Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mlbl-7JKTL8gBlxf5rX4GwMPeOw.roa
File: mlbl-7JKTL8gBlxf5rX4GwMPeOw.roa (raw, json)
Hash identifier: 04ePlstx39AnhStLQWnpk4vCtGkkdOeutQryZRBMZ34=
Subject key identifier: 9A:56:E5:FB:B2:4A:4C:BF:20:06:5C:5F:E6:B5:F8:1B:03:0F:78:EC
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018ACC8F4A5CEB05DD7EA5CD7F25A19F4F35
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mlbl-7JKTL8gBlxf5rX4GwMPeOw.roa
Signing time: Mon 25 Sep 2023 13:37:37 +0000
ROA not before: Mon 25 Sep 2023 13:37:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216253
IP address blocks: 2a12:bec0:480::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:8f:4a:5c:eb:05:dd:7e:a5:cd:7f:25:a1:9f:4f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 25 13:37:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a56e5fbb24a4cbf20065c5fe6b5f81b030f78ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:54:a9:d7:4d:48:0d:8d:7d:4d:ee:65:d5:90:
7a:f6:18:29:4a:3f:6c:be:0d:7d:17:4c:59:6b:60:
51:76:8b:80:7f:47:88:f8:ec:a0:1b:9b:2d:7d:53:
69:e4:98:07:ee:5f:c2:ab:e1:f2:07:04:96:46:e3:
bb:ff:63:45:2e:3c:a4:ff:03:25:d8:54:c2:a1:91:
f3:96:7f:76:82:31:71:01:6a:f4:ae:20:ff:8d:8c:
0d:18:99:25:5a:15:d5:83:32:2b:24:b2:94:b9:a0:
5e:c9:23:4f:19:52:eb:a5:0a:04:de:9f:e5:82:6a:
d1:2a:85:54:c3:70:53:1d:84:3a:a7:42:bb:44:9e:
7f:1e:c9:9f:59:c1:27:05:58:8f:0c:23:65:ce:a6:
96:f9:2f:f4:b9:6a:69:7c:93:60:e9:1d:e0:93:8f:
cb:28:28:bd:a3:84:f4:42:52:f3:f3:ba:47:19:a2:
c9:84:0f:c7:a3:67:92:43:99:6f:50:ab:6c:02:35:
78:28:27:35:f9:48:89:d0:d2:79:41:19:37:8e:4c:
ce:c5:a6:6a:02:b3:90:b9:15:cf:83:38:2e:99:47:
9f:52:40:e0:2f:e9:ea:91:3f:40:a3:00:ba:1f:22:
60:ab:35:f2:25:14:83:79:f1:3c:24:81:44:4a:2d:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:56:E5:FB:B2:4A:4C:BF:20:06:5C:5F:E6:B5:F8:1B:03:0F:78:EC
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mlbl-7JKTL8gBlxf5rX4GwMPeOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:480::/44
Signature Algorithm: sha256WithRSAEncryption
97:7d:c2:21:a5:80:6f:0d:20:ff:20:5d:00:92:f4:60:01:bb:
2b:0d:7d:b9:e0:8c:10:48:eb:42:5b:55:35:be:34:10:cf:90:
e1:f3:f0:de:70:24:ab:53:e6:97:f2:8a:6b:a6:32:41:66:7b:
46:5f:76:5f:5e:77:26:ab:8a:d0:d3:11:24:11:85:8d:c6:d2:
41:0e:37:81:c6:d3:f0:b3:1f:e2:1b:9b:ac:e3:02:72:a8:00:
a7:c4:e7:35:dc:b8:96:f4:14:fc:8b:44:b9:3a:d3:9b:66:d9:
c0:fb:ea:ef:f2:43:5a:b5:d6:c9:6d:28:7b:a3:3f:cf:8a:0b:
16:2a:ca:c3:6a:53:b8:17:d0:ea:05:31:a3:dc:9d:74:32:cf:
8c:92:4f:96:11:ca:d0:0d:1a:d7:ce:b7:c2:4b:45:20:d6:e3:
91:89:c3:c9:96:b7:62:8c:c0:72:24:17:9c:34:d0:30:48:a5:
fa:53:4e:ea:e3:9a:6e:97:f7:2c:de:d4:56:21:b7:33:d5:19:
7f:3c:36:d0:16:d8:d8:23:af:89:63:5c:2d:d9:71:df:14:7c:
31:82:bf:d7:dc:b9:3d:23:96:1d:26:2d:bd:9f:f1:61:e7:a7:
6f:62:2b:e4:aa:c2:20:ac:f6:bb:d7:8c:7b:88:f4:32:9a:d5:
c5:7d:14:cd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYrMj0pc6wXdfqXNfyWhn081MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwOTI1MTMzNzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTU2ZTVmYmIyNGE0Y2JmMjAwNjVjNWZlNmI1ZjgxYjAzMGY3OGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglSp101IDY19Te5l1ZB69hgpSj9s
vg19F0xZa2BRdouAf0eI+OygG5stfVNp5JgH7l/Cq+HyBwSWRuO7/2NFLjyk/wMl
2FTCoZHzln92gjFxAWr0riD/jYwNGJklWhXVgzIrJLKUuaBeySNPGVLrpQoE3p/l
gmrRKoVUw3BTHYQ6p0K7RJ5/HsmfWcEnBViPDCNlzqaW+S/0uWppfJNg6R3gk4/L
KCi9o4T0QlLz87pHGaLJhA/Ho2eSQ5lvUKtsAjV4KCc1+UiJ0NJ5QRk3jkzOxaZq
ArOQuRXPgzgumUefUkDgL+nqkT9AowC6HyJgqzXyJRSDefE8JIFESi3TcQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJpW5fuySky/IAZcX+a1+BsDD3jsMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvbWxibC03SktUTDhnQmx4ZjVyWDRHd01QZU93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wASA
MA0GCSqGSIb3DQEBCwUAA4IBAQCXfcIhpYBvDSD/IF0AkvRgAbsrDX254IwQSOtC
W1U1vjQQz5Dh8/DecCSrU+aX8oprpjJBZntGX3ZfXncmq4rQ0xEkEYWNxtJBDjeB
xtPwsx/iG5us4wJyqACnxOc13LiW9BT8i0S5OtObZtnA++rv8kNatdbJbSh7oz/P
igsWKsrDalO4F9DqBTGj3J10Ms+Mkk+WEcrQDRrXzrfCS0Ug1uORicPJlrdijMBy
JBecNNAwSKX6U07q45pul/cs3tRWIbcz1Rl/PDbQFtjYI6+JY1wt2XHfFHwxgr/X
3Lk9I5YdJi29n/Fh56dvYivkqsIgrPa714x7iPQymtXFfRTN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org