Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/MncwWAezyjs2E50ddnXRvqxy49k.roa
File: MncwWAezyjs2E50ddnXRvqxy49k.roa (raw, json)
Hash identifier: 7NTrRKvuW+c/kDJ6MyZKDeK6H4s76gtFRqKquHFppTo=
Subject key identifier: 32:77:30:58:07:B3:CA:3B:36:13:9D:1D:76:75:D1:BE:AC:72:E3:D9
Certificate issuer: /CN=91242d9769b759349c8018c908736e54dffc0cb5
Certificate serial: 0185720C511DC23AF7250C9EB2C8F5792F52
Authority key identifier: 91:24:2D:97:69:B7:59:34:9C:80:18:C9:08:73:6E:54:DF:FC:0C:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSQtl2m3WTScgBjJCHNuVN_8DLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/MncwWAezyjs2E50ddnXRvqxy49k.roa
Signing time: Mon 02 Jan 2023 10:34:47 +0000
ROA not before: Mon 02 Jan 2023 10:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.249.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:51:1d:c2:3a:f7:25:0c:9e:b2:c8:f5:79:2f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91242d9769b759349c8018c908736e54dffc0cb5
Validity
Not Before: Jan 2 10:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3277305807b3ca3b36139d1d7675d1beac72e3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:3a:eb:b5:8c:17:f3:67:b4:20:32:fa:e0:
1e:6c:15:ba:0d:36:01:a0:14:96:67:22:a7:53:5c:
61:64:4f:0c:f0:90:2c:a4:0c:61:48:d3:0e:5c:49:
e8:dc:55:80:b8:61:78:82:af:1a:42:35:85:c3:dc:
09:65:56:9d:2f:5e:c4:ae:f3:be:5f:b2:e2:77:b7:
87:d5:30:05:5f:73:30:46:3c:62:da:55:91:d2:52:
4f:59:1b:d5:c7:a5:2e:0f:06:c0:46:fa:be:ea:ce:
c4:56:ff:67:f8:e2:48:e5:5d:15:3f:fd:c6:dc:6d:
ee:35:8c:5e:e6:57:d3:9c:68:9e:6e:66:bb:92:05:
0f:f5:e8:62:9f:fa:44:0a:6d:8f:20:71:44:9f:3c:
31:f9:00:a5:9a:9f:19:42:2a:2a:f0:56:1b:60:d6:
5e:00:90:c0:54:69:5b:32:e4:e2:00:c4:a4:6a:f9:
0c:a0:f8:e1:44:2e:40:fb:d6:33:f3:38:2a:95:8b:
1e:a3:73:35:c6:bc:90:1c:7a:92:06:c1:21:94:90:
5f:98:6c:0e:39:20:e0:40:c9:2d:8e:f8:a8:78:02:
19:7c:15:31:35:4f:5f:06:77:9d:6d:5a:9d:5d:41:
60:42:74:df:67:23:73:38:f2:40:d9:40:f3:e9:2b:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:30:58:07:B3:CA:3B:36:13:9D:1D:76:75:D1:BE:AC:72:E3:D9
X509v3 Authority Key Identifier:
keyid:91:24:2D:97:69:B7:59:34:9C:80:18:C9:08:73:6E:54:DF:FC:0C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSQtl2m3WTScgBjJCHNuVN_8DLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/MncwWAezyjs2E50ddnXRvqxy49k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/kSQtl2m3WTScgBjJCHNuVN_8DLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.55.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8b:1e:d5:a0:72:97:9f:47:c5:f4:67:89:8a:d1:51:61:e7:
