Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/MO7BF3Pgxno4bbZ68Apt_3y8qGs.roa
File: MO7BF3Pgxno4bbZ68Apt_3y8qGs.roa (raw, json)
Hash identifier: XOi6VzkGTLGWq6pttZDBBBNBAWBX0HqyaWcfOndDsb4=
Subject key identifier: 30:EE:C1:17:73:E0:C6:7A:38:6D:B6:7A:F0:0A:6D:FF:7C:BC:A8:6B
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 018BDDE1245EEE5B390E029BEE09975D1280
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/MO7BF3Pgxno4bbZ68Apt_3y8qGs.roa
Signing time: Fri 17 Nov 2023 15:23:21 +0000
ROA not before: Fri 17 Nov 2023 15:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29608
IP address blocks: 194.146.204.0/24 maxlen: 24
2a14:5500::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:e1:24:5e:ee:5b:39:0e:02:9b:ee:09:97:5d:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Nov 17 15:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30eec11773e0c67a386db67af00a6dff7cbca86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:bb:2e:3a:9d:5d:2b:a9:7e:3a:32:58:c8:
0a:8d:72:10:6e:fe:49:2b:07:f7:1c:be:cb:46:62:
10:11:b3:2a:33:fe:95:ac:e4:ac:6a:18:59:cd:ab:
a4:90:d2:69:06:eb:a0:02:68:e2:28:fa:84:92:84:
47:22:50:78:f4:c3:f9:e3:97:3c:c7:05:67:52:13:
3a:2f:19:6f:08:e1:59:1c:a8:ae:bb:99:58:db:0e:
1b:90:31:35:1a:db:7a:81:bb:bd:78:33:02:3e:23:
bc:e7:c1:18:c4:52:92:7d:dc:c7:d2:1b:42:89:01:
81:a9:9b:d2:1e:ed:be:58:76:f6:8a:0c:15:25:4a:
75:55:2f:ab:f3:62:c5:5b:3e:be:5a:a7:9f:72:87:
a5:d4:f1:ee:75:3f:fc:5a:12:09:8d:42:31:79:e0:
75:ae:83:ef:2d:00:a3:96:90:2c:6f:90:8e:94:1a:
d1:60:ff:53:94:bd:9b:4a:c7:80:92:c4:2b:a8:ad:
33:40:ec:58:f7:7b:16:b3:5d:79:a7:a3:cc:da:11:
8e:3c:ac:8e:ab:0e:2c:20:d0:f4:d8:99:96:38:a4:
7c:2e:52:06:db:d2:c2:df:5a:c0:7c:5a:d1:c2:63:
8c:69:5b:24:56:e3:31:4b:d5:3e:41:73:1a:14:f5:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EE:C1:17:73:E0:C6:7A:38:6D:B6:7A:F0:0A:6D:FF:7C:BC:A8:6B
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/MO7BF3Pgxno4bbZ68Apt_3y8qGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.204.0/24
IPv6:
2a14:5500::/29
Signature Algorithm: sha256WithRSAEncryption
10:6d:64:d8:5a:90:35:ca:cf:41:05:37:a6:99:ad:e8:bb:8e:
bc:84:8a:3a:1b:0e:b1:22:03:0f:b7:ce:dc:26:32:82:7e:16:
9a:8e:2e:76:1e:8d:0b:78:68:26:44:cf:e4:ab:07:07:e7:eb:
60:95:3d:75:01:79:53:79:8c:4d:cc:ba:a0:2a:62:96:fe:c8:
96:63:99:4a:9a:52:ff:70:10:eb:78:d1:bb:6d:9d:ce:20:c5:
ac:78:79:4f:e7:62:a6:0f:85:58:40:8e:69:e9:49:1f:30:dc:
ce:e5:a0:d4:95:81:5e:0e:86:9a:74:c5:0e:6b:3f:91:91:e0:
b1:12:19:2f:88:98:29:02:1c:93:e3:da:ec:0e:6c:a8:eb:b1:
22:d8:50:0f:05:a6:d5:3c:a6:99:57:c1:b2:eb:37:e9:71:eb:
b1:08:81:66:79:61:cd:bb:84:3e:64:88:93:fb:08:dc:e1:42:
00:85:da:33:ab:df:bd:09:7f:ce:a7:9a:e6:08:4b:db:54:64:
8f:16:da:c0:97:b6:21:8b:b7:a7:43:c0:22:2f:ce:8d:66:52:
e8:c5:5a:fa:32:9a:87:05:e1:6c:13:fe:18:23:1e:9f:c0:9d:
68:30:bd:34:c5:b5:41:f3:a7:8e:04:a1:c5:c1:b9:af:a6:1d:
b1:98:cb:48
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYvd4SRe7ls5DgKb7gmXXRKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYmUyNTY1NjVlMWMyN2M0YjI2NTYwMTkwZTk5NzgyODZh
ODJiNTIwHhcNMjMxMTE3MTUyMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGVlYzExNzczZTBjNjdhMzg2ZGI2N2FmMDBhNmRmZjdjYmNhODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RW7LjqdXSupfjoyWMgKjXIQbv5J
Kwf3HL7LRmIQEbMqM/6VrOSsahhZzaukkNJpBuugAmjiKPqEkoRHIlB49MP545c8
xwVnUhM6LxlvCOFZHKiuu5lY2w4bkDE1Gtt6gbu9eDMCPiO858EYxFKSfdzH0htC
iQGBqZvSHu2+WHb2igwVJUp1VS+r82LFWz6+Wqefcoel1PHudT/8WhIJjUIxeeB1
roPvLQCjlpAsb5COlBrRYP9TlL2bSseAksQrqK0zQOxY93sWs115p6PM2hGOPKyO
qw4sIND02JmWOKR8LlIG29LC31rAfFrRwmOMaVskVuMxS9U+QXMaFPW0lwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDDuwRdz4MZ6OG22evAKbf98vKhrMB8GA1UdIwQY
MBaAFP++JWVl4cJ8SyZWAZDpl4KGqCtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yN2M5MjgtMDJmZS00MDUyLTlkNjUt
YjFmYzIwODNjOTA2LzEvTU83QkYzUGd4bm80YmJaNjhBcHRfM3k4cUdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yN2M5MjgtMDJmZS00MDUyLTlkNjUtYjFmYzIwODNjOTA2
LzEvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwpLMMA0E
AgACMAcDBQMqFFUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQbWTYWpA1ys9BBTemma3o
u468hIo6Gw6xIgMPt87cJjKCfhaaji52Ho0LeGgmRM/kqwcH5+tglT11AXlTeYxN
zLqgKmKW/siWY5lKmlL/cBDreNG7bZ3OIMWseHlP52KmD4VYQI5p6UkfMNzO5aDU
lYFeDoaadMUOaz+RkeCxEhkviJgpAhyT49rsDmyo67Ei2FAPBabVPKaZV8Gy6zfp
ceuxCIFmeWHNu4Q+ZIiT+wjc4UIAhdozq9+9CX/Op5rmCEvbVGSPFtrAl7Yhi7en
Q8AiL86NZlLoxVr6MpqHBeFsE/4YIx6fwJ1oML00xbVB86eOBKHFwbmvph2xmMtI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:24 2024 by rpki-client on console-fra.rpki-client.org