Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/PM7ncA0kCCZY8I70VZB9YEQNvf4.roa
File: PM7ncA0kCCZY8I70VZB9YEQNvf4.roa (raw, json)
Hash identifier: IzLXxsRkC6asZNEH9goxWS9heHe1qBra05YBWET2jAw=
Subject key identifier: 3C:CE:E7:70:0D:24:08:26:58:F0:8E:F4:55:90:7D:60:44:0D:BD:FE
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 01862FDA6D41EF21769A4595A4560CC12C90
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/PM7ncA0kCCZY8I70VZB9YEQNvf4.roa
Signing time: Wed 08 Feb 2023 07:08:09 +0000
ROA not before: Wed 08 Feb 2023 07:08:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61141
IP address blocks: 217.29.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2f:da:6d:41:ef:21:76:9a:45:95:a4:56:0c:c1:2c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Feb 8 07:08:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ccee7700d24082658f08ef455907d60440dbdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:91:28:3e:09:44:a3:a0:82:de:2d:d4:77:
a3:71:39:9d:32:6d:4e:a4:7c:94:1d:07:37:e2:cc:
77:8c:53:ce:ab:aa:de:58:f2:88:8b:14:38:0a:8c:
9c:cd:8f:dc:6f:94:11:ac:cf:d2:64:52:95:ad:ab:
13:15:1e:8d:2c:7c:68:c6:6a:ae:d5:ac:c2:af:a7:
85:d8:63:c5:5c:3e:42:cc:90:bd:fd:af:a2:19:08:
04:19:55:2a:24:52:74:ad:e3:1a:57:ae:3f:8c:9b:
d1:06:a0:db:b7:a5:1f:89:92:b8:c4:2f:94:38:97:
81:7b:62:3b:42:ec:d7:91:01:27:26:ee:dc:8a:9a:
a5:c2:bf:ab:5d:87:3e:17:68:bf:01:2f:ea:bf:b1:
a9:ad:6e:07:88:32:b6:76:e4:2a:b9:c3:4b:a6:a5:
2a:28:a4:fd:8b:59:1c:ac:1e:c9:95:ba:e3:c9:c1:
e7:7c:1f:fe:cf:0a:1a:b2:17:e7:7d:fc:25:2e:23:
9f:23:60:58:4c:12:6e:fd:bc:4b:16:d9:ae:1c:5d:
d5:34:16:de:cc:d4:57:98:44:13:e9:1a:f5:32:55:
29:2d:07:66:70:b0:66:14:6c:e2:4c:44:5a:4e:74:
4f:14:fe:f5:a3:a7:57:f6:9b:2e:9e:eb:c7:89:33:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:E7:70:0D:24:08:26:58:F0:8E:F4:55:90:7D:60:44:0D:BD:FE
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/PM7ncA0kCCZY8I70VZB9YEQNvf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.29.50.0/24
Signature Algorithm: sha256WithRSAEncryption
64:37:59:21:a6:37:ba:a5:7a:6b:bf:6a:55:2b:4b:cf:72:f1:
ae:ce:fe:94:3c:05:55:83:69:97:58:17:ed:49:33:be:68:d6:
72:8a:51:fc:e6:cc:e5:f8:ca:50:86:c0:e9:b8:55:4c:7e:e4:
38:14:a6:66:76:19:c4:01:f6:72:1a:7a:59:e3:a9:ec:8d:f3:
36:a6:ee:54:6b:e5:12:4b:da:11:d7:67:fa:5c:12:45:53:8e:
33:7a:b4:81:6a:3a:f3:d1:40:90:be:7d:6a:38:88:a1:20:d1:
dc:4b:a3:66:f8:bd:52:28:43:31:8b:8b:81:a5:60:1b:1b:b7:
54:f7:78:3d:55:81:1d:d0:d6:f1:20:9c:a9:84:14:4e:8d:61:
5a:87:45:55:a3:eb:c9:b1:04:50:4d:3e:6d:48:69:67:3d:ea:
56:ec:7c:c2:33:d5:e0:ca:57:86:5f:8c:5a:40:72:18:6a:d4:
43:dd:f3:28:0a:e8:38:d6:63:da:c9:1b:b1:72:b1:90:a6:fa:
fe:28:cf:66:8b:37:94:84:6c:cd:10:b2:ea:1f:1b:57:67:92:
b6:e5:71:e4:2e:b8:27:1c:e8:a0:2b:02:d9:5f:ce:46:46:38:
ed:ac:19:1e:f3:ca:0a:50:ee:8c:8d:2c:2b:aa:73:cd:84:57:
04:86:d4:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYv2m1B7yF2mkWVpFYMwSyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MjgwY2M1MzQ1MTZkMWMxZDllYTAyNGVhYWZiZDAxZmRj
NjhjOTcwHhcNMjMwMjA4MDcwODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2NlZTc3MDBkMjQwODI2NThmMDhlZjQ1NTkwN2Q2MDQ0MGRiZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaWRKD4JRKOggt4t1HejcTmdMm1O
pHyUHQc34sx3jFPOq6reWPKIixQ4CoyczY/cb5QRrM/SZFKVrasTFR6NLHxoxmqu
1azCr6eF2GPFXD5CzJC9/a+iGQgEGVUqJFJ0reMaV64/jJvRBqDbt6UfiZK4xC+U
OJeBe2I7QuzXkQEnJu7cipqlwr+rXYc+F2i/AS/qv7GprW4HiDK2duQqucNLpqUq
KKT9i1kcrB7JlbrjycHnfB/+zwoashfnffwlLiOfI2BYTBJu/bxLFtmuHF3VNBbe
zNRXmEQT6Rr1MlUpLQdmcLBmFGziTERaTnRPFP71o6dX9psunuvHiTOI1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDzO53ANJAgmWPCO9FWQfWBEDb3+MB8GA1UdIwQY
MBaAFCcoDMU0UW0cHZ6gJOqvvQH9xoyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUt
MTViNzliMDI5NDNlLzEvUE03bmNBMGtDQ1pZOEk3MFZaQjlZRVFOdmY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUtMTViNzliMDI5NDNl
LzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2R0yMA0G
CSqGSIb3DQEBCwUAA4IBAQBkN1khpje6pXprv2pVK0vPcvGuzv6UPAVVg2mXWBft
STO+aNZyilH85szl+MpQhsDpuFVMfuQ4FKZmdhnEAfZyGnpZ46nsjfM2pu5Ua+US
S9oR12f6XBJFU44zerSBajrz0UCQvn1qOIihINHcS6Nm+L1SKEMxi4uBpWAbG7dU
93g9VYEd0NbxIJyphBROjWFah0VVo+vJsQRQTT5tSGlnPepW7HzCM9XgyleGX4xa
QHIYatRD3fMoCug41mPayRuxcrGQpvr+KM9mizeUhGzNELLqHxtXZ5K25XHkLrgn
HOigKwLZX85GRjjtrBke88oKUO6MjSwrqnPNhFcEhtTd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org