Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/MRmgoJB9G4y8AAQCIlADKcnkfMk.roa
File: MRmgoJB9G4y8AAQCIlADKcnkfMk.roa (raw, json)
Hash identifier: 4JbbKl9qWKP8GmVL/0UNtSNdcybk/aNpnNGb6/8w3pA=
Subject key identifier: 31:19:A0:A0:90:7D:1B:8C:BC:00:04:02:22:50:03:29:C9:E4:7C:C9
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 018571958984FE157A512EB2B530A036E8DD
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/MRmgoJB9G4y8AAQCIlADKcnkfMk.roa
Signing time: Mon 02 Jan 2023 08:25:03 +0000
ROA not before: Mon 02 Jan 2023 08:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12437
IP address blocks: 212.101.192.0/19 maxlen: 24
2a06:7880::/29 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:89:84:fe:15:7a:51:2e:b2:b5:30:a0:36:e8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Jan 2 08:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3119a0a0907d1b8cbc00040222500329c9e47cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:39:e4:93:3c:9b:5a:af:3a:2c:4d:a5:6b:
07:fe:35:67:42:2c:c9:2b:ed:4d:57:6f:1f:5a:47:
13:d9:17:f6:14:60:44:5f:b3:66:75:cc:1b:2a:16:
71:08:49:dd:6f:c8:5f:c5:c6:76:41:9e:d9:6a:8a:
84:1b:e5:1d:66:ad:c5:d1:3f:76:fb:72:f2:0b:73:
c2:02:c6:6e:aa:63:44:5a:75:a1:6d:d1:85:81:04:
b8:da:e2:98:e6:3a:02:42:cc:d7:95:7a:b7:11:8f:
00:27:d1:5e:44:b8:76:93:ad:2c:a0:11:19:75:7e:
12:59:ea:90:c1:ef:4d:9f:6c:ed:f1:32:bc:b7:45:
5d:97:a5:ea:80:d8:80:23:21:a1:86:58:4a:3b:72:
12:e2:18:80:6d:fb:83:09:79:41:80:e5:4f:aa:d4:
ec:0a:87:b4:6f:b7:56:b4:9d:5f:1a:cb:51:8f:6e:
7e:0a:aa:db:3d:c7:4c:55:c9:1c:68:7e:d3:21:2e:
23:cf:ac:f3:9e:64:60:92:4d:0c:3b:d4:e8:87:a8:
01:ac:b2:3f:1c:fa:5e:ed:54:62:37:b5:ae:f0:59:
e7:f5:ac:a2:85:7f:e8:9c:d7:18:d4:ff:7a:ec:01:
3a:17:07:a0:ce:07:b4:aa:b5:06:43:c4:a7:1f:68:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:19:A0:A0:90:7D:1B:8C:BC:00:04:02:22:50:03:29:C9:E4:7C:C9
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/MRmgoJB9G4y8AAQCIlADKcnkfMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.101.192.0/19
IPv6:
2a06:7880::/29
Signature Algorithm: sha256WithRSAEncryption
53:3d:94:4c:19:77:3f:f4:6e:fe:60:7a:00:23:52:70:41:09:
eb:e2:d3:c4:81:8f:2f:68:4b:16:4a:d3:1f:96:54:c3:53:02:
97:5b:d4:74:f8:71:42:a7:00:af:6e:a8:a4:c7:2f:dd:cf:9a:
99:1d:da:df:ce:df:99:11:d5:32:d7:79:c3:2b:f1:28:62:0b:
bb:74:0e:25:79:73:09:98:07:71:91:25:93:14:5c:e9:be:76:
92:8e:ea:98:89:38:63:e6:01:1f:6f:6b:e1:f3:2d:03:b8:5b:
d1:72:52:af:11:a5:20:07:1b:0a:12:20:bf:53:c1:1e:14:30:
24:33:48:7c:e4:b6:55:b2:70:d3:95:4d:76:68:58:33:b1:b1:
1c:7f:8c:91:45:97:1f:3c:5f:28:1a:c2:e9:e5:db:ea:b3:11:
b8:66:71:35:d3:48:f9:2a:4f:9c:83:2f:c0:79:0a:b7:e4:e7:
f2:6f:ef:63:1d:59:eb:64:2f:4c:50:f4:48:4e:d2:2e:06:2e:
39:bd:2e:46:b9:6b:73:aa:ac:0d:a0:7d:36:d7:03:f7:3f:79:
3e:57:72:3b:b7:5e:73:43:20:9e:ee:ca:b5:2d:57:e4:e8:23:
51:96:df:09:f8:36:4e:e3:14:18:85:80:21:97:0d:70:a1:a9:
b6:8b:6d:f0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxlYmE/hV6US6ytTCgNujdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YWVlNjc2MjBkOWMwYWU2M2QyOTU3ODVjOWQ5NTZmMDYz
YzIxYzMwHhcNMjMwMTAyMDgyNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTE5YTBhMDkwN2QxYjhjYmMwMDA0MDIyMjUwMDMyOWM5ZTQ3Y2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRE55JM8m1qvOixNpWsH/jVnQizJ
K+1NV28fWkcT2Rf2FGBEX7NmdcwbKhZxCEndb8hfxcZ2QZ7ZaoqEG+UdZq3F0T92
+3LyC3PCAsZuqmNEWnWhbdGFgQS42uKY5joCQszXlXq3EY8AJ9FeRLh2k60soBEZ
dX4SWeqQwe9Nn2zt8TK8t0Vdl6XqgNiAIyGhhlhKO3IS4hiAbfuDCXlBgOVPqtTs
Coe0b7dWtJ1fGstRj25+CqrbPcdMVckcaH7TIS4jz6zznmRgkk0MO9Toh6gBrLI/
HPpe7VRiN7Wu8Fnn9ayihX/onNcY1P967AE6Fwegzge0qrUGQ8SnH2iAtwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDEZoKCQfRuMvAAEAiJQAynJ5HzJMB8GA1UdIwQY
MBaAFKeu5nYg2cCuY9KVeFydlW8GPCHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQt
MGI3ZjE1YjUwOWNiLzEvTVJtZ29KQjlHNHk4QUFRQ0lsQURLY25rZk1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQtMGI3ZjE1YjUwOWNi
LzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1GXAMA0E
AgACMAcDBQMqBniAMA0GCSqGSIb3DQEBCwUAA4IBAQBTPZRMGXc/9G7+YHoAI1Jw
QQnr4tPEgY8vaEsWStMfllTDUwKXW9R0+HFCpwCvbqikxy/dz5qZHdrfzt+ZEdUy
13nDK/EoYgu7dA4leXMJmAdxkSWTFFzpvnaSjuqYiThj5gEfb2vh8y0DuFvRclKv
EaUgBxsKEiC/U8EeFDAkM0h85LZVsnDTlU12aFgzsbEcf4yRRZcfPF8oGsLp5dvq
sxG4ZnE100j5Kk+cgy/AeQq35Ofyb+9jHVnrZC9MUPRITtIuBi45vS5GuWtzqqwN
oH021wP3P3k+V3I7t15zQyCe7sq1LVfk6CNRlt8J+DZO4xQYhYAhlw1woam2i23w
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:17 2024 by rpki-client on console-ams.rpki-client.org