Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/MgTu0xb731n4HXu8rFYQpqqVMaE.roa
File: MgTu0xb731n4HXu8rFYQpqqVMaE.roa (raw, json)
Hash identifier: szQ0cKHghINnz0E+vppXIt7DqgtXhvjrAAAKJraqSp4=
Subject key identifier: 32:04:EE:D3:16:FB:DF:59:F8:1D:7B:BC:AC:56:10:A6:AA:95:31:A1
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 018E22792BC756770DA535463F1B0B4828D3
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/MgTu0xb731n4HXu8rFYQpqqVMaE.roa
Signing time: Sat 09 Mar 2024 09:09:10 +0000
ROA not before: Sat 09 Mar 2024 09:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47376
IP address blocks: 103.215.220.0/22 maxlen: 22
103.215.220.0/24 maxlen: 24
103.215.221.0/24 maxlen: 24
103.215.222.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
185.221.239.0/24 maxlen: 24
195.28.11.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
195.238.247.0/24 maxlen: 24
2a05:63c0::/29 maxlen: 29
2a05:63c0::/30 maxlen: 30
2a05:63c0::/48 maxlen: 48
2a0f:c040::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 12 Aug 2024 05:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:22:79:2b:c7:56:77:0d:a5:35:46:3f:1b:0b:48:28:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Mar 9 09:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3204eed316fbdf59f81d7bbcac5610a6aa9531a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:f1:13:d6:65:d4:03:26:18:b7:9d:ae:ed:
df:ab:f2:83:8b:04:4b:c3:3b:a1:26:7c:f0:f2:01:
9e:c7:e3:18:c6:4d:70:55:c8:27:e7:e0:3d:46:fb:
9c:85:43:b9:5c:cb:2c:b0:84:c3:40:b9:f6:ab:12:
d7:70:2f:16:95:e3:3d:41:0a:ce:14:a9:89:b5:b7:
2e:a0:5b:bb:ac:a3:f8:0c:e4:5e:5d:96:1b:f2:6a:
2c:a5:0e:23:17:54:d2:95:4c:43:0b:ec:22:de:5d:
42:54:c8:8d:fa:f1:e6:9c:a6:13:b7:56:84:86:00:
75:23:25:56:62:66:33:66:ac:d1:73:51:dc:4f:5c:
9c:88:39:b1:bd:9a:8a:50:d0:9d:88:35:8b:5a:79:
fc:1d:b6:20:a8:cb:1b:ec:c3:ae:a2:a6:bb:3b:10:
74:2b:d9:16:af:9c:74:2d:a5:d2:5f:ea:c8:7a:b3:
6c:fe:99:8c:68:a2:05:14:ef:4b:9f:fd:e0:8d:f4:
c4:c2:de:92:59:9f:d5:78:8a:c3:3f:c2:79:e3:79:
47:80:9e:e6:87:34:1b:16:04:08:76:9b:99:7d:1e:
e2:68:a9:1c:19:cd:33:ee:e5:0c:65:be:fc:fc:58:
95:c4:ad:dc:4f:0b:d9:53:04:ba:bd:d7:be:5b:8a:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:EE:D3:16:FB:DF:59:F8:1D:7B:BC:AC:56:10:A6:AA:95:31:A1
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/MgTu0xb731n4HXu8rFYQpqqVMaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.220.0/22
185.221.239.0/24
195.28.11.0/24
195.238.231.0/24
195.238.247.0/24
IPv6:
2a05:63c0::/29
2a0f:c040::/29
Signature Algorithm: sha256WithRSAEncryption
56:1d:55:a7:a8:4f:4a:7e:d9:cb:02:53:dd:d5:c3:53:29:f6:
74:53:4a:53:b3:ef:c0:6f:6f:1b:66:11:39:d9:90:f4:55:40:
8f:e9:34:a2:03:27:29:22:19:68:0e:ff:36:ea:17:8a:b7:80:
99:05:3a:5c:36:57:43:4f:78:17:e2:d3:25:83:92:2a:09:f7:
7e:40:3e:14:04:06:78:be:f0:60:39:0e:a8:c9:5e:ba:92:33:
ac:21:a9:14:65:6b:56:28:59:f5:d2:e3:e5:83:09:b3:2a:b5:
a9:42:01:9e:cd:77:56:73:24:d4:77:e4:f5:a7:c5:6c:6c:7a:
d8:33:f4:a0:20:6a:f8:8a:54:5c:d7:24:d8:d7:e8:0c:71:43:
9d:13:11:2c:92:2c:7f:ce:02:ba:b9:12:eb:e0:98:13:3b:ae:
4b:dd:48:9e:86:12:f9:ba:34:6d:7d:69:2d:8a:ac:b7:69:e7:
e8:87:4c:ca:b5:44:42:54:40:c0:c2:f5:c4:b2:f9:c7:73:08:
01:31:dd:4c:80:52:3d:c5:f6:80:c6:e8:44:00:e5:dd:00:0e:
f0:7f:1a:4e:13:dd:81:bc:f4:aa:8a:68:eb:19:0b:49:14:b7:
6d:f4:89:0f:40:4b:c7:97:95:81:58:75:0f:9f:45:b2:aa:f3:
9e:d5:35:db
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAY4ieSvHVncNpTVGPxsLSCjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk
ZmQ5YTgwHhcNMjQwMzA5MDkwOTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjA0ZWVkMzE2ZmJkZjU5ZjgxZDdiYmNhYzU2MTBhNmFhOTUzMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbDxE9Zl1AMmGLedru3fq/KDiwRL
wzuhJnzw8gGex+MYxk1wVcgn5+A9RvuchUO5XMsssITDQLn2qxLXcC8WleM9QQrO
FKmJtbcuoFu7rKP4DOReXZYb8mospQ4jF1TSlUxDC+wi3l1CVMiN+vHmnKYTt1aE
hgB1IyVWYmYzZqzRc1HcT1yciDmxvZqKUNCdiDWLWnn8HbYgqMsb7MOuoqa7OxB0
K9kWr5x0LaXSX+rIerNs/pmMaKIFFO9Ln/3gjfTEwt6SWZ/VeIrDP8J543lHgJ7m
hzQbFgQIdpuZfR7iaKkcGc0z7uUMZb78/FiVxK3cTwvZUwS6vde+W4oo1QIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFDIE7tMW+99Z+B17vKxWEKaqlTGhMB8GA1UdIwQY
MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt
MThkMWE0MDZhYWVkLzEvTWdUdTB4YjczMW40SFh1OHJGWVFwcXFWTWFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk
LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQCZ9fcAwQA
ud3vAwQAwxwLAwQAw+7nAwQAw+73MBQEAgACMA4DBQMqBWPAAwUDKg/AQDANBgkq
hkiG9w0BAQsFAAOCAQEAVh1Vp6hPSn7ZywJT3dXDUyn2dFNKU7PvwG9vG2YROdmQ
9FVAj+k0ogMnKSIZaA7/NuoXireAmQU6XDZXQ094F+LTJYOSKgn3fkA+FAQGeL7w
YDkOqMleupIzrCGpFGVrVihZ9dLj5YMJsyq1qUIBns13VnMk1Hfk9afFbGx62DP0
oCBq+IpUXNck2NfoDHFDnRMRLJIsf84CurkS6+CYEzuuS91InoYS+bo0bX1pLYqs
t2nn6IdMyrVEQlRAwML1xLL5x3MIATHdTIBSPcX2gMboRADl3QAO8H8aThPdgbz0
qopo6xkLSRS3bfSJD0BLx5eVgVh1D59FsqrzntU12w==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:46 2025 by rpki-client