Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/MJNL_QDUk3pSMIZSe8jpMRLn6jM.roa
File: MJNL_QDUk3pSMIZSe8jpMRLn6jM.roa (raw, json)
Hash identifier: 67xI5ezzuLn5XU42ZRMTWMzUWLMNJBDAo77hNcAfbw8=
Subject key identifier: 30:93:4B:FD:00:D4:93:7A:52:30:86:52:7B:C8:E9:31:12:E7:EA:33
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018CC8DF9309E4CD4260392084ED457F345D
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/MJNL_QDUk3pSMIZSe8jpMRLn6jM.roa
Signing time: Tue 02 Jan 2024 06:32:24 +0000
ROA not before: Tue 02 Jan 2024 06:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56913
IP address blocks: 77.246.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 07:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:93:09:e4:cd:42:60:39:20:84:ed:45:7f:34:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 2 06:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30934bfd00d4937a523086527bc8e93112e7ea33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:21:b5:a9:82:f9:a0:6f:7e:a7:1b:cb:e5:34:
09:3d:e5:24:8d:53:09:bb:34:5e:b9:e5:69:ee:41:
10:45:fa:44:57:1d:67:ee:14:71:7f:6d:73:75:9c:
10:5b:74:35:97:0c:66:57:f7:89:33:59:71:3a:82:
8b:a4:96:62:b6:e4:0d:9f:52:8c:9c:bd:c5:e0:26:
cd:4a:d0:12:be:29:f5:6e:c7:66:8d:e3:8d:82:72:
05:de:53:db:60:25:df:b2:65:7b:d5:a6:df:85:4e:
f2:4e:34:2c:c9:e7:5c:96:ff:20:f5:4e:64:05:6d:
be:2c:76:21:e5:cb:cb:7f:76:63:6f:5e:dc:7f:b6:
7f:aa:df:2b:8a:12:b8:5b:1a:0a:b0:43:f4:08:dc:
80:b5:4d:0f:51:1d:88:6a:79:61:b4:40:7a:5d:e5:
f1:e0:62:82:48:8b:73:9e:1d:af:fc:78:c0:ea:11:
45:1f:e1:51:f1:13:91:24:1a:a3:a4:27:2f:7e:6e:
a0:df:76:55:ca:7d:e8:d2:81:9a:73:27:31:1f:f2:
5d:34:09:45:3c:28:92:04:0f:cc:c1:93:93:04:b9:
f6:95:93:a7:9c:d8:f3:be:65:24:92:b4:ea:36:93:
eb:82:14:2c:34:31:df:ab:d8:79:af:03:eb:67:65:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:4B:FD:00:D4:93:7A:52:30:86:52:7B:C8:E9:31:12:E7:EA:33
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/MJNL_QDUk3pSMIZSe8jpMRLn6jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ad:8e:81:9c:09:07:e7:15:9a:1b:64:db:d7:85:23:3e:ef:
5c:a0:29:2b:d5:dc:11:3a:0a:d1:67:95:6e:a7:43:16:10:1a:
20:96:78:9d:af:0a:fc:61:3e:c8:91:14:bc:c6:a1:b5:2b:6b:
21:6a:8c:fa:ea:23:5c:e8:d2:6c:f9:c7:e1:6c:5f:ca:0d:df:
e1:9f:63:1a:67:ab:58:d6:9e:bd:f7:3b:a9:23:99:dd:66:2c:
4d:b6:e5:16:20:d6:d2:bc:eb:b5:84:72:cc:2a:eb:24:71:95:
3d:b6:f1:00:cd:16:56:0a:33:cb:24:42:f5:b2:ad:cb:81:31:
c0:dc:cf:03:9e:4d:bf:c1:68:25:ed:ea:5b:41:b8:a8:fd:97:
bd:0c:39:98:58:69:47:e7:59:0c:2b:33:0a:74:54:99:fb:dd:
c5:4e:b7:71:38:78:46:84:67:bf:ba:23:64:10:42:69:de:d9:
1f:2c:bb:9f:03:59:d8:d8:00:1b:1b:03:55:76:fe:cc:1c:fb:
23:0b:10:a8:9d:fc:73:a0:c8:5a:6e:74:02:d5:06:a7:b8:c2:
51:a3:e3:ca:cc:fd:e4:89:1a:c3:0a:f9:51:0a:d7:b4:55:a7:
ba:df:70:dc:b3:39:52:7d:f6:2a:a0:8c:74:18:4e:ce:b5:7e:
32:a4:23:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI35MJ5M1CYDkghO1FfzRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwMTAyMDYzMjI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDkzNGJmZDAwZDQ5MzdhNTIzMDg2NTI3YmM4ZTkzMTEyZTdlYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSG1qYL5oG9+pxvL5TQJPeUkjVMJ
uzReueVp7kEQRfpEVx1n7hRxf21zdZwQW3Q1lwxmV/eJM1lxOoKLpJZituQNn1KM
nL3F4CbNStASvin1bsdmjeONgnIF3lPbYCXfsmV71abfhU7yTjQsyedclv8g9U5k
BW2+LHYh5cvLf3Zjb17cf7Z/qt8rihK4WxoKsEP0CNyAtU0PUR2IanlhtEB6XeXx
4GKCSItznh2v/HjA6hFFH+FR8RORJBqjpCcvfm6g33ZVyn3o0oGacycxH/JdNAlF
PCiSBA/MwZOTBLn2lZOnnNjzvmUkkrTqNpPrghQsNDHfq9h5rwPrZ2V1jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDCTS/0A1JN6UjCGUnvI6TES5+ozMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvTUpOTF9RRFVrM3BTTUlaU2U4anBNUkxuNmpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbTMA0G
CSqGSIb3DQEBCwUAA4IBAQAArY6BnAkH5xWaG2Tb14UjPu9coCkr1dwROgrRZ5Vu
p0MWEBoglnidrwr8YT7IkRS8xqG1K2shaoz66iNc6NJs+cfhbF/KDd/hn2MaZ6tY
1p699zupI5ndZixNtuUWINbSvOu1hHLMKuskcZU9tvEAzRZWCjPLJEL1sq3LgTHA
3M8Dnk2/wWgl7epbQbio/Ze9DDmYWGlH51kMKzMKdFSZ+93FTrdxOHhGhGe/uiNk
EEJp3tkfLLufA1nY2AAbGwNVdv7MHPsjCxConfxzoMhabnQC1QanuMJRo+PKzP3k
iRrDCvlRCte0Vae633DcszlSffYqoIx0GE7OtX4ypCMm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org