Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MNnRD6wphWma3470dkN6d3nCUnQ.roa
File: MNnRD6wphWma3470dkN6d3nCUnQ.roa (raw, json)
Hash identifier: j42mchr51yTFI+Oy2suWQK+FgEoKClvGHzcNRcVlUig=
Subject key identifier: 30:D9:D1:0F:AC:29:85:69:9A:DF:8E:F4:76:43:7A:77:79:C2:52:74
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01904E038F923AA7FE803BB03BAF679181BD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MNnRD6wphWma3470dkN6d3nCUnQ.roa
Signing time: Tue 25 Jun 2024 06:09:34 +0000
ROA not before: Tue 25 Jun 2024 06:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Jun 2024 07:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:03:8f:92:3a:a7:fe:80:3b:b0:3b:af:67:91:81:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 25 06:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30d9d10fac2985699adf8ef476437a7779c25274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:86:fb:62:5d:40:de:29:5e:b9:89:2e:79:
7b:ee:c4:e6:22:98:21:b5:b7:1e:70:ee:2e:16:53:
fe:f3:96:6f:b0:0b:e5:06:d2:6e:90:f0:35:05:a3:
e6:43:70:28:81:b4:f7:81:b8:2c:b4:a6:0c:46:17:
94:9a:f9:b5:5f:fb:57:54:60:ec:11:1f:22:a1:e8:
8f:4e:85:8a:d1:31:2b:4a:c6:0d:23:98:54:d8:4c:
cc:50:b8:48:bf:74:5d:d7:9f:90:dc:57:28:6a:9e:
c3:82:0b:71:b5:9b:33:8f:67:9e:06:ff:08:22:cb:
75:07:8a:98:0d:01:9a:c4:0e:60:c8:de:6f:cd:97:
a7:1e:33:e3:cf:72:0b:68:2d:c0:92:ec:4c:f4:ba:
60:b3:ea:52:fa:76:4d:fe:f8:71:dd:ba:07:4a:a4:
af:85:94:9f:1b:1f:5c:31:20:3c:98:3c:25:59:7a:
ae:df:3e:75:e5:ad:4d:93:5b:cf:67:d7:f1:99:0f:
57:fa:dd:8c:b5:6f:1e:96:ad:cd:a5:93:ec:4d:f1:
c4:bc:6e:2a:d0:44:67:c7:71:4d:10:4c:a0:3d:2a:
e0:51:21:68:a1:b8:de:7d:24:4e:bf:63:ca:64:e1:
b5:d0:d7:9b:a9:0d:65:30:01:45:5d:85:e3:a4:53:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D9:D1:0F:AC:29:85:69:9A:DF:8E:F4:76:43:7A:77:79:C2:52:74
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MNnRD6wphWma3470dkN6d3nCUnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:a9:9b:1d:a6:73:04:f0:4e:8c:eb:be:36:15:8e:f1:00:e2:
b8:ae:6b:86:a9:93:bd:e0:3a:2f:67:05:0b:cf:ad:71:3f:80:
23:b6:c8:4b:76:1d:13:17:dd:f3:52:ea:63:32:e1:2c:7b:cb:
78:c6:d6:67:39:33:e7:17:e9:8a:77:70:04:67:cd:35:6f:be:
06:b9:3c:dd:88:b7:ba:d7:f3:5a:08:91:9f:95:a2:c6:85:bb:
b4:06:e7:a7:28:b1:3c:8b:a9:99:b9:13:a7:8e:b5:56:48:89:
98:3c:35:1c:3c:1f:de:8a:19:ba:0d:25:72:ec:58:72:78:ab:
3a:10:22:9b:54:2a:2c:73:de:a6:1e:6f:50:3e:a6:a8:ec:30:
34:a6:4a:79:9e:29:88:e8:a7:a5:0b:37:b5:8a:fa:ca:6d:34:
55:6d:e2:ef:8a:23:70:77:f1:02:b7:52:63:dd:81:00:de:4a:
67:72:c4:87:31:b2:79:e2:89:a8:04:03:cb:65:29:76:77:41:
0a:07:b0:20:00:78:f4:82:4a:85:42:36:39:48:76:27:59:56:
bd:b6:28:95:e0:03:fd:ad:f7:90:d9:9d:e8:69:f4:5a:8d:63:
11:6d:c4:bb:13:8e:60:01:21:be:47:9e:ec:3a:98:ca:86:57:
06:a3:7a:49
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZBOA4+SOqf+gDuwO69nkYG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjI1MDYwOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGQ5ZDEwZmFjMjk4NTY5OWFkZjhlZjQ3NjQzN2E3Nzc5YzI1Mjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHWG+2JdQN4pXrmJLnl77sTmIpgh
tbcecO4uFlP+85ZvsAvlBtJukPA1BaPmQ3AogbT3gbgstKYMRheUmvm1X/tXVGDs
ER8ioeiPToWK0TErSsYNI5hU2EzMULhIv3Rd15+Q3Fcoap7DggtxtZszj2eeBv8I
Ist1B4qYDQGaxA5gyN5vzZenHjPjz3ILaC3AkuxM9Lpgs+pS+nZN/vhx3boHSqSv
hZSfGx9cMSA8mDwlWXqu3z515a1Nk1vPZ9fxmQ9X+t2MtW8elq3NpZPsTfHEvG4q
0ERnx3FNEEygPSrgUSFoobjefSROv2PKZOG10NebqQ1lMAFFXYXjpFMdWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDDZ0Q+sKYVpmt+O9HZDend5wlJ0MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvTU5uUkQ2d3BoV21hMzQ3MGRrTjZkM25DVW5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHapmx2mcwTwTozrvjYV
jvEA4riua4apk73gOi9nBQvPrXE/gCO2yEt2HRMX3fNS6mMy4Sx7y3jG1mc5M+cX
6Yp3cARnzTVvvga5PN2It7rX81oIkZ+VosaFu7QG56cosTyLqZm5E6eOtVZIiZg8
NRw8H96KGboNJXLsWHJ4qzoQIptUKixz3qYeb1A+pqjsMDSmSnmeKYjop6ULN7WK
+sptNFVt4u+KI3B38QK3UmPdgQDeSmdyxIcxsnniiagEA8tlKXZ3QQoHsCAAePSC
SoVCNjlIdidZVr22KJXgA/2t95DZnehp9FqNYxFtxLsTjmABIb5Hnuw6mMqGVwaj
ekk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:52 2025 by rpki-client