34:fe:3b:5b:08:a3:ef:92:81:3c:22:11:f8:df:54:d9:de:4c:
36:cb:63:fb:55:49:b9:45:bc:3b:19:cf:2a:85:fb:8e:e7:65:
e8:61:a9:bb:dc:f9:0d:86:a9:75:cc:97:d2:c0:8e:4d:87:41:
9d:43:0c:17:ef:1f:37:06:c1:5d:2a:ab:e9:b4:22:a3:b7:46:
f9:e5:7c:ea:95:ab:78:d5:f5:b6:a8:6a:0d:2f:93:8f:74:8c:
fb:23:e5:c3:54:aa:c5:b8:cd:9d:6a:e2:95:49:36:95:d5:8a:
c1:34:3a:9a:90:a2:34:e0:26:fa:7e:8f:79:7e:a0:8c:a9:e5:
07:37:32:36:55:af:09:a2:a3:fa:46:1e:86:3d:68:36:d7:8e:
f5:e7:8d:d2:ae:23:be:f2:4d:83:87:c5:5e:2e:d2:24:be:1f:
99:f2:be:45:48:9e:a5:eb:29:f2:7d:f4:c0:87:02:7c:ca:a8:
96:c9:54:6b:68:50:88:b6:50:b7:b9:83:8a:9a:37:65:88:fb:
04:13:5e:25:6f:42:4e:ef:bc:a6:f9:b9:2b:d6:5b:e4:bd:41:
6d:2d:97:30:a2:40:3e:38:84:d5:3a:ba:3a:d0:f4:28:ad:3f:
74:87:b1:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyDFEdwjr3JQyessj1eS9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMjQyZDk3NjliNzU5MzQ5YzgwMThjOTA4NzM2ZTU0ZGZm
YzBjYjUwHhcNMjMwMTAyMTAzNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjc3MzA1ODA3YjNjYTNiMzYxMzlkMWQ3Njc1ZDFiZWFjNzJlM2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklU667WMF/NntCAy+uAebBW6DTYB
oBSWZyKnU1xhZE8M8JAspAxhSNMOXEno3FWAuGF4gq8aQjWFw9wJZVadL17ErvO+
X7Lid7eH1TAFX3MwRjxi2lWR0lJPWRvVx6UuDwbARvq+6s7EVv9n+OJI5V0VP/3G
3G3uNYxe5lfTnGiebma7kgUP9ehin/pECm2PIHFEnzwx+QClmp8ZQioq8FYbYNZe
AJDAVGlbMuTiAMSkavkMoPjhRC5A+9Yz8zgqlYseo3M1xryQHHqSBsEhlJBfmGwO
OSDgQMktjvioeAIZfBUxNU9fBnedbVqdXUFgQnTfZyNzOPJA2UDz6SvvvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDJ3MFgHs8o7NhOdHXZ10b6scuPZMB8GA1UdIwQY
MBaAFJEkLZdpt1k0nIAYyQhzblTf/Ay1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1NRdGwybTNXVFNjZ0JqSkNITnVWTl84RExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xYzNiMjAtYzk2Ni00ODQwLThiZTIt
MmUxMGExZTcxOThlLzEvTW5jd1dBZXp5anMyRTUwZGRuWFJ2cXh5NDlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xYzNiMjAtYzk2Ni00ODQwLThiZTItMmUxMGExZTcxOThl
LzEva1NRdGwybTNXVFNjZ0JqSkNITnVWTl84RExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufk3MA0G
CSqGSIb3DQEBCwUAA4IBAQCCix7VoHKXn0fF9GeJitFRYec0/jtbCKPvkoE8IhH4
31TZ3kw2y2P7VUm5Rbw7Gc8qhfuO52XoYam73PkNhql1zJfSwI5Nh0GdQwwX7x83
BsFdKqvptCKjt0b55Xzqlat41fW2qGoNL5OPdIz7I+XDVKrFuM2dauKVSTaV1YrB
NDqakKI04Cb6fo95fqCMqeUHNzI2Va8JoqP6Rh6GPWg21471543SriO+8k2Dh8Ve
LtIkvh+Z8r5FSJ6l6ynyffTAhwJ8yqiWyVRraFCItlC3uYOKmjdliPsEE14lb0JO
77ym+bkr1lvkvUFtLZcwokA+OITVOro60PQorT90h7Ga
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:46 2023 by rpki-client on console-fra.rpki-client.org