Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/pj9BcFFonfpvS6OGNcO6w-9FxRg.roa
File: pj9BcFFonfpvS6OGNcO6w-9FxRg.roa (raw, json)
Hash identifier: z1I29IWsFj1pFgzU1O+ySiZ0USblT8ORztVER92/uJE=
Subject key identifier: A6:3F:41:70:51:68:9D:FA:6F:4B:A3:86:35:C3:BA:C3:EF:45:C5:18
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 0187BE8EC4AE252AA838B05488EFA9F1EF88
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/pj9BcFFonfpvS6OGNcO6w-9FxRg.roa
Signing time: Wed 26 Apr 2023 17:14:00 +0000
ROA not before: Wed 26 Apr 2023 17:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197107
IP address blocks: 194.31.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:8e:c4:ae:25:2a:a8:38:b0:54:88:ef:a9:f1:ef:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Apr 26 17:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a63f417051689dfa6f4ba38635c3bac3ef45c518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:05:35:23:f9:4e:86:fe:75:70:a3:e3:a2:
74:46:e1:85:9a:6e:9c:62:df:21:83:ab:24:9e:6a:
9c:ef:1f:ca:17:a1:2e:7d:b1:f2:76:1b:20:26:cb:
9f:f2:16:f0:8c:a7:1c:51:d5:7d:83:fb:a0:a1:88:
30:d8:f3:ce:c7:ee:26:d1:27:0d:ec:fb:7a:24:77:
b0:d0:8d:7a:f3:0c:e0:af:bb:5d:e9:6f:46:c6:1e:
a0:8f:1c:3d:27:41:90:81:90:1d:a1:12:b8:3f:ef:
1c:63:6b:b5:fa:d2:7c:ca:6f:ba:40:7d:6f:d3:55:
b7:16:bc:05:bd:11:83:a0:64:23:73:e0:c1:68:b8:
32:05:67:5d:49:6a:89:ba:84:e6:26:2c:5e:bd:6c:
9f:00:7e:45:a1:9a:1a:c0:f7:2a:97:5a:a6:da:22:
b5:f0:ec:24:c6:c1:c6:49:fd:c6:c7:b7:95:56:c7:
16:fa:31:09:f4:76:df:31:9b:99:88:5a:14:a4:99:
8a:4b:5a:29:f9:da:3d:cd:a4:c1:51:b4:e6:1d:e0:
ec:6e:61:7d:11:5f:fb:61:32:e9:c4:c9:e3:97:c0:
a0:1a:15:c8:07:96:94:4f:ca:32:02:10:37:51:cc:
07:f0:c0:e0:d1:6c:38:62:8c:da:40:54:96:b0:33:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3F:41:70:51:68:9D:FA:6F:4B:A3:86:35:C3:BA:C3:EF:45:C5:18
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/pj9BcFFonfpvS6OGNcO6w-9FxRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ff:bf:06:42:93:1b:66:92:79:50:9a:b1:64:54:3e:27:a9:
86:be:bb:07:a8:fd:ae:40:0f:63:48:db:1a:96:0a:29:bc:f2:
04:1d:de:aa:73:10:40:21:81:48:a0:a0:b9:9c:18:d2:8d:86:
8f:82:c3:4f:f3:8e:5d:8d:8c:39:4d:9b:d7:07:de:e9:1b:8e:
9f:79:c2:cf:aa:8a:a5:8c:1c:a0:75:44:af:d9:08:43:05:e2:
7f:2f:48:04:eb:b4:84:53:63:f8:f9:e7:f4:da:65:d7:93:de:
23:fb:e0:a4:13:df:a0:8d:ea:35:dc:f2:11:db:a1:7b:f3:95:
59:f3:27:a9:ea:3e:d4:ce:3c:d6:ac:f8:c4:e5:34:e1:7b:4c:
22:52:c6:e5:64:96:4b:4a:56:68:9d:f7:6d:06:80:51:c1:b0:
5e:7b:63:13:da:91:c8:91:89:fa:2c:aa:bd:ad:1d:5d:2f:79:
3b:d5:31:20:f8:5c:3f:2d:a1:dd:16:3c:0b:b1:dc:48:7e:2d:
3e:54:f4:fa:26:40:ea:16:bb:bf:f8:d5:6b:09:10:ff:4e:65:
42:01:b2:d6:a4:ef:1f:df:79:a5:6d:3d:94:f1:2d:89:f0:04:
23:37:53:e5:cc:83:78:48:e1:76:40:b4:eb:22:d0:6f:21:14:
ed:40:50:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYe+jsSuJSqoOLBUiO+p8e+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMGNjZDI1MDQ3YjljYjhiNmYwMTg2N2NkZWRlODI1NmY3
MzRhMjMwHhcNMjMwNDI2MTcxNDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjNmNDE3MDUxNjg5ZGZhNmY0YmEzODYzNWMzYmFjM2VmNDVjNTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhoFNSP5Tob+dXCj46J0RuGFmm6c
Yt8hg6sknmqc7x/KF6EufbHydhsgJsuf8hbwjKccUdV9g/ugoYgw2PPOx+4m0ScN
7Pt6JHew0I168wzgr7td6W9Gxh6gjxw9J0GQgZAdoRK4P+8cY2u1+tJ8ym+6QH1v
01W3FrwFvRGDoGQjc+DBaLgyBWddSWqJuoTmJixevWyfAH5FoZoawPcql1qm2iK1
8OwkxsHGSf3Gx7eVVscW+jEJ9HbfMZuZiFoUpJmKS1op+do9zaTBUbTmHeDsbmF9
EV/7YTLpxMnjl8CgGhXIB5aUT8oyAhA3UcwH8MDg0Ww4YozaQFSWsDPFJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKY/QXBRaJ36b0ujhjXDusPvRcUYMB8GA1UdIwQY
MBaAFD4MzSUEe5y4tvAYZ83t6CVvc0ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjkt
OWNkMDE3MjQzYTA2LzEvcGo5QmNGRm9uZnB2UzZPR05jTzZ3LTlGeFJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjktOWNkMDE3MjQzYTA2
LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh8yMA0G
CSqGSIb3DQEBCwUAA4IBAQC0/78GQpMbZpJ5UJqxZFQ+J6mGvrsHqP2uQA9jSNsa
lgopvPIEHd6qcxBAIYFIoKC5nBjSjYaPgsNP845djYw5TZvXB97pG46fecLPqoql
jBygdUSv2QhDBeJ/L0gE67SEU2P4+ef02mXXk94j++CkE9+gjeo13PIR26F785VZ
8yep6j7UzjzWrPjE5TThe0wiUsblZJZLSlZonfdtBoBRwbBee2MT2pHIkYn6LKq9
rR1dL3k71TEg+Fw/LaHdFjwLsdxIfi0+VPT6JkDqFru/+NVrCRD/TmVCAbLWpO8f
33mlbT2U8S2J8AQjN1PlzIN4SOF2QLTrItBvIRTtQFAU
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:15 2024 by rpki-client on console-ams.rpki-client.org