Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/MNcdp084Xci789eqPy8gCSC3iao.roa
File: MNcdp084Xci789eqPy8gCSC3iao.roa (raw, json)
Hash identifier: B0nxLUjatf3dk8YdSLDxKW1u7ZWbV8g+RmGEtxYmmqY=
Subject key identifier: 30:D7:1D:A7:4F:38:5D:C8:BB:F3:D7:AA:3F:2F:20:09:20:B7:89:AA
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 019121EF6DC3A9670FC3867EB60688CE9FF2
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/MNcdp084Xci789eqPy8gCSC3iao.roa
Signing time: Mon 05 Aug 2024 09:47:04 +0000
ROA not before: Mon 05 Aug 2024 09:47:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204528
IP address blocks: 81.199.15.0/24 maxlen: 24
81.199.20.0/24 maxlen: 24
81.199.94.0/24 maxlen: 24
81.199.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 06:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:ef:6d:c3:a9:67:0f:c3:86:7e:b6:06:88:ce:9f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Aug 5 09:47:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30d71da74f385dc8bbf3d7aa3f2f200920b789aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:6e:37:77:71:d2:19:d2:dd:64:07:03:c7:
84:20:91:07:8a:c2:87:b7:b5:5e:61:1a:98:ca:e5:
0a:28:cf:a3:3e:59:e6:52:d1:55:1f:58:43:f6:bd:
3b:1d:9f:48:d8:1f:ec:4c:10:11:37:42:dd:8c:76:
71:32:2d:9f:58:14:be:69:52:cc:f3:ac:96:84:27:
22:e4:53:2d:61:32:50:2e:0c:59:ac:af:7b:a5:8b:
7a:e6:c1:cf:60:8f:5c:d6:d2:a7:b0:f4:8e:18:66:
47:97:fd:34:bd:54:b1:8e:ac:73:e8:5b:c5:e8:5d:
79:ee:4b:33:64:93:28:c1:8e:42:2b:fd:5c:60:ce:
2c:ac:e8:4b:28:91:0f:74:49:89:c3:21:ea:e9:46:
e9:51:52:f6:e8:a0:e4:66:b2:9a:cc:1f:16:da:e8:
d0:7e:b8:31:95:a3:c3:12:cc:a1:36:13:d5:85:c9:
1e:53:04:a1:89:c4:2d:2d:76:a0:3d:a7:a6:d4:1a:
f1:da:d2:75:73:ef:50:c2:dc:d5:77:75:7e:1a:03:
c2:7b:37:be:f0:fa:ee:fc:0a:62:92:33:77:a8:f1:
49:3e:76:2a:1f:1e:c9:fd:a9:8b:69:27:77:eb:59:
68:c2:b1:cd:3c:30:cd:34:43:80:be:6d:60:6a:de:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:1D:A7:4F:38:5D:C8:BB:F3:D7:AA:3F:2F:20:09:20:B7:89:AA
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/MNcdp084Xci789eqPy8gCSC3iao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.15.0/24
81.199.20.0/24
81.199.94.0/24
81.199.201.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a5:b7:7a:27:52:60:19:25:f6:88:14:71:28:78:44:98:94:
dc:e8:af:95:6c:00:61:48:bf:7c:9e:58:61:4e:48:6a:12:e4:
66:65:68:24:4a:e3:11:37:4b:69:44:8f:38:ed:09:1b:8b:21:
17:8b:9c:1e:4b:87:b4:99:9f:3b:72:d6:9d:8b:96:d8:8e:f3:
b8:92:fd:15:50:00:e4:33:bf:f0:84:4e:32:5c:56:c4:62:4f:
29:54:bc:b9:42:d4:9e:93:b0:42:6c:17:da:f3:09:49:42:4f:
87:a7:33:ce:aa:de:4b:8e:bf:94:65:4d:42:62:80:48:75:8e:
3f:87:a2:e6:74:fd:ff:58:66:8d:98:a4:d6:ef:05:36:bf:b5:
19:32:12:94:eb:56:8d:d2:6f:98:19:66:e3:56:e4:b5:19:b4:
a1:69:40:3e:c1:3f:88:5f:4e:c3:29:31:94:ce:9e:03:f8:da:
19:9c:2c:9a:b5:48:32:9d:1f:cd:4b:49:92:93:11:a3:c8:26:
59:6c:f7:4a:67:80:81:a9:be:4d:6e:04:ba:fb:30:3c:8a:c0:
b2:7d:53:1c:cf:26:8b:8c:46:7b:8a:8b:41:16:97:c9:15:18:
10:6e:ab:87:57:a4:21:ac:fb:b7:43:21:9f:bf:f0:36:00:24:
d5:5f:05:dc
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZEh723DqWcPw4Z+tgaIzp/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjQwODA1MDk0NzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGQ3MWRhNzRmMzg1ZGM4YmJmM2Q3YWEzZjJmMjAwOTIwYjc4OWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0stuN3dx0hnS3WQHA8eEIJEHisKH
t7VeYRqYyuUKKM+jPlnmUtFVH1hD9r07HZ9I2B/sTBARN0LdjHZxMi2fWBS+aVLM
86yWhCci5FMtYTJQLgxZrK97pYt65sHPYI9c1tKnsPSOGGZHl/00vVSxjqxz6FvF
6F157kszZJMowY5CK/1cYM4srOhLKJEPdEmJwyHq6UbpUVL26KDkZrKazB8W2ujQ
frgxlaPDEsyhNhPVhckeUwShicQtLXagPaem1Brx2tJ1c+9QwtzVd3V+GgPCeze+
8Pru/ApikjN3qPFJPnYqHx7J/amLaSd361lowrHNPDDNNEOAvm1gat7DhQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDDXHadPOF3Iu/PXqj8vIAkgt4mqMB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvTU5jZHAwODRYY2k3ODllcVB5OGdDU0MzaWFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUccPAwQA
UccUAwQAUcdeAwQAUcfJMA0GCSqGSIb3DQEBCwUAA4IBAQBIpbd6J1JgGSX2iBRx
KHhEmJTc6K+VbABhSL98nlhhTkhqEuRmZWgkSuMRN0tpRI847QkbiyEXi5weS4e0
mZ87ctadi5bYjvO4kv0VUADkM7/whE4yXFbEYk8pVLy5QtSek7BCbBfa8wlJQk+H
pzPOqt5Ljr+UZU1CYoBIdY4/h6LmdP3/WGaNmKTW7wU2v7UZMhKU61aN0m+YGWbj
VuS1GbShaUA+wT+IX07DKTGUzp4D+NoZnCyatUgynR/NS0mSkxGjyCZZbPdKZ4CB
qb5NbgS6+zA8isCyfVMczyaLjEZ7iotBFpfJFRgQbquHV6QhrPu3QyGfv/A2ACTV
XwXc
-----END CERTIFICATE-----
Generated at Mon Aug 19 09:21:46 2024 by rpki-client on console-ams.rpki-client.org