3:03:9c:
be:82:b8:91:91:c9:9d:83:e6:2a:5d:ce:58:94:9e:bc:b9:21:
ae:eb:24:58:7b:6b:85:98:c5:8d:80:5a:71:24:54:75:5a:c9:
25:16:c4:bc:f1:13:7e:89:fd:c8:86:f5:f1:16:6a:94:1d:9e:
95:a7:bd:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvy5+n3XruiZq8eu3uPJ35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NjAxNTU3OGM5NDhmMzFiZjc0YTFlMWZmZmQ3ZmEzZTM0
NjAyMDYwHhcNMjMwMTAyMDAwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2UzMjkxNjczMWFhOTc1NmUwNjM4M2MyNTA3MTU3Mjk4MWVjYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP7osIBCOwgxkQd7yu8DXyP/L8n7
hx6HD4Oa1IWTkPgGVzXtCPd72uYY7bQDPBCbNpZtS4Pi2obsHQmiAssYGMZPSFRE
xm0tTXQB4LuLZyN6AUf2CTdEKRKLBqKgcMYAxv5u3fQpPJUYp2WbMpmmWH44oxBZ
DV7UBNhV4CdciC2HxsnAXwsjByr3Ba5D9hZjqUrM7xOV2SE7SaKsKXEjzg122/wH
zK4nyuSy88zsmtONikMUoMp0ynKAGr7vrzFgkD72sRST73nxcwjg4czzXJRDMM++
1P6aunQhYGZmK5YxH3rHczFgXtzaFwDu9niqbRIkYmE6yavDvMN4t41AAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHPjKRZzGql1bgY4PCUHFXKYHsqlMB8GA1UdIwQY
MBaAFJZgFVeMlI8xv3Sh4f/9f6PjRgIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYt
MmQ4MGNiMjU1NzlhLzEvYy1NcEZuTWFxWFZ1QmpnOEpRY1ZjcGdleXFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYtMmQ4MGNiMjU1Nzlh
LzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0J8MA0G
CSqGSIb3DQEBCwUAA4IBAQAsEoqfQajqYve9XKMovUOtWQ9s+krBLjIB0Xwnuoxb
Gpl2T4ebEFT8rxU+jkgKYVlLE9NhEUAC4HPvsGy0gd465PEOXMK8L6MRFWUKxWPX
kzHZ9k8PYYmyxII13NuIiJ/0yoYUTqZzkcHZnY3U3nVaFRki7b0vtFNHWvpY8PwZ
U6nKqt3/L4COJKA9g199TvcwItIg1GsWfSZGvRhDS4HxPLcaAVcUft40qHEX8ZOM
EyW5UyvnedXUfqR8/hwZ3mu/QyjjA5y+griRkcmdg+YqXc5YlJ68uSGu6yRYe2uF
mMWNgFpxJFR1WsklFsS88RN+if3IhvXxFmqUHZ6Vp723
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:44 2024 by rpki-client on console-ams.rpki-client.org