Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/MtBFLmJMl6d6jpYKXPC0RnhCk4M.roa
File: MtBFLmJMl6d6jpYKXPC0RnhCk4M.roa (raw, json)
Hash identifier: RGAZ5kJHz3X2ExX7Tm/LQjV785lcp2vQ6fYYkWIxkm4=
Subject key identifier: 32:D0:45:2E:62:4C:97:A7:7A:8E:96:0A:5C:F0:B4:46:78:42:93:83
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 018572711C7B576E12439DE51A096BC1F01B
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/MtBFLmJMl6d6jpYKXPC0RnhCk4M.roa
Signing time: Mon 02 Jan 2023 12:24:53 +0000
ROA not before: Mon 02 Jan 2023 12:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15598
IP address blocks: 193.239.185.0/24 maxlen: 32
2001:67c:2a7c::/48 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:1c:7b:57:6e:12:43:9d:e5:1a:09:6b:c1:f0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Jan 2 12:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32d0452e624c97a77a8e960a5cf0b44678429383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3d:bd:ba:c7:15:94:94:32:18:05:c6:7b:48:
d3:68:b2:30:04:81:5b:c7:cd:e3:f9:21:bd:03:25:
91:6f:ad:67:f1:38:95:a4:b1:4a:18:a8:c6:09:42:
c4:00:6a:7b:53:65:2b:03:3b:09:30:2c:20:32:91:
2a:1a:31:5b:6d:ff:7f:14:a9:3e:99:41:cc:a9:28:
46:e4:a0:19:40:3d:97:3a:82:89:fc:db:45:a1:30:
5d:68:75:bc:7b:82:fd:78:f3:a1:81:5c:3f:a3:4e:
bb:67:01:aa:a2:1b:83:a0:15:1f:a2:ec:db:c1:60:
f3:27:60:4c:00:d6:b5:8f:71:11:fb:a2:fe:d7:b5:
ea:7f:be:02:c0:58:ef:99:2e:fd:8d:9b:5c:4e:c0:
1b:9a:a8:b6:d1:e4:10:94:df:e9:85:bd:78:aa:89:
92:d5:d6:d2:69:89:fa:69:a7:09:0c:f7:34:1b:e0:
2b:a9:56:28:fa:fd:32:cb:b0:58:9b:76:fb:1d:ea:
ca:05:ed:6f:59:e3:2f:6f:94:82:ba:f4:67:63:0d:
72:78:be:58:28:e2:98:73:a8:27:c9:e4:30:da:6f:
75:f1:a8:7c:4c:e6:cc:52:ba:2d:46:c3:aa:d4:36:
40:eb:58:26:1e:d8:ce:88:09:fa:ea:c2:1a:a9:da:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D0:45:2E:62:4C:97:A7:7A:8E:96:0A:5C:F0:B4:46:78:42:93:83
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/MtBFLmJMl6d6jpYKXPC0RnhCk4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.185.0/24
IPv6:
2001:67c:2a7c::/48
Signature Algorithm: sha256WithRSAEncryption
77:a2:49:00:a3:9d:83:4e:d9:21:6c:9f:7a:58:bc:b4:28:7a:
f8:0b:4c:ed:05:3c:09:d8:a7:66:9d:10:de:58:87:aa:2e:db:
b2:7a:eb:bc:1e:b3:94:1c:a4:09:d9:f2:e1:0a:de:a0:6b:3e:
8f:26:b7:d1:34:39:04:6a:d9:b6:30:cc:fa:23:67:32:46:ee:
d6:2b:ee:f1:64:52:05:b3:31:0a:dd:f7:78:ce:6d:1a:57:25:
fc:70:72:87:f0:2b:53:3a:d9:e4:ed:43:5b:0f:ee:e3:f5:1b:
eb:1e:32:05:f5:d2:a3:aa:ef:02:82:00:e4:4e:58:20:e3:61:
49:11:f4:f1:2f:7b:77:84:3a:e2:4c:8d:4a:88:16:24:92:bf:
a7:1e:de:36:8a:1b:b0:86:97:44:3c:0b:71:57:c7:81:ed:5d:
e7:f8:c1:e9:15:eb:6d:a6:ee:ab:ff:a5:44:3b:af:92:d4:6a:
d1:9e:12:03:98:46:7d:54:c6:45:52:e4:ed:36:f7:eb:d3:ae:
f3:4a:b9:0d:47:eb:de:09:c1:b0:fa:0f:de:cf:b8:7f:87:12:
2e:c1:1d:58:38:d7:41:4f:11:90:a2:e8:c0:a3:da:4e:e1:de:
69:a1:a4:41:c6:10:cf:20:2d:dd:23:9e:08:84:87:b7:28:72:
4a:b3:33:7f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVycRx7V24SQ53lGglrwfAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGE0NjNkNjdlNGI0MmQ4NjM5YWNkZjBkMTU0MjRmODJm
MTlhNjAwHhcNMjMwMTAyMTIyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmQwNDUyZTYyNGM5N2E3N2E4ZTk2MGE1Y2YwYjQ0Njc4NDI5MzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT29uscVlJQyGAXGe0jTaLIwBIFb
x83j+SG9AyWRb61n8TiVpLFKGKjGCULEAGp7U2UrAzsJMCwgMpEqGjFbbf9/FKk+
mUHMqShG5KAZQD2XOoKJ/NtFoTBdaHW8e4L9ePOhgVw/o067ZwGqohuDoBUfouzb
wWDzJ2BMANa1j3ER+6L+17Xqf74CwFjvmS79jZtcTsAbmqi20eQQlN/phb14qomS
1dbSaYn6aacJDPc0G+ArqVYo+v0yy7BYm3b7HerKBe1vWeMvb5SCuvRnYw1yeL5Y
KOKYc6gnyeQw2m918ah8TObMUrotRsOq1DZA61gmHtjOiAn66sIaqdr4fwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDLQRS5iTJeneo6WClzwtEZ4QpODMB8GA1UdIwQY
MBaAFJMKRj1n5LQthjms3w0VQk+C8ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMt
ZGU4NDQ5NjRmNWVlLzEvTXRCRkxtSk1sNmQ2anBZS1hQQzBSbmhDazRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMtZGU4NDQ5NjRmNWVl
LzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwe+5MA8E
AgACMAkDBwAgAQZ8KnwwDQYJKoZIhvcNAQELBQADggEBAHeiSQCjnYNO2SFsn3pY
vLQoevgLTO0FPAnYp2adEN5Yh6ou27J667wes5QcpAnZ8uEK3qBrPo8mt9E0OQRq
2bYwzPojZzJG7tYr7vFkUgWzMQrd93jObRpXJfxwcofwK1M62eTtQ1sP7uP1G+se
MgX10qOq7wKCAOROWCDjYUkR9PEve3eEOuJMjUqIFiSSv6ce3jaKG7CGl0Q8C3FX
x4HtXef4wekV622m7qv/pUQ7r5LUatGeEgOYRn1UxkVS5O029+vTrvNKuQ1H694J
wbD6D97PuH+HEi7BHVg410FPEZCi6MCj2k7h3mmhpEHGEM8gLd0jngiEh7cockqz
M38=
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:47 2024 by rpki-client on console-fra.rpki-client.org