Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/MBok-V759oWdf4k-V8fCVGHkopc.roa
File: MBok-V759oWdf4k-V8fCVGHkopc.roa (raw, json)
Hash identifier: ZtK4oybgRJCxvVCLIa2JzJLY8ikIuGxtL9DTVVqFe8U=
Subject key identifier: 30:1A:24:F9:5E:F9:F6:85:9D:7F:89:3E:57:C7:C2:54:61:E4:A2:97
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 01856BAEE211638EA3D69EEE017F95A1E950
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/MBok-V759oWdf4k-V8fCVGHkopc.roa
Signing time: Sun 01 Jan 2023 04:55:01 +0000
ROA not before: Sun 01 Jan 2023 04:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47119
IP address blocks: 188.191.112.0/22 maxlen: 22
188.191.112.0/24 maxlen: 24
188.191.112.0/23 maxlen: 23
188.191.116.0/22 maxlen: 22
188.191.114.0/23 maxlen: 23
188.191.114.0/24 maxlen: 24
188.191.113.0/24 maxlen: 24
188.191.112.0/21 maxlen: 21
188.191.112.0/20 maxlen: 20
188.191.116.0/24 maxlen: 24
188.191.117.0/24 maxlen: 24
188.191.116.0/23 maxlen: 23
188.191.115.0/24 maxlen: 24
188.191.118.0/24 maxlen: 24
188.191.118.0/23 maxlen: 23
188.191.122.0/24 maxlen: 24
188.191.119.0/24 maxlen: 24
188.191.120.0/23 maxlen: 23
188.191.124.0/22 maxlen: 22
188.191.122.0/23 maxlen: 23
188.191.121.0/24 maxlen: 24
188.191.120.0/24 maxlen: 24
188.191.124.0/24 maxlen: 24
188.191.124.0/23 maxlen: 23
188.191.123.0/24 maxlen: 24
188.191.120.0/22 maxlen: 22
188.191.126.0/24 maxlen: 24
188.191.126.0/23 maxlen: 23
79.174.34.0/24 maxlen: 24
79.174.34.0/23 maxlen: 23
79.174.33.0/24 maxlen: 24
79.174.36.0/23 maxlen: 23
79.174.36.0/24 maxlen: 24
79.174.35.0/24 maxlen: 24
79.174.32.0/22 maxlen: 22
79.174.32.0/19 maxlen: 19
79.174.32.0/20 maxlen: 20
79.174.32.0/23 maxlen: 23
79.174.38.0/24 maxlen: 24
79.174.37.0/24 maxlen: 24
79.174.32.0/24 maxlen: 24
79.174.42.0/23 maxlen: 23
79.174.44.0/22 maxlen: 22
79.174.39.0/24 maxlen: 24
79.174.38.0/23 maxlen: 23
79.174.42.0/24 maxlen: 24
79.174.41.0/24 maxlen: 24
79.174.44.0/23 maxlen: 23
79.174.44.0/24 maxlen: 24
79.174.40.0/22 maxlen: 22
79.174.40.0/23 maxlen: 23
79.174.43.0/24 maxlen: 24
79.174.40.0/24 maxlen: 24
79.174.47.0/24 maxlen: 24
79.174.50.0/23 maxlen: 23
79.174.50.0/24 maxlen: 24
79.174.49.0/24 maxlen: 24
79.174.48.0/22 maxlen: 22
79.174.48.0/24 maxlen: 24
79.174.45.0/24 maxlen: 24
79.174.48.0/23 maxlen: 23
79.174.51.0/24 maxlen: 24
79.174.46.0/23 maxlen: 23
79.174.46.0/24 maxlen: 24
79.174.48.0/20 maxlen: 20
79.174.56.0/22 maxlen: 22
79.174.55.0/24 maxlen: 24
79.174.56.0/24 maxlen: 24
79.174.58.0/23 maxlen: 23
79.174.58.0/24 maxlen: 24
79.174.57.0/24 maxlen: 24
79.174.52.0/23 maxlen: 23
79.174.53.0/24 maxlen: 24
79.174.52.0/24 maxlen: 24
79.174.54.0/23 maxlen: 23
79.174.54.0/24 maxlen: 24
