Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/mbccdEtyHx7Yj2Se3NMaJdRLMRk.roa
File: mbccdEtyHx7Yj2Se3NMaJdRLMRk.roa (raw, json)
Hash identifier: L5CCZ3Xoec5BaSXN+wVhv1SvHmWKht0+JNUQOYN64fQ=
Subject key identifier: 99:B7:1C:74:4B:72:1F:1E:D8:8F:64:9E:DC:D3:1A:25:D4:4B:31:19
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 018CC3B738DF583454891EA3807BB54651D2
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/mbccdEtyHx7Yj2Se3NMaJdRLMRk.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56411
IP address blocks: 193.46.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:38:df:58:34:54:89:1e:a3:80:7b:b5:46:51:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99b71c744b721f1ed88f649edcd31a25d44b3119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:42:da:07:69:08:11:96:ea:a6:8e:ed:f9:
f0:e8:a4:e9:ab:b1:85:6a:d9:c7:e2:a0:73:36:a6:
ef:74:e2:6d:6a:2a:1d:4a:69:13:5f:2d:12:39:07:
06:56:a9:d7:05:0e:c9:03:83:95:1a:a1:a7:d5:20:
30:32:6f:46:6b:bf:fb:a3:42:06:d8:86:61:e0:d8:
02:9b:0b:3b:e8:4e:47:33:ac:2b:9f:43:78:9b:a1:
2a:15:e6:b6:fd:59:1d:4d:ae:e9:e4:09:ef:d6:4e:
5b:40:97:93:6f:94:60:0d:a0:34:1c:ad:d3:49:8e:
90:76:8d:d0:e2:bf:05:5d:51:3a:2e:56:cb:a7:08:
95:1a:c8:af:74:0f:d0:75:c8:6a:79:b7:f5:02:ee:
f6:b2:6f:ef:e0:8a:9c:c4:45:b8:57:19:d8:0e:5c:
0e:ab:bb:68:0f:c5:fe:f8:e4:8d:8d:6e:65:43:70:
09:b3:40:d8:b6:06:29:c3:0f:b0:3d:05:eb:6b:e5:
2b:c2:50:39:e9:ad:7b:2f:15:eb:77:e0:8c:40:ba:
5e:5c:19:7e:61:5c:a3:ad:2c:cb:67:b2:74:66:89:
36:71:e2:30:05:b4:08:fd:31:31:11:ae:55:9f:35:
af:39:c8:fb:7e:1f:96:df:39:11:0c:cb:c6:7e:27:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B7:1C:74:4B:72:1F:1E:D8:8F:64:9E:DC:D3:1A:25:D4:4B:31:19
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/mbccdEtyHx7Yj2Se3NMaJdRLMRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.62.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:cf:ed:61:54:23:90:f0:4e:f2:54:4c:cf:f8:ef:cd:f7:cc:
6c:64:48:84:bf:f4:51:51:aa:66:2e:d7:a3:18:b8:e1:cc:db:
dc:b0:67:5b:f9:ae:2c:ee:c6:a9:e4:bf:5f:11:2d:c6:9e:7a:
37:67:06:5c:91:a6:40:79:4b:e0:60:e9:5f:e6:db:a9:0d:69:
2f:be:b9:d9:61:46:77:99:1e:e1:e8:90:5d:d0:46:e4:57:d9:
c8:26:bf:15:4f:a9:b5:b1:89:28:f2:f0:1d:03:79:65:c0:4d:
7d:2c:a4:a3:c6:13:df:55:4c:d0:73:84:a2:1b:57:f6:38:c4:
83:4c:c3:b1:ba:3d:72:e1:61:5d:4f:dc:bd:1e:23:07:4b:7f:
9b:d9:3f:cc:e0:a7:10:38:86:7a:73:44:c8:b1:77:82:ad:d2:
b3:e1:42:f5:0c:e3:cb:3b:8b:0b:ee:44:06:a6:29:83:79:7c:
9c:cc:9e:39:fb:9e:3e:5e:ed:ee:e9:08:8f:8a:71:2c:4d:67:
06:71:a6:3c:b3:84:48:a2:d5:6e:45:2f:8f:1d:4b:f8:9b:92:
1e:7f:c6:e4:a0:95:ed:3b:01:a9:47:a5:33:98:20:44:09:41:
a9:71:b1:be:35:e5:c8:ad:89:a1:b6:61:cc:3b:f9:e7:07:95:
2e:bf:6b:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtzjfWDRUiR6jgHu1RlHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTY3MDNmMzBlMjA5OWEzZDkwMDZiZmE4NGU1YzZjNDg2
YThkMmUwHhcNMjQwMTAxMDYzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWI3MWM3NDRiNzIxZjFlZDg4ZjY0OWVkY2QzMWEyNWQ0NGIzMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY9C2gdpCBGW6qaO7fnw6KTpq7GF
atnH4qBzNqbvdOJtaiodSmkTXy0SOQcGVqnXBQ7JA4OVGqGn1SAwMm9Ga7/7o0IG
2IZh4NgCmws76E5HM6wrn0N4m6EqFea2/VkdTa7p5Anv1k5bQJeTb5RgDaA0HK3T
SY6Qdo3Q4r8FXVE6LlbLpwiVGsivdA/Qdchqebf1Au72sm/v4IqcxEW4VxnYDlwO
q7toD8X++OSNjW5lQ3AJs0DYtgYpww+wPQXra+UrwlA56a17LxXrd+CMQLpeXBl+
YVyjrSzLZ7J0Zok2ceIwBbQI/TExEa5VnzWvOcj7fh+W3zkRDMvGfieG3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJm3HHRLch8e2I9kntzTGiXUSzEZMB8GA1UdIwQY
MBaAFD+WcD8w4gmaPZAGv6hOXGxIao0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4Nzkt
OTMzN2YzNzQxNjhlLzEvbWJjY2RFdHlIeDdZajJTZTNOTWFKZFJMTVJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4NzktOTMzN2YzNzQxNjhl
LzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS4+MA0G
CSqGSIb3DQEBCwUAA4IBAQCuz+1hVCOQ8E7yVEzP+O/N98xsZEiEv/RRUapmLtej
GLjhzNvcsGdb+a4s7sap5L9fES3Gnno3ZwZckaZAeUvgYOlf5tupDWkvvrnZYUZ3
mR7h6JBd0EbkV9nIJr8VT6m1sYko8vAdA3llwE19LKSjxhPfVUzQc4SiG1f2OMSD
TMOxuj1y4WFdT9y9HiMHS3+b2T/M4KcQOIZ6c0TIsXeCrdKz4UL1DOPLO4sL7kQG
pimDeXyczJ45+54+Xu3u6QiPinEsTWcGcaY8s4RIotVuRS+PHUv4m5Ief8bkoJXt
OwGpR6UzmCBECUGpcbG+NeXIrYmhtmHMO/nnB5Uuv2vF
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:21 2025 by rpki-client