Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/nfY2OHZC7ahyw-PWPVm8zFzPZcg.roa
File: nfY2OHZC7ahyw-PWPVm8zFzPZcg.roa (raw, json)
Hash identifier: xDehtnD4/t7oEvfBwLwj3nBPuQZ0dEQkhARZDSzaJFs=
Subject key identifier: 9D:F6:36:38:76:42:ED:A8:72:C3:E3:D6:3D:59:BC:CC:5C:CF:65:C8
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 01857E291DAEC257BEDA173CF61E56698A77
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/nfY2OHZC7ahyw-PWPVm8zFzPZcg.roa
Signing time: Wed 04 Jan 2023 19:01:41 +0000
ROA not before: Wed 04 Jan 2023 19:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210194
IP address blocks: 194.39.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7e:29:1d:ae:c2:57:be:da:17:3c:f6:1e:56:69:8a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jan 4 19:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9df636387642eda872c3e3d63d59bccc5ccf65c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7c:21:19:08:eb:b0:a4:bd:b2:95:8b:b3:09:
19:0c:b4:17:2e:12:53:93:d6:2e:9b:f7:e9:41:5f:
b4:c9:9d:fb:05:47:59:ac:ac:28:0c:bb:a5:ac:6c:
01:82:a0:43:b8:8d:e0:0e:27:9d:2f:52:95:6f:8b:
21:37:c2:b0:0f:13:31:d7:9a:69:ca:07:d9:4f:2f:
6c:bc:5f:8d:bc:50:81:a2:a8:82:ad:51:06:10:e7:
b7:0d:c8:e4:89:27:d0:1b:73:36:35:8a:2f:8e:92:
fe:50:41:90:24:51:2f:04:c0:c9:ad:25:29:e9:d2:
71:91:d0:3e:9d:70:4e:86:1a:9a:52:84:d2:12:c4:
5f:0d:d9:a6:c1:38:df:fe:45:74:fd:ab:1c:f4:a3:
fb:01:77:6f:1f:98:2b:4c:07:d3:f4:bb:a3:93:fa:
e0:71:e0:8a:06:40:d1:dd:f5:59:4a:d3:b6:8d:ba:
29:dc:b8:32:06:77:89:5f:48:ba:e2:fe:86:d7:b4:
a0:14:f2:5b:22:ec:31:2a:b6:23:33:0e:77:b7:3d:
f1:e5:74:88:3e:69:2a:75:7b:cf:21:1e:db:f1:21:
e8:5c:4e:65:d1:27:3c:63:ce:5b:7b:f3:07:19:ce:
67:d3:72:10:1f:61:c6:54:32:9d:30:10:ad:6b:20:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F6:36:38:76:42:ED:A8:72:C3:E3:D6:3D:59:BC:CC:5C:CF:65:C8
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/nfY2OHZC7ahyw-PWPVm8zFzPZcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.231.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8e:c8:60:b4:59:f9:ed:79:4c:1d:59:e6:0a:25:b4:2c:a6:
ba:2b:cb:71:40:88:0a:65:8b:1e:0e:40:42:04:83:c1:83:0b:
c5:23:be:3d:0b:6b:4a:ac:be:74:4a:99:91:f0:09:d1:fb:af:
ff:30:5a:a1:4a:72:22:19:c4:05:92:a0:06:38:b1:80:93:28:
5b:96:bf:91:35:53:cb:c9:40:fb:0e:ba:5e:e6:98:b3:8c:4f:
ed:88:ed:eb:1f:ec:f1:8b:65:0c:02:a0:25:7a:d0:06:ad:09:
dc:8f:de:94:8b:6b:00:d8:20:30:b4:32:70:f6:b2:6f:14:25:
3a:60:9c:10:d9:c1:d5:dd:6a:1a:bf:4f:62:30:b6:a3:8e:8a:
46:f8:60:fe:31:74:a7:a2:9e:b2:85:7e:53:bd:b7:d6:c8:76:
f6:f5:f7:d4:6d:2d:a9:ca:ff:de:cb:b7:e5:3b:23:21:c4:e2:
71:d8:a6:cc:3d:8d:3a:61:c0:60:c3:35:95:be:ae:eb:e3:13:
21:60:89:71:53:85:f1:e4:34:43:22:e9:1d:37:4c:fe:10:a9:
10:02:16:f6:29:31:b2:cd:cc:31:bc:11:d5:c6:87:c5:cf:be:
78:f3:c7:81:d0:9b:47:2d:9a:4e:b1:7e:7d:74:81:b2:6b:16:
62:42:4b:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYV+KR2uwle+2hc89h5WaYp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5
Y2UzM2EwHhcNMjMwMTA0MTkwMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGY2MzYzODc2NDJlZGE4NzJjM2UzZDYzZDU5YmNjYzVjY2Y2NWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93whGQjrsKS9spWLswkZDLQXLhJT
k9Yum/fpQV+0yZ37BUdZrKwoDLulrGwBgqBDuI3gDiedL1KVb4shN8KwDxMx15pp
ygfZTy9svF+NvFCBoqiCrVEGEOe3DcjkiSfQG3M2NYovjpL+UEGQJFEvBMDJrSUp
6dJxkdA+nXBOhhqaUoTSEsRfDdmmwTjf/kV0/asc9KP7AXdvH5grTAfT9Lujk/rg
ceCKBkDR3fVZStO2jbop3LgyBneJX0i64v6G17SgFPJbIuwxKrYjMw53tz3x5XSI
PmkqdXvPIR7b8SHoXE5l0Sc8Y85be/MHGc5n03IQH2HGVDKdMBCtayDohwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ32Njh2Qu2ocsPj1j1ZvMxcz2XIMB8GA1UdIwQY
MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt
NjJiZTUzNDI1Njc2LzEvbmZZMk9IWkM3YWh5dy1QV1BWbTh6RnpQWmNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2
LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwifnMA0G
CSqGSIb3DQEBCwUAA4IBAQA0jshgtFn57XlMHVnmCiW0LKa6K8txQIgKZYseDkBC
BIPBgwvFI749C2tKrL50SpmR8AnR+6//MFqhSnIiGcQFkqAGOLGAkyhblr+RNVPL
yUD7Drpe5pizjE/tiO3rH+zxi2UMAqAletAGrQncj96Ui2sA2CAwtDJw9rJvFCU6
YJwQ2cHV3Woav09iMLajjopG+GD+MXSnop6yhX5TvbfWyHb29ffUbS2pyv/ey7fl
OyMhxOJx2KbMPY06YcBgwzWVvq7r4xMhYIlxU4Xx5DRDIukdN0z+EKkQAhb2KTGy
zcwxvBHVxofFz75488eB0JtHLZpOsX59dIGyaxZiQktv
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:01 2023 by rpki-client on console-fra.rpki-client.org