Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/MgmYjJnYqy-_p5tJqJhB3zskAyo.roa
File: MgmYjJnYqy-_p5tJqJhB3zskAyo.roa (raw, json)
Hash identifier: JCIkc8fP8T3eyKvl5lURv2dRhCtDY47aZmyjPzsMbOY=
Subject key identifier: 32:09:98:8C:99:D8:AB:2F:BF:A7:9B:49:A8:98:41:DF:3B:24:03:2A
Certificate issuer: /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial: 01856EC21268D4D28C55BC707ADD6674F7C0
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/MgmYjJnYqy-_p5tJqJhB3zskAyo.roa
Signing time: Sun 01 Jan 2023 19:14:50 +0000
ROA not before: Sun 01 Jan 2023 19:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60044
IP address blocks: 185.57.216.0/22 maxlen: 22
2a04:dec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:12:68:d4:d2:8c:55:bc:70:7a:dd:66:74:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
Validity
Not Before: Jan 1 19:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3209988c99d8ab2fbfa79b49a89841df3b24032a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:41:ed:57:a8:14:f2:d1:b2:91:fe:d5:81:
dc:de:0b:4e:13:f1:c5:a0:0f:ff:42:bd:19:1d:b7:
be:c8:e2:f0:0c:a7:24:6e:17:83:25:ff:ba:95:9a:
6e:b7:d3:81:9a:fe:cd:e4:c8:53:30:21:54:f1:5e:
4d:c9:63:47:34:db:b0:83:9b:f3:d7:18:64:b2:17:
4a:a4:1b:00:2e:1f:f2:ff:16:e1:53:a2:82:e6:51:
e0:e5:3b:2d:63:ab:e7:7f:eb:b5:c9:9b:40:6d:b5:
96:10:36:e2:df:43:2e:82:9c:12:28:fa:8a:fb:20:
b8:71:5c:10:b9:31:bc:79:04:a0:78:02:e5:7b:3c:
bf:12:0f:0d:b2:ca:b3:9a:31:87:0e:e9:bb:94:5f:
26:7f:c5:52:62:3e:e8:cf:3b:11:4e:4b:83:c9:8e:
be:17:b4:5b:e0:50:59:11:aa:d4:78:02:ce:76:51:
34:1f:61:4f:f5:7b:f0:3f:79:6d:12:50:97:11:75:
28:df:8b:c0:98:0c:5c:a9:5d:62:6e:9c:20:d8:aa:
eb:98:4f:94:8a:25:6c:5b:57:80:74:fa:17:3c:3b:
26:21:ef:0c:37:67:1c:81:ad:68:e3:5a:69:12:d7:
5c:18:f6:08:35:c3:fb:dd:23:15:a6:d2:1e:76:1f:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:09:98:8C:99:D8:AB:2F:BF:A7:9B:49:A8:98:41:DF:3B:24:03:2A
X509v3 Authority Key Identifier:
keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/MgmYjJnYqy-_p5tJqJhB3zskAyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.216.0/22
IPv6:
2a04:dec0::/29
Signature Algorithm: sha256WithRSAEncryption
50:56:09:fe:8b:8e:a9:d3:48:28:a9:68:ff:12:31:59:a6:d2:
ee:ff:d1:a4:0f:48:b7:b5:a9:55:cb:6b:b4:04:c4:b8:7d:6d:
03:1c:54:b6:39:26:8d:7d:72:62:e6:1d:85:67:e5:60:f9:f9:
51:cf:b5:04:51:37:6f:4a:63:be:5d:30:eb:c8:14:47:dd:22:
58:7f:89:73:9c:f6:83:22:db:98:63:ba:02:e4:0b:d0:93:33:
5c:20:6d:0d:3c:1c:29:c7:7d:0b:0b:ec:1f:bc:d7:b4:58:6c:
2c:78:7b:42:f6:8f:06:ef:65:b9:6c:17:98:de:af:70:97:53:
e0:3a:83:bd:bc:03:b6:c2:ba:ac:3c:81:2d:04:a8:a3:99:31:
c1:cd:33:a5:8f:ca:b4:91:11:71:fc:9d:24:9e:c1:f9:c7:26:
7c:94:dd:8d:b7:40:fc:08:4c:fc:fa:7f:b3:8d:f3:f6:ae:73:
c5:dd:6b:02:d5:f1:0d:05:2d:1e:42:06:d1:9d:37:ff:ec:29:
ba:5b:1f:70:64:c0:99:2b:28:01:0f:29:3c:d5:25:df:ea:88:
db:60:36:62:c3:f5:14:64:19:d3:33:e3:cc:35:7a:bb:d6:87:
1a:f0:a5:fa:65:b5:4f:3a:8c:04:34:92:fa:40:c7:43:72:88:
70:05:45:ee
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVuwhJo1NKMVbxwet1mdPfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzQ2ZDNlZGJlYzZkYTcyNzgwNzIyYzBhNDFhYmVlYTYz
NjYxZDgwHhcNMjMwMTAxMTkxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjA5OTg4Yzk5ZDhhYjJmYmZhNzliNDlhODk4NDFkZjNiMjQwMzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHhB7VeoFPLRspH+1YHc3gtOE/HF
oA//Qr0ZHbe+yOLwDKckbheDJf+6lZput9OBmv7N5MhTMCFU8V5NyWNHNNuwg5vz
1xhkshdKpBsALh/y/xbhU6KC5lHg5TstY6vnf+u1yZtAbbWWEDbi30MugpwSKPqK
+yC4cVwQuTG8eQSgeALlezy/Eg8NssqzmjGHDum7lF8mf8VSYj7ozzsRTkuDyY6+
F7Rb4FBZEarUeALOdlE0H2FP9XvwP3ltElCXEXUo34vAmAxcqV1ibpwg2KrrmE+U
iiVsW1eAdPoXPDsmIe8MN2ccga1o41ppEtdcGPYINcP73SMVptIedh8q7QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDIJmIyZ2Ksvv6ebSaiYQd87JAMqMB8GA1UdIwQY
MBaAFPU0bT7b7G2nJ4ByLApBq+6mNmHYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZTgwNjQtOWUxMS00NjFhLTkzNmQt
ZmE3MGJkOTBlODk0LzEvTWdtWWpKbllxeS1fcDV0SnFKaEIzenNrQXlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZTgwNjQtOWUxMS00NjFhLTkzNmQtZmE3MGJkOTBlODk0
LzEvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTnYMA0E
AgACMAcDBQMqBN7AMA0GCSqGSIb3DQEBCwUAA4IBAQBQVgn+i46p00goqWj/EjFZ
ptLu/9GkD0i3talVy2u0BMS4fW0DHFS2OSaNfXJi5h2FZ+Vg+flRz7UEUTdvSmO+
XTDryBRH3SJYf4lznPaDItuYY7oC5AvQkzNcIG0NPBwpx30LC+wfvNe0WGwseHtC
9o8G72W5bBeY3q9wl1PgOoO9vAO2wrqsPIEtBKijmTHBzTOlj8q0kRFx/J0knsH5
xyZ8lN2Nt0D8CEz8+n+zjfP2rnPF3WsC1fENBS0eQgbRnTf/7Cm6Wx9wZMCZKygB
Dyk81SXf6ojbYDZiw/UUZBnTM+PMNXq71oca8KX6ZbVPOowENJL6QMdDcohwBUXu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:35 2024 by rpki-client on console-ams.rpki-client.org