Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MpGagBnPvEf0bxwJ34qjedE-aRE.roa
File: MpGagBnPvEf0bxwJ34qjedE-aRE.roa (raw, json)
Hash identifier: 6p3ZYr/Jn3aNSJ8qD/4INUCiles3/ejhh9Tu+8bGhKk=
Subject key identifier: 32:91:9A:80:19:CF:BC:47:F4:6F:1C:09:DF:8A:A3:79:D1:3E:69:11
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E04A900B9E162A7B681BDC6651DDACBA6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MpGagBnPvEf0bxwJ34qjedE-aRE.roa
Signing time: Sun 03 Mar 2024 14:12:48 +0000
ROA not before: Sun 03 Mar 2024 14:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 03 Mar 2024 15:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:04:a9:00:b9:e1:62:a7:b6:81:bd:c6:65:1d:da:cb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 14:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32919a8019cfbc47f46f1c09df8aa379d13e6911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:35:31:55:04:7e:18:fd:ec:de:12:f3:b9:
4e:11:26:8e:b5:3c:86:b3:f0:28:44:29:3d:1b:43:
a1:99:6b:9b:56:85:79:7a:29:27:f4:6c:90:23:42:
f5:ae:36:0e:af:75:72:6b:ce:05:fd:50:dd:71:25:
c5:7a:ae:3b:4c:de:c8:b8:42:45:6b:64:8f:12:62:
58:a2:45:6a:ea:b4:4a:1f:7e:1d:cd:b5:53:22:ec:
f4:5f:f8:b5:73:fc:52:c9:b0:b5:a8:8a:c2:a8:55:
44:88:b7:8a:aa:f5:32:2e:bf:1b:d5:de:6b:cd:55:
44:8b:ab:7e:85:f8:61:ba:d3:3b:2e:bf:96:c7:36:
8e:9f:b5:ae:8a:55:b9:8a:9b:c5:97:92:b1:75:61:
73:96:05:83:93:5c:d7:1c:b8:22:4a:16:ab:9b:96:
5d:7b:8e:f5:3e:d3:ca:60:d8:ef:56:c3:f6:af:66:
25:53:3b:97:fc:12:58:0e:3c:85:61:e7:d9:34:2a:
d5:2a:14:3d:a4:7e:e9:3f:93:c6:47:b8:b1:97:1c:
ae:98:c8:7d:00:95:d5:c7:31:a7:de:39:a3:5e:32:
c7:4b:18:09:e4:0f:80:6e:56:4f:00:bf:13:04:1b:
3d:12:ad:4b:60:ed:52:42:fc:4c:37:fa:8b:c2:7e:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:91:9A:80:19:CF:BC:47:F4:6F:1C:09:DF:8A:A3:79:D1:3E:69:11
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MpGagBnPvEf0bxwJ34qjedE-aRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:de:ea:7a:5d:3c:77:cf:88:b2:ca:fc:44:6b:73:d7:e3:fe:
d7:5e:7e:68:1b:7a:90:64:b9:23:30:76:0e:e0:37:03:5b:93:
fd:4c:52:2d:f3:ab:c8:77:c5:59:ea:04:ac:46:8b:4e:7b:4d:
e2:bc:6b:55:5c:69:da:7c:7d:de:12:ed:0f:53:3d:af:07:f3:
26:80:f4:67:b1:9a:d0:6c:b6:81:b2:da:ad:64:e6:19:56:be:
13:79:cc:88:6d:49:e0:59:27:82:6d:15:f8:3c:43:55:e9:36:
26:bf:23:79:55:59:2e:b6:e1:80:d7:25:9a:68:da:55:33:71:
56:21:bd:a2:a4:0f:db:c5:ce:1d:78:ac:a9:db:90:7d:b3:28:
53:92:b0:ad:92:c1:b5:b6:34:06:15:06:88:68:15:c2:20:51:
1e:e4:4e:73:92:55:a2:e1:ac:6c:43:2a:57:4d:07:f3:ac:31:
ff:6b:95:5d:a6:cb:28:b8:be:91:ec:0a:7f:ad:18:a6:c1:66:
c1:26:b1:51:2a:97:5a:1b:74:7c:c6:6e:fa:25:6e:8b:1e:94:
87:41:2e:7a:80:ee:42:0d:b3:4e:ee:15:b2:7e:67:bb:83:7e:
24:0f:98:69:6b:2f:2f:64:9b:13:7f:fc:70:00:96:7d:ca:cd:
1e:3a:3e:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4EqQC54WKntoG9xmUd2sumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzAzMTQxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjkxOWE4MDE5Y2ZiYzQ3ZjQ2ZjFjMDlkZjhhYTM3OWQxM2U2OTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc01MVUEfhj97N4S87lOESaOtTyG
s/AoRCk9G0OhmWubVoV5eikn9GyQI0L1rjYOr3Vya84F/VDdcSXFeq47TN7IuEJF
a2SPEmJYokVq6rRKH34dzbVTIuz0X/i1c/xSybC1qIrCqFVEiLeKqvUyLr8b1d5r
zVVEi6t+hfhhutM7Lr+WxzaOn7WuilW5ipvFl5KxdWFzlgWDk1zXHLgiSharm5Zd
e471PtPKYNjvVsP2r2YlUzuX/BJYDjyFYefZNCrVKhQ9pH7pP5PGR7ixlxyumMh9
AJXVxzGn3jmjXjLHSxgJ5A+AblZPAL8TBBs9Eq1LYO1SQvxMN/qLwn6cVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDKRmoAZz7xH9G8cCd+Ko3nRPmkRMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTXBHYWdCblB2RWYwYnh3SjM0cWplZEUtYVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAne6npdPHfPiLLK/ERr
c9fj/tdefmgbepBkuSMwdg7gNwNbk/1MUi3zq8h3xVnqBKxGi057TeK8a1Vcadp8
fd4S7Q9TPa8H8yaA9GexmtBstoGy2q1k5hlWvhN5zIhtSeBZJ4JtFfg8Q1XpNia/
I3lVWS624YDXJZpo2lUzcVYhvaKkD9vFzh14rKnbkH2zKFOSsK2SwbW2NAYVBoho
FcIgUR7kTnOSVaLhrGxDKldNB/OsMf9rlV2myyi4vpHsCn+tGKbBZsEmsVEql1ob
dHzGbvolboselIdBLnqA7kINs07uFbJ+Z7uDfiQPmGlrLy9kmxN//HAAln3KzR46
PuI=
-----END CERTIFICATE-----
Generated at Sun Mar 3 20:24:13 2024 by rpki-client on console.sobornost.net