Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/MNItgISSdiOr1gM8wwRZoWktv-A.roa
File: MNItgISSdiOr1gM8wwRZoWktv-A.roa (raw, json)
Hash identifier: YUWn6xieTM56xXklBnGPeiELE+x12hihUZ8JQFNLCX4=
Subject key identifier: 30:D2:2D:80:84:92:76:23:AB:D6:03:3C:C3:04:59:A1:69:2D:BF:E0
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 01856BA570AFF3F38BEA225864995044EAF1
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/MNItgISSdiOr1gM8wwRZoWktv-A.roa
Signing time: Sun 01 Jan 2023 04:44:42 +0000
ROA not before: Sun 01 Jan 2023 04:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212324
IP address blocks: 185.217.141.0/24 maxlen: 24
2a10:c700::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:70:af:f3:f3:8b:ea:22:58:64:99:50:44:ea:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Jan 1 04:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30d22d8084927623abd6033cc30459a1692dbfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:14:45:f9:cc:4c:7c:d4:44:1e:d9:a5:52:
e4:a7:7a:6d:98:3a:e7:14:9e:3c:c5:de:19:73:0e:
89:f7:d1:c4:be:e1:fe:78:f1:13:e9:e4:64:05:ce:
a4:b5:7a:b1:ba:f0:d1:27:10:b7:31:a0:87:ff:4c:
16:fa:70:ed:dc:60:a2:2f:6a:29:1b:83:d7:4a:66:
33:fb:ce:2d:91:02:cc:01:e3:89:50:30:a3:55:bf:
84:fa:71:38:70:f8:75:01:62:c8:cd:d0:a6:0e:59:
83:22:b0:37:ce:5c:6b:70:f9:f3:17:b5:54:d0:43:
68:48:5e:ea:eb:e3:1d:ff:cf:fa:4d:aa:27:cf:25:
f3:8e:b7:92:80:26:5e:c6:ff:e3:13:68:5c:e5:47:
4c:79:b5:72:63:f0:7f:e1:75:88:b2:97:51:27:56:
b5:e1:d1:a5:6b:bc:06:bc:b6:26:01:0b:bf:93:19:
6d:12:a8:63:7a:32:83:c6:8a:62:05:92:01:de:c5:
e9:91:42:08:4b:a6:59:a6:ea:09:b5:49:a6:d7:25:
b2:f1:dd:cc:8a:c7:4d:59:75:3a:9c:e9:44:b3:a1:
0a:bd:bb:a3:d9:d6:c0:74:b6:4c:e1:db:c4:e7:db:
7d:cf:3a:90:15:89:5a:c5:1b:19:37:e9:51:2b:48:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D2:2D:80:84:92:76:23:AB:D6:03:3C:C3:04:59:A1:69:2D:BF:E0
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/MNItgISSdiOr1gM8wwRZoWktv-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.141.0/24
IPv6:
2a10:c700::/32
Signature Algorithm: sha256WithRSAEncryption
be:5c:ed:2c:c4:80:13:d0:c0:59:cd:35:d8:91:cc:7c:15:e8:
a3:40:36:96:b4:3d:ef:44:1e:16:2c:85:17:0e:7b:0a:35:a1:
5e:0e:da:a7:7e:1a:4b:29:ac:46:b8:22:e2:c8:3d:2e:31:66:
96:24:12:45:2a:c5:40:09:0c:f3:7e:ab:cc:76:e6:ef:ae:07:
eb:35:2d:d8:42:29:9d:d3:a9:b5:84:7e:04:79:fb:b1:cd:e0:
84:ec:1e:7a:a5:21:ef:94:41:a4:00:f3:e1:58:bb:17:69:f8:
ab:2e:cb:f0:72:e2:ff:b6:f3:5f:14:2c:df:0c:bb:68:e3:0d:
ce:a0:0e:f4:ba:be:be:e0:4f:96:8c:ed:48:c6:9b:57:da:be:
17:b0:f0:ba:34:cb:35:19:b2:e5:ce:90:e6:db:e3:84:0a:70:
c8:88:4e:85:70:28:eb:de:c5:0f:20:d9:87:83:3c:fb:b8:38:
fd:75:d5:3c:48:bc:46:b7:9c:f8:ec:a1:cc:4c:30:88:51:f3:
c5:8d:0c:71:30:20:32:2b:63:7d:9f:78:ba:d3:a9:6a:8d:ca:
7a:59:60:d3:cc:cf:0b:31:ca:4f:09:24:fa:93:da:68:98:2d:
91:3b:91:5c:ef:6f:c4:36:3d:3e:b5:13:1c:10:b8:66:42:4d:
02:1b:c1:b3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVrpXCv8/OL6iJYZJlQROrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZGU3MDEyMmU0OTI4NWQwNWIwNWY5YmJmNDQ0OWJmYzgw
ODMwZTUwHhcNMjMwMTAxMDQ0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGQyMmQ4MDg0OTI3NjIzYWJkNjAzM2NjMzA0NTlhMTY5MmRiZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSwURfnMTHzURB7ZpVLkp3ptmDrn
FJ48xd4Zcw6J99HEvuH+ePET6eRkBc6ktXqxuvDRJxC3MaCH/0wW+nDt3GCiL2op
G4PXSmYz+84tkQLMAeOJUDCjVb+E+nE4cPh1AWLIzdCmDlmDIrA3zlxrcPnzF7VU
0ENoSF7q6+Md/8/6TaonzyXzjreSgCZexv/jE2hc5UdMebVyY/B/4XWIspdRJ1a1
4dGla7wGvLYmAQu/kxltEqhjejKDxopiBZIB3sXpkUIIS6ZZpuoJtUmm1yWy8d3M
isdNWXU6nOlEs6EKvbuj2dbAdLZM4dvE59t9zzqQFYlaxRsZN+lRK0iKpQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDDSLYCEknYjq9YDPMMEWaFpLb/gMB8GA1UdIwQY
MBaAFLnecBIuSShdBbBfm79ESb/ICDDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYt
ODk1Zjg2Mjg3NTA2LzEvTU5JdGdJU1NkaU9yMWdNOHd3UlpvV2t0di1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYtODk1Zjg2Mjg3NTA2
LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudmNMA0E
AgACMAcDBQAqEMcAMA0GCSqGSIb3DQEBCwUAA4IBAQC+XO0sxIAT0MBZzTXYkcx8
FeijQDaWtD3vRB4WLIUXDnsKNaFeDtqnfhpLKaxGuCLiyD0uMWaWJBJFKsVACQzz
fqvMdubvrgfrNS3YQimd06m1hH4EefuxzeCE7B56pSHvlEGkAPPhWLsXafirLsvw
cuL/tvNfFCzfDLto4w3OoA70ur6+4E+WjO1IxptX2r4XsPC6NMs1GbLlzpDm2+OE
CnDIiE6FcCjr3sUPINmHgzz7uDj9ddU8SLxGt5z47KHMTDCIUfPFjQxxMCAyK2N9
n3i606lqjcp6WWDTzM8LMcpPCST6k9pomC2RO5Fc72/ENj0+tRMcELhmQk0CG8Gz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:05 2024 by rpki-client on console-fra.rpki-client.org