Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/1xccNPClRRZ_kHnufMygvlzBUoM.roa
File: 1xccNPClRRZ_kHnufMygvlzBUoM.roa (raw, json)
Hash identifier: 5jw9lFET4vDIAKNoRo7/nq5bLJbIdGHZY/nzVGFHudM=
Subject key identifier: D7:17:1C:34:F0:A5:45:16:7F:90:79:EE:7C:CC:A0:BE:5C:C1:52:83
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 018CC3488F779D2604A54622636914E3B12E
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/1xccNPClRRZ_kHnufMygvlzBUoM.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213296
IP address blocks: 194.50.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 21:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8f:77:9d:26:04:a5:46:22:63:69:14:e3:b1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7171c34f0a545167f9079ee7ccca0be5cc15283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:7a:41:31:2b:62:c5:e6:07:b5:0b:45:7c:
7d:0d:b4:45:5c:c1:15:65:bf:81:47:39:2c:6d:33:
78:b2:d6:43:1e:20:1d:d2:5b:df:a3:aa:67:bf:18:
84:56:fd:1f:80:62:18:8e:51:c3:21:94:8f:02:d9:
f4:a3:58:99:e5:ba:42:07:4b:36:40:89:36:f7:25:
61:93:e5:b3:c9:03:66:61:c7:d2:07:fe:9d:76:2b:
56:d4:50:06:59:84:4c:a0:3d:1f:f4:0a:13:4a:49:
e5:47:b7:2b:97:61:e4:cf:17:55:0b:bb:55:b2:38:
37:71:58:f0:73:0e:de:6f:1e:33:11:fd:90:87:76:
54:5a:bb:92:e7:60:83:d0:fe:5b:e3:69:ec:32:02:
ad:dc:b4:2c:41:c4:37:54:fb:bf:68:23:63:f7:ec:
4d:a8:08:34:06:2f:03:e1:cb:5b:98:c8:db:c4:b0:
ae:4d:44:dd:41:b2:e2:5a:55:f5:7f:fa:99:5f:a6:
ef:fa:97:7c:32:45:5a:02:f2:11:7b:60:8a:30:59:
5b:38:19:d2:79:0e:b4:86:4e:92:6a:ec:03:9b:7b:
8c:af:3b:cd:d8:b9:c6:55:63:6a:40:aa:54:05:f8:
ba:d6:7b:7a:1e:cf:5e:b8:fd:f1:be:d7:1d:09:30:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:17:1C:34:F0:A5:45:16:7F:90:79:EE:7C:CC:A0:BE:5C:C1:52:83
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/1xccNPClRRZ_kHnufMygvlzBUoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c6:67:c4:11:01:65:c2:cd:65:79:e8:9d:1a:7e:ed:be:28:
d2:f7:38:e4:f2:69:3b:31:70:ba:89:92:55:0d:ab:c4:a3:ec:
56:8b:ba:67:be:e1:3b:e6:85:e3:3a:83:e7:11:1f:db:41:76:
5b:de:a7:3e:c6:fc:09:d1:e7:5c:ce:47:8b:bd:ba:1f:b7:fb:
f0:9b:b9:f0:d7:df:e9:c6:31:bf:0c:5a:1e:c8:30:81:ec:86:
bd:ed:77:c7:7b:58:5f:35:6e:50:33:8a:d8:d4:79:6c:dd:84:
81:dd:f4:ea:28:8d:a1:1e:54:dc:30:fb:77:71:65:c5:e0:f8:
6d:3c:44:ea:ee:fd:c6:b1:34:3b:74:fe:e8:f8:f6:7a:08:d3:
d7:38:f6:bf:55:1b:f4:73:a8:c2:fd:87:2b:45:b3:22:13:f4:
f2:bc:e1:01:3c:37:14:63:e6:17:e5:07:99:d5:a3:dc:92:04:
e0:92:6b:af:04:69:b6:2c:c0:d0:f9:d1:30:3f:bd:f2:75:78:
b3:43:58:bd:ed:bc:cf:0f:21:33:08:4f:11:e0:16:8b:80:17:
8a:57:68:72:0c:33:9f:0a:f5:4a:76:60:e3:32:7f:12:be:6a:
95:42:36:81:c1:32:93:51:60:25:10:92:b5:39:0d:47:de:66:
d4:b4:9e:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSI93nSYEpUYiY2kU47EuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWY5MjVlMTczOGJjMzUyYmM2YjVjZjVmZjk1MWIzZDgx
M2FlMzkwHhcNMjQwMTAxMDQyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzE3MWMzNGYwYTU0NTE2N2Y5MDc5ZWU3Y2NjYTBiZTVjYzE1MjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmN6QTErYsXmB7ULRXx9DbRFXMEV
Zb+BRzksbTN4stZDHiAd0lvfo6pnvxiEVv0fgGIYjlHDIZSPAtn0o1iZ5bpCB0s2
QIk29yVhk+WzyQNmYcfSB/6dditW1FAGWYRMoD0f9AoTSknlR7crl2HkzxdVC7tV
sjg3cVjwcw7ebx4zEf2Qh3ZUWruS52CD0P5b42nsMgKt3LQsQcQ3VPu/aCNj9+xN
qAg0Bi8D4ctbmMjbxLCuTUTdQbLiWlX1f/qZX6bv+pd8MkVaAvIRe2CKMFlbOBnS
eQ60hk6SauwDm3uMrzvN2LnGVWNqQKpUBfi61nt6Hs9euP3xvtcdCTCtGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNcXHDTwpUUWf5B57nzMoL5cwVKDMB8GA1UdIwQY
MBaAFNefkl4XOLw1K8a1z1/5UbPYE645MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjIt
OTZhMzRiMDIyZjg5LzEvMXhjY05QQ2xSUlpfa0hudWZNeWd2bHpCVW9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjItOTZhMzRiMDIyZjg5
LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjKpMA0G
CSqGSIb3DQEBCwUAA4IBAQBfxmfEEQFlws1leeidGn7tvijS9zjk8mk7MXC6iZJV
DavEo+xWi7pnvuE75oXjOoPnER/bQXZb3qc+xvwJ0edczkeLvboft/vwm7nw19/p
xjG/DFoeyDCB7Ia97XfHe1hfNW5QM4rY1Hls3YSB3fTqKI2hHlTcMPt3cWXF4Pht
PETq7v3GsTQ7dP7o+PZ6CNPXOPa/VRv0c6jC/YcrRbMiE/TyvOEBPDcUY+YX5QeZ
1aPckgTgkmuvBGm2LMDQ+dEwP73ydXizQ1i97bzPDyEzCE8R4BaLgBeKV2hyDDOf
CvVKdmDjMn8SvmqVQjaBwTKTUWAlEJK1OQ1H3mbUtJ7F
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:53 2024 by rpki-client on console-ams.rpki-client.org