Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mmv-AVzuFcj27wcVmtTHBg6pxqY.roa
File: mmv-AVzuFcj27wcVmtTHBg6pxqY.roa (raw, json)
Hash identifier: FbtRwezMkaLKzRkGTO4iAcEl6KANTiNp3XMxMOaOK/c=
Subject key identifier: 9A:6B:FE:01:5C:EE:15:C8:F6:EF:07:15:9A:D4:C7:06:0E:A9:C6:A6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01869D36A5ED0359BF1C282A875B064B49F4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mmv-AVzuFcj27wcVmtTHBg6pxqY.roa
Signing time: Wed 01 Mar 2023 12:47:29 +0000
ROA not before: Wed 01 Mar 2023 12:47:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 92.114.107.0/24 maxlen: 24
62.197.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:36:a5:ed:03:59:bf:1c:28:2a:87:5b:06:4b:49:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 1 12:47:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a6bfe015cee15c8f6ef07159ad4c7060ea9c6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:56:50:b2:02:74:25:b4:af:c9:80:7c:e0:3e:
7f:4c:c1:04:d7:4c:80:1d:f3:cc:d0:6e:30:6b:d8:
32:53:e8:11:ce:d4:d5:61:4f:e2:4e:79:aa:75:15:
d9:e2:bf:05:ed:55:7c:f3:8e:67:b9:60:36:d8:75:
21:ec:f1:1a:7f:6c:78:32:6d:e1:ca:f7:83:03:3c:
4d:6a:1f:c4:c0:5a:e2:f7:52:6f:fc:90:9e:b1:cf:
4e:30:56:8e:c4:c6:6f:6d:1d:c8:60:03:13:6e:6a:
fb:d7:a6:55:2d:7d:c5:69:4d:e1:55:96:c0:81:c1:
38:2e:18:4f:12:1e:30:e2:b3:53:d4:2f:60:03:10:
e7:83:4f:27:46:37:7e:8a:51:c6:e0:40:2c:80:82:
92:38:35:74:c0:3d:63:c9:7d:55:8c:cc:f3:9a:30:
69:a7:b9:3c:58:9a:8e:44:a3:ff:86:e5:1f:82:9a:
bd:2a:db:db:12:5a:5e:1f:5e:56:78:f8:b5:48:a0:
7a:97:35:ad:71:80:ad:6c:66:bd:cb:c5:40:e6:67:
71:68:8e:5c:2e:4d:56:40:35:2f:ca:d1:72:d8:25:
33:31:91:b1:bd:09:93:31:7f:7a:60:c0:40:e8:47:
5c:3b:8f:3c:c7:b4:2e:6f:0d:ce:d8:6a:28:c3:bd:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6B:FE:01:5C:EE:15:C8:F6:EF:07:15:9A:D4:C7:06:0E:A9:C6:A6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mmv-AVzuFcj27wcVmtTHBg6pxqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.134.0/24
92.114.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ac:f9:12:dc:88:50:33:38:04:50:b0:69:ee:66:e3:b5:bb:
61:4d:0f:84:74:e1:1c:8e:9c:14:9f:c1:ff:7f:f5:5a:53:2d:
4b:95:a0:8e:a9:54:64:eb:d1:df:06:e9:85:c5:24:4c:1c:f4:
cd:9b:a4:6b:ea:a0:98:05:15:02:fb:03:36:0f:61:8e:d2:45:
cf:6f:ff:0c:74:e6:3f:f4:f2:e6:1f:14:2b:b3:58:64:2e:2b:
1b:a9:a3:cc:70:e9:f3:57:bc:c6:db:37:6e:bd:c5:cc:df:d8:
57:53:57:39:c0:14:83:ef:f3:9c:88:88:b1:06:3a:17:14:51:
b3:58:0c:75:4c:de:50:4f:6f:a5:03:52:c6:d5:93:b9:69:6f:
40:3b:54:f2:09:f8:86:6e:97:f2:cd:21:17:63:a9:0a:ef:bc:
e8:4c:50:b8:f7:7f:0a:49:cb:fb:74:fd:65:d6:4d:78:29:66:
7b:be:d3:b5:67:ed:ed:f4:13:95:7e:c7:f5:fc:d3:a8:ec:a0:
68:0b:07:71:86:80:f1:21:c2:85:c9:58:19:3a:06:2d:03:9d:
94:67:a6:75:09:65:d1:43:b9:fa:7d:99:6f:e1:4f:7d:0b:1f:
c5:e5:7b:21:58:eb:be:52:c2:14:f7:ac:1e:92:c4:89:c7:f8:
d3:9b:17:0a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYadNqXtA1m/HCgqh1sGS0n0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMzAxMTI0NzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTZiZmUwMTVjZWUxNWM4ZjZlZjA3MTU5YWQ0YzcwNjBlYTljNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFZQsgJ0JbSvyYB84D5/TMEE10yA
HfPM0G4wa9gyU+gRztTVYU/iTnmqdRXZ4r8F7VV8845nuWA22HUh7PEaf2x4Mm3h
yveDAzxNah/EwFri91Jv/JCesc9OMFaOxMZvbR3IYAMTbmr716ZVLX3FaU3hVZbA
gcE4LhhPEh4w4rNT1C9gAxDng08nRjd+ilHG4EAsgIKSODV0wD1jyX1VjMzzmjBp
p7k8WJqORKP/huUfgpq9KtvbElpeH15WePi1SKB6lzWtcYCtbGa9y8VA5mdxaI5c
Lk1WQDUvytFy2CUzMZGxvQmTMX96YMBA6EdcO488x7Qubw3O2Goow709GwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJpr/gFc7hXI9u8HFZrUxwYOqcamMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvbW12LUFWenVGY2oyN3djVm10VEhCZzZweHFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPsWGAwQA
XHJrMA0GCSqGSIb3DQEBCwUAA4IBAQB7rPkS3IhQMzgEULBp7mbjtbthTQ+EdOEc
jpwUn8H/f/VaUy1LlaCOqVRk69HfBumFxSRMHPTNm6Rr6qCYBRUC+wM2D2GO0kXP
b/8MdOY/9PLmHxQrs1hkLisbqaPMcOnzV7zG2zduvcXM39hXU1c5wBSD7/OciIix
BjoXFFGzWAx1TN5QT2+lA1LG1ZO5aW9AO1TyCfiGbpfyzSEXY6kK77zoTFC4938K
Scv7dP1l1k14KWZ7vtO1Z+3t9BOVfsf1/NOo7KBoCwdxhoDxIcKFyVgZOgYtA52U
Z6Z1CWXRQ7n6fZlv4U99Cx/F5XshWOu+UsIU96weksSJx/jTmxcK
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org