Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/MBwXg400ia_bhXbHGzVOUI1SSmY.roa
File: MBwXg400ia_bhXbHGzVOUI1SSmY.roa (raw, json)
Hash identifier: G9AWVkC9s7E7gXzLDcMbHfu0zwNDTYTJGkUDD7k2lWM=
Subject key identifier: 30:1C:17:83:8D:34:89:AF:DB:85:76:C7:1B:35:4E:50:8D:52:4A:66
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0188FBFCEFA71E9B0A0A7C9FFB5109B0BDE7
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/MBwXg400ia_bhXbHGzVOUI1SSmY.roa
Signing time: Tue 27 Jun 2023 08:33:57 +0000
ROA not before: Tue 27 Jun 2023 08:33:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209408
IP address blocks: 80.71.232.0/24 maxlen: 24
45.66.224.0/22 maxlen: 22
81.29.151.0/24 maxlen: 24
81.29.153.0/24 maxlen: 24
2a09:6c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 04 Jul 2023 05:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:fc:ef:a7:1e:9b:0a:0a:7c:9f:fb:51:09:b0:bd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jun 27 08:33:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=301c17838d3489afdb8576c71b354e508d524a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:93:0a:a7:25:e4:74:18:c4:48:a4:3a:5a:
07:78:d3:54:eb:4e:80:3f:d0:39:da:43:11:35:4f:
e3:69:c9:94:0e:36:b9:0e:78:c6:b3:d3:23:db:1a:
d8:6f:97:34:fd:24:99:81:a6:b2:4e:2d:fd:d7:e3:
73:bb:3f:20:be:c4:80:f8:ab:1a:c0:40:2d:44:9f:
e6:c4:d3:50:21:68:3f:30:3c:9d:6b:bf:67:6a:c0:
7d:52:9c:77:0a:b5:1e:ce:54:c7:19:6f:13:06:31:
d4:f5:ff:e8:85:62:74:e2:c1:0e:2c:aa:21:54:e5:
0c:a0:56:7a:78:a3:ca:7e:85:03:1c:36:4f:f6:cd:
3c:e0:e5:f7:f1:cd:d9:3a:41:9d:f0:30:42:c6:e1:
34:8e:45:ac:6b:d2:b0:9e:e6:3d:b8:48:b9:82:89:
b0:e8:85:ce:ec:d1:63:41:ec:05:b8:a5:e8:0e:0d:
4e:b9:45:66:63:15:9c:2d:32:47:5b:33:e0:e6:8f:
98:2e:fd:ac:01:de:fd:de:9a:ae:6e:9b:85:b7:e1:
5d:8f:ea:3b:2e:0b:a9:33:79:ed:c0:96:11:20:8a:
f5:a3:c9:cc:da:24:99:16:46:ec:b3:39:f7:ab:83:
1f:8f:71:65:fb:9a:e5:b8:50:6e:06:49:54:a8:d0:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1C:17:83:8D:34:89:AF:DB:85:76:C7:1B:35:4E:50:8D:52:4A:66
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/MBwXg400ia_bhXbHGzVOUI1SSmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.224.0/22
80.71.232.0/24
81.29.151.0/24
81.29.153.0/24
IPv6:
2a09:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
28:fb:0a:da:9b:05:34:5a:4a:2a:e6:69:4d:d0:8b:69:47:0d:
cc:f1:95:d6:d5:e6:41:be:29:6d:2e:2f:ed:9a:7b:c0:36:70:
88:e0:47:c2:76:f2:2c:ce:a7:64:21:bc:03:eb:ae:3d:01:b6:
27:8e:7b:fd:21:ea:02:d1:24:79:b1:6f:43:61:c5:9d:3e:21:
85:a9:a2:e3:86:44:d9:95:db:a7:28:62:b8:0c:de:0b:3b:6a:
d9:65:a7:da:67:27:a8:14:df:0d:41:c9:bb:d6:6a:3f:61:64:
b9:94:6c:57:1c:35:94:34:06:a9:9b:da:79:96:07:69:78:fa:
61:c0:4c:cf:77:27:75:81:12:45:e2:37:70:66:9c:b0:8c:8f:
17:96:3f:2d:63:0c:da:50:41:8f:1d:91:2d:75:21:a4:fd:4a:
03:a0:77:94:ad:65:ba:86:a8:24:2c:77:81:47:e9:c6:c7:7e:
23:e5:44:d6:48:22:3f:86:25:8f:82:a4:23:e8:52:c0:b3:12:
24:2a:d5:63:cb:3a:a6:0b:6a:41:5c:53:9a:8f:5d:b5:9d:8f:
48:b1:cb:93:b9:dd:60:6a:47:e4:d7:f3:d6:ea:70:fa:00:d9:
58:58:10:0c:9c:98:6b:94:65:03:4f:e3:78:9b:26:e2:38:db:
a7:fb:74:80
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYj7/O+nHpsKCnyf+1EJsL3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMwNjI3MDgzMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDFjMTc4MzhkMzQ4OWFmZGI4NTc2YzcxYjM1NGU1MDhkNTI0YTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArduTCqcl5HQYxEikOloHeNNU606A
P9A52kMRNU/jacmUDja5DnjGs9Mj2xrYb5c0/SSZgaayTi391+Nzuz8gvsSA+Ksa
wEAtRJ/mxNNQIWg/MDyda79nasB9Upx3CrUezlTHGW8TBjHU9f/ohWJ04sEOLKoh
VOUMoFZ6eKPKfoUDHDZP9s084OX38c3ZOkGd8DBCxuE0jkWsa9KwnuY9uEi5gomw
6IXO7NFjQewFuKXoDg1OuUVmYxWcLTJHWzPg5o+YLv2sAd793pqubpuFt+Fdj+o7
LgupM3ntwJYRIIr1o8nM2iSZFkbsszn3q4Mfj3Fl+5rluFBuBklUqNBGSQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFDAcF4ONNImv24V2xxs1TlCNUkpmMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvTUJ3WGc0MDBpYV9iaFhiSEd6Vk9VSTFTU21ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLULgAwQA
UEfoAwQAUR2XAwQAUR2ZMA0EAgACMAcDBQMqCWxAMA0GCSqGSIb3DQEBCwUAA4IB
AQAo+wramwU0Wkoq5mlN0ItpRw3M8ZXW1eZBviltLi/tmnvANnCI4EfCdvIszqdk
IbwD6649AbYnjnv9IeoC0SR5sW9DYcWdPiGFqaLjhkTZldunKGK4DN4LO2rZZafa
ZyeoFN8NQcm71mo/YWS5lGxXHDWUNAapm9p5lgdpePphwEzPdyd1gRJF4jdwZpyw
jI8Xlj8tYwzaUEGPHZEtdSGk/UoDoHeUrWW6hqgkLHeBR+nGx34j5UTWSCI/hiWP
gqQj6FLAsxIkKtVjyzqmC2pBXFOaj121nY9IscuTud1gakfk1/PW6nD6ANlYWBAM
nJhrlGUDT+N4mybiONun+3SA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org