Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/mppl-tHR3EjSS0qJ-jRD-Lhsrq0.roa
File: mppl-tHR3EjSS0qJ-jRD-Lhsrq0.roa (raw, json)
Hash identifier: 2VKzoJ5egFjepz0RjZOr4cxgNGX8J2EFY1W7cYbf10I=
Subject key identifier: 9A:9A:65:FA:D1:D1:DC:48:D2:4B:4A:89:FA:34:43:F8:B8:6C:AE:AD
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 01856E01F9173E1946EAF8058C9470D82887
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/mppl-tHR3EjSS0qJ-jRD-Lhsrq0.roa
Signing time: Sun 01 Jan 2023 15:45:01 +0000
ROA not before: Sun 01 Jan 2023 15:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35916
IP address blocks: 178.236.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 01 Aug 2023 02:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:f9:17:3e:19:46:ea:f8:05:8c:94:70:d8:28:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 1 15:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a9a65fad1d1dc48d24b4a89fa3443f8b86caead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:dd:fb:9b:bc:a2:fc:69:b0:36:b0:09:e8:
e1:16:b1:fe:32:d6:71:6f:5f:bc:84:b5:00:64:0d:
6a:73:6d:29:f3:82:57:8c:ed:4f:df:de:d9:52:1e:
e0:64:d8:64:5f:b2:22:29:9f:b4:03:5d:be:bc:93:
ff:ab:86:b0:b8:55:8a:0f:6f:54:1d:6d:47:42:71:
10:d0:0f:c4:82:a2:4a:3b:78:c4:ec:8f:60:14:ef:
ad:54:42:b8:d1:de:10:24:af:0c:f7:48:05:9f:dc:
a9:18:8e:81:8c:11:ff:1e:b0:42:79:1b:67:4b:e7:
96:6e:52:be:6b:5d:d4:60:0b:2b:09:c4:7c:27:eb:
02:ab:98:4d:b0:ef:f5:40:53:b7:5f:11:38:99:e0:
2d:91:bb:de:4e:8b:4c:7c:f6:85:ad:d7:a4:84:72:
14:a3:2e:e6:10:63:66:ec:80:18:58:f9:f7:89:c1:
ca:ca:73:d9:43:97:68:54:12:33:6a:6b:5b:0f:a4:
f8:57:88:82:c0:41:3d:ea:2f:04:66:50:1f:14:3a:
f5:23:32:6d:50:c5:0c:db:21:a4:4a:b2:a8:5e:5f:
5f:58:7f:bb:90:c9:21:0c:95:fb:82:8a:64:c1:5c:
a5:72:01:e5:cf:a5:0e:5c:d3:44:9c:ec:43:6d:e5:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9A:65:FA:D1:D1:DC:48:D2:4B:4A:89:FA:34:43:F8:B8:6C:AE:AD
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/mppl-tHR3EjSS0qJ-jRD-Lhsrq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.228.0/22
Signature Algorithm: sha256WithRSAEncryption
04:a0:52:c9:96:27:14:b9:33:ba:f3:92:b7:ae:ee:78:e5:d9:
8a:dc:7e:c3:50:7d:6b:18:49:5b:80:57:a2:c2:93:60:fe:37:
ca:63:f6:2a:34:63:2f:64:ad:e6:08:f6:ff:55:7b:96:36:a1:
89:4d:18:a2:ea:a4:20:85:25:34:f4:0d:7f:20:f5:90:36:b2:
e6:46:5b:bc:85:4e:01:e5:f9:c1:1b:cb:65:c6:b2:d1:99:03:
98:47:6f:09:e9:65:a6:b8:04:93:c1:8b:6a:9d:7f:98:b5:98:
76:ae:47:2e:5d:d7:5c:48:ff:d1:dd:41:65:dd:77:f4:cd:f5:
c8:f2:3a:a3:a4:b4:a9:4f:9f:36:0c:ac:ee:e2:0d:c8:3c:41:
e1:31:b4:3b:73:7e:34:d2:0a:c0:e3:0f:92:a5:d2:f5:14:32:
11:a0:07:2e:db:18:dc:67:74:f7:49:2e:27:73:b3:ab:cb:c6:
0a:08:72:52:9f:0a:92:51:ba:24:86:cd:c5:74:e3:5a:08:53:
5f:07:40:ea:1e:99:69:33:f3:f3:fb:91:20:2f:d9:a6:d5:99:
64:1b:35:d4:72:8b:4b:0a:db:ec:b9:71:d7:2e:c1:de:82:35:
14:39:d8:5c:da:bb:50:40:4f:a3:d6:36:a8:60:2b:27:44:a6:
0a:99:26:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuAfkXPhlG6vgFjJRw2CiHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjMwMTAxMTU0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTlhNjVmYWQxZDFkYzQ4ZDI0YjRhODlmYTM0NDNmOGI4NmNhZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkTd+5u8ovxpsDawCejhFrH+MtZx
b1+8hLUAZA1qc20p84JXjO1P397ZUh7gZNhkX7IiKZ+0A12+vJP/q4awuFWKD29U
HW1HQnEQ0A/EgqJKO3jE7I9gFO+tVEK40d4QJK8M90gFn9ypGI6BjBH/HrBCeRtn
S+eWblK+a13UYAsrCcR8J+sCq5hNsO/1QFO3XxE4meAtkbveTotMfPaFrdekhHIU
oy7mEGNm7IAYWPn3icHKynPZQ5doVBIzamtbD6T4V4iCwEE96i8EZlAfFDr1IzJt
UMUM2yGkSrKoXl9fWH+7kMkhDJX7gopkwVylcgHlz6UOXNNEnOxDbeUDewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJqaZfrR0dxI0ktKifo0Q/i4bK6tMB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvbXBwbC10SFIzRWpTUzBxSi1qUkQtTGhzcnEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz
LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsuzkMA0G
CSqGSIb3DQEBCwUAA4IBAQAEoFLJlicUuTO685K3ru545dmK3H7DUH1rGElbgFei
wpNg/jfKY/YqNGMvZK3mCPb/VXuWNqGJTRii6qQghSU09A1/IPWQNrLmRlu8hU4B
5fnBG8tlxrLRmQOYR28J6WWmuASTwYtqnX+YtZh2rkcuXddcSP/R3UFl3Xf0zfXI
8jqjpLSpT582DKzu4g3IPEHhMbQ7c3400grA4w+SpdL1FDIRoAcu2xjcZ3T3SS4n
c7Ory8YKCHJSnwqSUbokhs3FdONaCFNfB0DqHplpM/Pz+5EgL9mm1ZlkGzXUcotL
CtvsuXHXLsHegjUUOdhc2rtQQE+j1jaoYCsnRKYKmSak
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:13 2024 by rpki-client on console-ams.rpki-client.org