Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/vHSUmYJMg4bdFy1UZE6wumyoC3I.roa
File: vHSUmYJMg4bdFy1UZE6wumyoC3I.roa (raw, json)
Hash identifier: Mx/gpQZysXL2cPJmU3ehVgvj2w/f9fXtNMRntHqA69U=
Subject key identifier: BC:74:94:99:82:4C:83:86:DD:17:2D:54:64:4E:B0:BA:6C:A8:0B:72
Certificate issuer: /CN=a4947a653dec53d179d5724f2514c7256db69df8
Certificate serial: 01857039A91D05C82694DAA723C3905246C3
Authority key identifier: A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/vHSUmYJMg4bdFy1UZE6wumyoC3I.roa
Signing time: Mon 02 Jan 2023 02:05:05 +0000
ROA not before: Mon 02 Jan 2023 02:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52160
IP address blocks: 194.247.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a9:1d:05:c8:26:94:da:a7:23:c3:90:52:46:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4947a653dec53d179d5724f2514c7256db69df8
Validity
Not Before: Jan 2 02:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc749499824c8386dd172d54644eb0ba6ca80b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:50:b6:4e:c1:6c:a6:c6:21:17:9d:2a:31:
71:60:fb:1a:8b:d8:83:74:f1:b3:e4:c1:46:80:81:
f9:b6:16:f9:93:16:94:4e:82:39:b9:af:98:5c:fc:
ef:75:8b:ef:1c:a2:d2:ec:f4:d6:43:7c:96:71:d2:
d8:c1:1f:23:51:d2:9a:e8:7f:ab:8f:96:4c:d5:bd:
85:dd:cc:63:c1:aa:0f:6a:59:18:7a:21:82:3e:04:
b9:5c:06:77:94:bb:c4:3b:89:94:d2:44:39:5f:36:
78:54:fc:ac:5d:26:dd:23:9f:ea:a0:cd:39:d8:b5:
29:9c:73:a9:8e:5c:37:ac:2f:7b:41:2a:e2:fc:67:
fd:1b:ed:10:d7:fe:70:88:b5:07:e0:b7:d7:c3:f1:
b4:6e:8e:0a:d9:fc:1f:57:3e:e7:58:9a:ca:4b:f7:
9e:09:9f:91:61:e2:99:ef:21:d0:10:6e:a6:5c:ba:
61:29:c1:81:cf:d4:13:1f:ab:54:96:ca:51:6b:e4:
b7:50:f6:cc:25:6d:47:1f:94:f6:46:53:09:1d:4a:
d7:87:24:7d:ad:ce:96:a3:94:17:61:5d:84:9d:ab:
9f:79:e1:1b:4d:ed:f3:5c:66:ef:53:b7:23:a1:8e:
76:70:5a:f7:3a:55:da:a6:96:71:2b:64:4a:13:0a:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:74:94:99:82:4C:83:86:DD:17:2D:54:64:4E:B0:BA:6C:A8:0B:72
X509v3 Authority Key Identifier:
keyid:A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/vHSUmYJMg4bdFy1UZE6wumyoC3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.50.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9d:65:b2:4f:c3:3a:ee:49:27:93:06:4f:83:3d:f6:6e:ee:
e9:3e:95:c0:6b:eb:2a:45:77:c8:8f:86:b7:e6:93:e2:09:c8:
f7:e7:4d:64:53:3e:1b:97:47:52:bb:d8:a0:6d:d0:34:8f:ae:
36:3d:ef:f9:5f:49:f7:47:35:dc:2c:27:c9:26:64:85:9c:d5:
1d:43:44:19:ff:30:b3:9a:85:3e:12:eb:db:e2:86:3a:78:5d:
5b:b1:69:b8:6a:e6:83:8c:18:49:8d:5a:59:9a:61:05:49:eb:
5b:95:a1:91:5c:91:bb:37:e4:e0:18:ae:00:4b:6d:64:85:42:
9e:6c:2c:c3:b2:bb:fe:15:09:5f:62:b2:f0:b1:e6:19:3b:5a:
d6:16:b9:5e:af:1c:6f:48:b8:8d:25:2f:be:0a:26:0e:fb:11:
ef:93:4e:8b:72:0b:aa:9e:73:c7:1f:85:e5:e5:34:75:4a:f1:
b5:9e:65:eb:4e:3e:6f:33:e3:2e:b0:55:5a:29:d4:6c:ca:1a:
f6:9a:8d:7f:78:17:34:26:23:e8:65:64:4d:f8:6d:54:35:83:
1b:e0:c0:f9:15:dd:aa:9d:10:5b:a5:34:ab:e7:f4:f0:99:26:
0f:44:0d:68:3c:e0:ac:15:c1:99:f1:f8:3a:d0:1e:07:9f:51:
a8:0b:2e:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwOakdBcgmlNqnI8OQUkbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTQ3YTY1M2RlYzUzZDE3OWQ1NzI0ZjI1MTRjNzI1NmRi
NjlkZjgwHhcNMjMwMTAyMDIwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzc0OTQ5OTgyNGM4Mzg2ZGQxNzJkNTQ2NDRlYjBiYTZjYTgwYjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqdQtk7BbKbGIRedKjFxYPsai9iD
dPGz5MFGgIH5thb5kxaUToI5ua+YXPzvdYvvHKLS7PTWQ3yWcdLYwR8jUdKa6H+r
j5ZM1b2F3cxjwaoPalkYeiGCPgS5XAZ3lLvEO4mU0kQ5XzZ4VPysXSbdI5/qoM05
2LUpnHOpjlw3rC97QSri/Gf9G+0Q1/5wiLUH4LfXw/G0bo4K2fwfVz7nWJrKS/ee
CZ+RYeKZ7yHQEG6mXLphKcGBz9QTH6tUlspRa+S3UPbMJW1HH5T2RlMJHUrXhyR9
rc6Wo5QXYV2EnaufeeEbTe3zXGbvU7cjoY52cFr3OlXappZxK2RKEwp3vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLx0lJmCTIOG3RctVGROsLpsqAtyMB8GA1UdIwQY
MBaAFKSUemU97FPRedVyTyUUxyVttp34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpSNlpUM3NVOUY1MVhKUEpSVEhKVzIybmZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83NjcwNmMtMTI0Yy00ZGJmLWFlZjgt
NzNkYmExZGRkY2E3LzEvdkhTVW1ZSk1nNGJkRnkxVVpFNnd1bXlvQzNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83NjcwNmMtMTI0Yy00ZGJmLWFlZjgtNzNkYmExZGRkY2E3
LzEvcEpSNlpUM3NVOUY1MVhKUEpSVEhKVzIybmZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvcyMA0G
CSqGSIb3DQEBCwUAA4IBAQB2nWWyT8M67kknkwZPgz32bu7pPpXAa+sqRXfIj4a3
5pPiCcj3501kUz4bl0dSu9igbdA0j642Pe/5X0n3RzXcLCfJJmSFnNUdQ0QZ/zCz
moU+Euvb4oY6eF1bsWm4auaDjBhJjVpZmmEFSetblaGRXJG7N+TgGK4AS21khUKe
bCzDsrv+FQlfYrLwseYZO1rWFrlerxxvSLiNJS++CiYO+xHvk06LcguqnnPHH4Xl
5TR1SvG1nmXrTj5vM+MusFVaKdRsyhr2mo1/eBc0JiPoZWRN+G1UNYMb4MD5Fd2q
nRBbpTSr5/TwmSYPRA1oPOCsFcGZ8fg60B4Hn1GoCy7D
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:05 2024 by rpki-client on console-ams.rpki-client.org