Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/MBZghvxzjXQ2X1hBPgGv-hDJsBU.roa
File: MBZghvxzjXQ2X1hBPgGv-hDJsBU.roa (raw, json)
Hash identifier: /jkJdfNuusZHK2neeWe5lKCp+9IBRx84OM8m0BCOuVQ=
Subject key identifier: 30:16:60:86:FC:73:8D:74:36:5F:58:41:3E:01:AF:FA:10:C9:B0:15
Certificate issuer: /CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Certificate serial: 018CCA2AE25D3D765C93FA82678676F5B23E
Authority key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/MBZghvxzjXQ2X1hBPgGv-hDJsBU.roa
Signing time: Tue 02 Jan 2024 12:34:17 +0000
ROA not before: Tue 02 Jan 2024 12:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208095
IP address blocks: 94.124.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:e2:5d:3d:76:5c:93:fa:82:67:86:76:f5:b2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Validity
Not Before: Jan 2 12:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30166086fc738d74365f58413e01affa10c9b015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d2:e1:aa:76:f6:fd:9d:b1:2f:dc:07:54:e8:
59:94:ed:c1:57:04:ce:8c:5d:1f:15:1f:0d:bf:a0:
07:39:dc:dd:da:0b:2b:d7:e9:c5:13:f0:72:c5:83:
7b:9e:13:ae:43:10:27:75:85:bf:92:03:2e:ff:b6:
24:a9:b5:07:95:fd:f1:90:42:44:91:87:da:94:60:
98:3e:7c:16:15:8e:3a:69:01:17:b5:e4:59:3f:f2:
b0:bf:37:e1:1d:6c:ed:33:dc:95:5d:75:18:27:80:
31:74:c9:aa:f9:fa:77:9c:49:dd:67:08:22:8a:36:
60:df:31:6b:11:14:42:59:e6:17:4c:a3:7e:50:07:
74:ec:6e:12:41:97:e2:42:92:95:9c:e6:c4:b3:72:
85:95:a3:d4:d3:d5:3a:50:4b:ff:9e:c3:7b:7b:bc:
c9:e1:76:33:8f:f8:1c:72:a3:2c:c6:7b:3e:86:91:
1b:99:1f:16:f4:05:03:1f:02:ef:ae:2a:69:2c:21:
85:41:c8:e2:9d:4e:f9:60:e8:34:5b:d2:5b:53:4f:
e6:e4:a1:31:a5:23:c9:57:d6:c5:39:3d:cf:96:38:
94:e3:db:11:4d:f6:cd:a7:07:b7:2e:75:25:2f:92:
2f:78:ab:6e:bf:0c:a3:80:55:c3:98:32:bf:59:d3:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:16:60:86:FC:73:8D:74:36:5F:58:41:3E:01:AF:FA:10:C9:B0:15
X509v3 Authority Key Identifier:
keyid:9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/MBZghvxzjXQ2X1hBPgGv-hDJsBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.73.0/24
Signature Algorithm: sha256WithRSAEncryption
f3:44:e1:fc:0c:62:5c:b0:69:06:0d:9b:2c:b7:e0:0c:f6:af:
58:c7:9a:4b:a7:eb:a9:49:ac:06:25:0d:74:98:4d:03:92:f6:
2b:31:48:e1:15:59:40:f0:2a:1a:fc:e2:ad:a6:eb:6c:e5:ae:
78:74:37:71:d3:5a:e4:46:0f:49:bd:6e:aa:d3:23:43:60:13:
6d:cf:3a:b5:fa:51:68:1f:1d:21:17:03:44:3f:27:54:ff:03:
7c:5a:de:61:62:2b:d9:48:f2:97:1c:10:4a:1b:13:3c:43:60:
4a:5c:e8:3e:e3:1f:df:55:54:86:a2:0c:39:88:c1:45:15:46:
f8:56:ac:ee:c5:22:35:7c:b6:6f:01:41:fa:4d:9e:68:46:99:
af:b8:98:73:a8:e3:9d:5b:aa:ab:1b:24:9e:3c:44:6c:2f:91:
d2:33:31:5d:6c:72:f8:59:c1:a8:00:2e:24:86:fa:2c:71:7c:
c2:b4:72:44:2e:af:f6:af:48:93:85:ae:fb:6d:e2:07:15:5d:
8a:76:db:1c:75:27:60:02:17:07:4e:00:9d:d0:6d:10:8f:85:
87:07:88:4c:49:dc:70:c1:16:0c:8a:6d:70:09:d7:bd:a0:5c:
b1:8d:a2:db:f7:29:7b:5b:20:07:5e:98:5e:50:4a:02:dc:1a:
c5:f2:03:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKuJdPXZck/qCZ4Z29bI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljN2ZhOWVhZjM4NTZjYTRlNzUwNDE0MTRlNTFkODYwMTgw
YzkyNmYwHhcNMjQwMTAyMTIzNDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDE2NjA4NmZjNzM4ZDc0MzY1ZjU4NDEzZTAxYWZmYTEwYzliMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9Lhqnb2/Z2xL9wHVOhZlO3BVwTO
jF0fFR8Nv6AHOdzd2gsr1+nFE/ByxYN7nhOuQxAndYW/kgMu/7YkqbUHlf3xkEJE
kYfalGCYPnwWFY46aQEXteRZP/KwvzfhHWztM9yVXXUYJ4AxdMmq+fp3nEndZwgi
ijZg3zFrERRCWeYXTKN+UAd07G4SQZfiQpKVnObEs3KFlaPU09U6UEv/nsN7e7zJ
4XYzj/gccqMsxns+hpEbmR8W9AUDHwLvrippLCGFQcjinU75YOg0W9JbU0/m5KEx
pSPJV9bFOT3PljiU49sRTfbNpwe3LnUlL5IveKtuvwyjgFXDmDK/WdO3BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDAWYIb8c410Nl9YQT4Br/oQybAVMB8GA1UdIwQY
MBaAFJx/qerzhWyk51BBQU5R2GAYDJJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZmJjYzYtNjRmZC00ODc0LWFiNDkt
ODI1YjQ3YzE1NDMwLzEvTUJaZ2h2eHpqWFEyWDFoQlBnR3YtaERKc0JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZmJjYzYtNjRmZC00ODc0LWFiNDktODI1YjQ3YzE1NDMw
LzEvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXnxJMA0G
CSqGSIb3DQEBCwUAA4IBAQDzROH8DGJcsGkGDZsst+AM9q9Yx5pLp+upSawGJQ10
mE0DkvYrMUjhFVlA8Coa/OKtputs5a54dDdx01rkRg9JvW6q0yNDYBNtzzq1+lFo
Hx0hFwNEPydU/wN8Wt5hYivZSPKXHBBKGxM8Q2BKXOg+4x/fVVSGogw5iMFFFUb4
VqzuxSI1fLZvAUH6TZ5oRpmvuJhzqOOdW6qrGySePERsL5HSMzFdbHL4WcGoAC4k
hvoscXzCtHJELq/2r0iTha77beIHFV2KdtscdSdgAhcHTgCd0G0Qj4WHB4hMSdxw
wRYMim1wCde9oFyxjaLb9yl7WyAHXpheUEoC3BrF8gNP
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:51 2025 by rpki-client