79.174.56.0/23 maxlen: 23
79.174.60.0/22 maxlen: 22
79.174.63.0/24 maxlen: 24
79.174.60.0/23 maxlen: 23
79.174.60.0/24 maxlen: 24
79.174.59.0/24 maxlen: 24
79.174.62.0/23 maxlen: 23
79.174.62.0/24 maxlen: 24
79.174.61.0/24 maxlen: 24
136.169.222.0/23 maxlen: 23
136.169.222.0/24 maxlen: 24
136.169.221.0/24 maxlen: 24
136.169.220.0/22 maxlen: 22
136.169.223.0/24 maxlen: 24
136.169.220.0/23 maxlen: 23
136.169.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:e2:11:63:8e:a3:d6:9e:ee:01:7f:95:a1:e9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 04:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=301a24f95ef9f6859d7f893e57c7c25461e4a297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:01:06:35:1c:83:4a:70:f9:a1:cd:21:a6:
b9:b8:21:82:a7:87:41:f3:39:4c:96:6e:de:26:6c:
96:3d:61:2b:89:84:31:3d:85:8d:6f:2b:33:66:c3:
16:ec:60:78:ab:c8:cb:fe:47:1d:aa:43:37:e8:e3:
f2:49:8e:41:32:c4:72:f5:60:35:7f:6a:23:03:40:
82:18:a8:f8:93:a9:84:fc:b1:c5:dd:5d:cb:0e:d3:
44:2e:0b:e2:19:60:93:2c:c7:38:a3:08:29:27:cf:
5a:1f:e0:33:8d:5a:02:7c:58:1d:56:f8:87:b4:e4:
09:05:20:90:26:9b:0b:17:e5:ab:ff:06:71:8e:9d:
33:44:6f:6a:94:c7:f3:d6:e8:ef:75:51:3e:d0:39:
f6:e4:10:e9:1f:0c:28:0c:e9:fb:38:6b:cd:79:0b:
90:25:04:46:e9:3e:ac:ae:df:39:0e:80:fa:5e:aa:
b6:a2:f8:b7:80:c6:5a:59:97:70:f2:de:c8:03:0d:
6e:55:11:79:87:0a:68:bd:c9:af:ed:db:c2:92:0e:
6c:18:ea:3f:a8:84:02:5a:44:d6:95:14:f7:88:ad:
9d:17:01:9d:7d:ad:35:99:e0:4d:c6:5f:e9:ca:78:
85:40:cf:c9:d9:8e:66:25:34:d4:fd:16:7d:a4:a6:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1A:24:F9:5E:F9:F6:85:9D:7F:89:3E:57:C7:C2:54:61:E4:A2:97
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/MBok-V759oWdf4k-V8fCVGHkopc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.32.0/19
136.169.220.0/22
188.191.112.0/20
Signature Algorithm: sha256WithRSAEncryption
87:cf:c0:e1:db:02:76:5d:e4:e7:63:8d:ff:94:da:5c:61:7c:
91:2b:42:2e:3a:52:0e:56:32:b3:54:77:21:1e:fe:c7:09:a8:
e8:da:f8:02:5f:1c:64:7d:b7:33:8e:9d:bb:9e:49:81:51:c6:
33:1e:5d:27:1c:c1:cf:1c:db:57:bb:0c:14:84:06:53:39:43:
e6:42:b7:f2:14:11:d5:ce:5f:9f:1a:a6:57:5e:2a:98:f6:17:
b4:c2:77:29:23:75:27:16:3d:67:79:df:67:eb:76:6a:cf:6c:
ea:7b:90:26:32:c2:05:d4:49:e9:92:de:bb:9f:fa:8a:3a:a6:
02:9d:e4:01:00:6d:f4:73:e0:c0:25:bb:b9:b9:52:47:f0:bb:
fe:c7:2f:fa:85:c2:d6:57:b8:66:cd:0b:4a:be:a9:a2:97:53:
49:8e:8a:a8:f3:de:bb:5b:cb:e5:ea:10:5f:09:5a:09:44:79:
a5:70:2d:25:20:0a:bb:ab:60:51:4e:f0:69:7a:12:16:8f:d6:
fd:45:84:6b:c7:95:8b:e7:99:e7:22:9a:53:ba:86:5c:b0:46:
c4:cd:0d:2e:2a:35:58:09:fb:d4:4c:1b:09:4b:34:bc:40:1d:
7d:4d:48:3b:44:9e:a0:4d:33:bd:3a:75:d6:60:f9:63:35:39:
6b:b0:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org