Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/5Bq6hTUIqJj4EUHe-STxLyBLC60.roa
File: 5Bq6hTUIqJj4EUHe-STxLyBLC60.roa (raw, json)
Hash identifier: GXe02B1zMDOeEy+ZpxIt+vOLU5tJxvfJrLT4qFLuzfs=
Subject key identifier: E4:1A:BA:85:35:08:A8:98:F8:11:41:DE:F9:24:F1:2F:20:4B:0B:AD
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FF112D434C177BE6029CEE6AC425C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/5Bq6hTUIqJj4EUHe-STxLyBLC60.roa
Signing time: Mon 02 Jan 2023 17:38:11 +0000
ROA not before: Mon 02 Jan 2023 17:38:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56382
IP address blocks: 194.50.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:f1:12:d4:34:c1:77:be:60:29:ce:e6:ac:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e41aba853508a898f81141def924f12f204b0bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:52:c5:29:cb:5e:c7:b8:84:f9:40:f4:a8:d8:
e4:eb:71:7c:15:2b:f7:46:dc:b3:db:bb:98:4d:33:
1a:33:72:fc:2a:0d:97:7e:99:48:88:5d:2c:0f:64:
60:b1:d1:77:85:75:c2:67:22:68:73:eb:2e:d7:01:
8d:71:75:c1:44:a1:69:52:cf:aa:14:1a:7e:fd:13:
40:a3:32:aa:f1:f1:52:49:0a:7e:3e:c6:5a:ed:2d:
ba:d0:ad:05:6d:37:9a:bc:2a:2e:6c:4a:9f:31:48:
fa:5e:3a:b0:83:6f:d1:57:03:52:a4:0d:89:1a:32:
37:be:d9:c8:9c:6f:87:5f:91:b9:8b:33:47:1e:9b:
5e:2c:63:07:df:15:69:f5:9f:33:b2:03:c7:e4:2b:
1b:6a:29:63:fc:c6:08:31:b8:40:b5:0c:fe:8d:ce:
f8:12:e0:24:de:f2:e8:a0:54:97:f3:87:09:32:ae:
7a:62:32:fb:3f:f0:77:06:cb:59:0e:32:f6:6b:6a:
98:b1:56:a9:74:20:3e:13:3a:3d:90:d6:1f:f7:1f:
58:59:cf:0f:38:ac:cc:ef:1a:6b:3d:ae:11:6a:08:
a9:17:fd:ba:03:a1:2a:d3:37:44:95:8f:5b:15:14:
7d:5c:8f:19:a0:13:c2:4d:26:1b:8e:1b:ba:ba:f0:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1A:BA:85:35:08:A8:98:F8:11:41:DE:F9:24:F1:2F:20:4B:0B:AD
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/5Bq6hTUIqJj4EUHe-STxLyBLC60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0a:2e:fe:38:5f:c0:88:9e:3a:42:be:48:c6:2f:ed:8c:48:
82:33:ff:f0:2b:71:19:00:dd:b5:14:2f:29:cf:1b:5e:2b:a7:
55:d4:66:02:17:6d:54:f5:6f:3a:93:f2:47:a9:cc:76:8d:f7:
c1:7c:9b:ef:cb:8d:30:fc:9a:20:97:3d:7b:59:06:b0:fd:dc:
03:8a:fc:da:6a:f2:8c:90:f8:8d:27:92:d9:2f:48:0f:fa:d4:
6a:fa:5c:bf:33:6a:e0:43:c0:52:4d:b5:99:ed:36:d9:81:a9:
5a:8d:6f:04:cf:58:11:6a:c3:0e:5c:fd:ba:b7:ee:0c:82:ab:
76:6e:47:b1:26:76:37:da:ee:29:39:a8:63:98:f5:14:fa:dc:
47:92:86:8f:22:a2:b9:4c:9a:a8:d0:18:7f:ce:fe:7a:ce:ea:
20:db:0a:fb:fb:d0:b0:fe:10:da:ee:36:40:75:71:4b:7d:fd:
47:78:d3:41:f8:ea:82:fd:d0:6f:5a:0b:90:c6:d3:de:bc:43:
2a:2f:ab:5a:f5:d1:e1:69:3a:43:f3:98:98:10:b9:ac:0c:7a:
34:c7:62:0f:29:ec:d0:7b:19:02:a2:52:ea:6e:13:5d:68:94:
e0:77:99:ea:a1:8b:c6:6f:cd:e4:f0:ac:bc:7c:a1:6d:0e:27:
0a:8b:60:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzj/ES1DTBd75gKc7mrEJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjMwMTAyMTczODExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDFhYmE4NTM1MDhhODk4ZjgxMTQxZGVmOTI0ZjEyZjIwNGIwYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVLFKctex7iE+UD0qNjk63F8FSv3
Rtyz27uYTTMaM3L8Kg2XfplIiF0sD2RgsdF3hXXCZyJoc+su1wGNcXXBRKFpUs+q
FBp+/RNAozKq8fFSSQp+PsZa7S260K0FbTeavCoubEqfMUj6Xjqwg2/RVwNSpA2J
GjI3vtnInG+HX5G5izNHHpteLGMH3xVp9Z8zsgPH5Csbailj/MYIMbhAtQz+jc74
EuAk3vLooFSX84cJMq56YjL7P/B3BstZDjL2a2qYsVapdCA+Ezo9kNYf9x9YWc8P
OKzM7xprPa4RagipF/26A6Eq0zdElY9bFRR9XI8ZoBPCTSYbjhu6uvCI+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOQauoU1CKiY+BFB3vkk8S8gSwutMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvNUJxNmhUVUlxSmo0RVVIZS1TVHhMeUJMQzYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjITMA0G
CSqGSIb3DQEBCwUAA4IBAQBfCi7+OF/AiJ46Qr5Ixi/tjEiCM//wK3EZAN21FC8p
zxteK6dV1GYCF21U9W86k/JHqcx2jffBfJvvy40w/Joglz17WQaw/dwDivzaavKM
kPiNJ5LZL0gP+tRq+ly/M2rgQ8BSTbWZ7TbZgalajW8Ez1gRasMOXP26t+4Mgqt2
bkexJnY32u4pOahjmPUU+txHkoaPIqK5TJqo0Bh/zv56zuog2wr7+9Cw/hDa7jZA
dXFLff1HeNNB+OqC/dBvWguQxtPevEMqL6ta9dHhaTpD85iYELmsDHo0x2IPKezQ
exkColLqbhNdaJTgd5nqoYvGb83k8Ky8fKFtDicKi2B+
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org