Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/rFHHF-fezP5qSgqGMCGsqGir3Hw.roa
File: rFHHF-fezP5qSgqGMCGsqGir3Hw.roa (raw, json)
Hash identifier: E15hvWixieAEOEuNbeouGyY9L+ueXZxDJO0M5ERcQwE=
Subject key identifier: AC:51:C7:17:E7:DE:CC:FE:6A:4A:0A:86:30:21:AC:A8:68:AB:DC:7C
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 01856BDC9A64BF951B104261A8490DB73633
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/rFHHF-fezP5qSgqGMCGsqGir3Hw.roa
Signing time: Sun 01 Jan 2023 05:44:57 +0000
ROA not before: Sun 01 Jan 2023 05:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57588
IP address blocks: 194.39.230.0/24 maxlen: 24
194.39.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 19:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:9a:64:bf:95:1b:10:42:61:a8:49:0d:b7:36:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jan 1 05:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac51c717e7deccfe6a4a0a863021aca868abdc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:e1:6a:9a:84:ed:b8:2d:93:f9:1c:bc:fb:
32:b2:eb:23:10:01:2a:bb:d8:3f:e8:2b:10:0a:dd:
1d:da:bd:b6:6d:5b:d7:52:a8:07:1a:c2:bc:fd:2d:
f0:73:52:87:f6:d9:e8:6e:ce:1d:6b:b9:24:6b:31:
4e:d6:1d:92:cf:d6:f7:46:06:b9:ab:e1:7a:17:06:
ac:75:06:35:fc:81:d5:e4:30:fc:ee:bc:ea:02:80:
a1:d1:eb:24:ee:a3:d4:5b:99:6b:4c:d5:62:49:1a:
d0:30:58:70:2c:d1:50:9f:36:4a:95:0c:9d:bb:d7:
48:1d:04:4c:eb:a9:d1:73:da:d8:97:e0:fc:eb:e9:
2c:60:6a:67:ba:f7:a9:28:d7:af:9e:3a:f4:43:ef:
84:65:31:af:cb:16:59:db:74:8b:45:55:b3:6a:cc:
4b:9e:26:59:15:99:7a:65:50:47:6d:c4:5a:05:f3:
41:79:14:f9:67:61:9c:0a:96:1f:21:13:88:68:1b:
56:d2:eb:4e:6c:3c:7f:5f:95:28:4b:6f:d5:b0:00:
5f:0c:1f:27:76:14:d3:a5:a8:f1:29:d6:20:f1:37:
ed:5e:12:e1:9c:70:b3:50:a0:4e:01:87:c0:72:1c:
76:54:bb:1b:c5:16:fc:9f:83:81:95:2c:a8:06:85:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:51:C7:17:E7:DE:CC:FE:6A:4A:0A:86:30:21:AC:A8:68:AB:DC:7C
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/rFHHF-fezP5qSgqGMCGsqGir3Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.229.0-194.39.230.255
Signature Algorithm: sha256WithRSAEncryption
4c:c1:e6:38:3d:32:54:78:1d:5f:a3:37:45:0b:ac:4b:e9:9a:
bf:57:4d:bd:7c:b1:e5:1e:61:1e:1c:ab:61:89:b8:25:1a:f5:
61:dd:f0:95:0f:36:f6:63:e1:66:62:de:02:01:59:26:42:22:
e4:e4:b7:e8:b5:7d:b7:9f:14:19:2d:45:c0:a3:96:41:f2:72:
34:3c:9d:0b:c8:d5:01:0c:d5:8c:3e:d5:01:aa:27:91:93:9e:
ab:40:c0:d8:9b:7f:e5:1e:e3:68:d2:86:1b:0c:df:60:dd:11:
12:93:77:b4:d1:de:87:da:93:85:e0:42:d5:43:c7:32:c5:cc:
b4:99:53:43:cf:5b:1d:d1:8e:53:8d:d1:1c:00:9a:cb:5b:84:
96:17:99:fe:75:ec:d8:32:1b:12:01:a6:27:76:5c:90:65:f2:
7f:bd:19:de:26:07:ce:98:07:ba:5c:b2:98:dc:e5:2f:70:f9:
b3:40:98:dc:93:f4:d5:01:38:a3:79:c5:80:21:2b:de:bb:a5:
0d:ad:4a:b9:3a:79:a7:58:90:84:b0:57:e7:62:6e:eb:02:21:
da:ff:b1:94:d6:7e:d3:0c:2b:c6:91:20:9f:09:78:4b:9c:fd:
ec:01:b7:b8:de:ee:18:f8:fa:38:f8:80:24:c3:39:eb:5b:f3:
9d:3d:e3:a2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVr3Jpkv5UbEEJhqEkNtzYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5
Y2UzM2EwHhcNMjMwMTAxMDU0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzUxYzcxN2U3ZGVjY2ZlNmE0YTBhODYzMDIxYWNhODY4YWJkYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT3hapqE7bgtk/kcvPsysusjEAEq
u9g/6CsQCt0d2r22bVvXUqgHGsK8/S3wc1KH9tnobs4da7kkazFO1h2Sz9b3Rga5
q+F6FwasdQY1/IHV5DD87rzqAoCh0esk7qPUW5lrTNViSRrQMFhwLNFQnzZKlQyd
u9dIHQRM66nRc9rYl+D86+ksYGpnuvepKNevnjr0Q++EZTGvyxZZ23SLRVWzasxL
niZZFZl6ZVBHbcRaBfNBeRT5Z2GcCpYfIROIaBtW0utObDx/X5UoS2/VsABfDB8n
dhTTpajxKdYg8TftXhLhnHCzUKBOAYfAchx2VLsbxRb8n4OBlSyoBoXN9QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKxRxxfn3sz+akoKhjAhrKhoq9x8MB8GA1UdIwQY
MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt
NjJiZTUzNDI1Njc2LzEvckZISEYtZmV6UDVxU2dxR01DR3NxR2lyM0h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2
LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCJ+UD
BADCJ+YwDQYJKoZIhvcNAQELBQADggEBAEzB5jg9MlR4HV+jN0ULrEvpmr9XTb18
seUeYR4cq2GJuCUa9WHd8JUPNvZj4WZi3gIBWSZCIuTkt+i1fbefFBktRcCjlkHy
cjQ8nQvI1QEM1Yw+1QGqJ5GTnqtAwNibf+Ue42jShhsM32DdERKTd7TR3ofak4Xg
QtVDxzLFzLSZU0PPWx3RjlON0RwAmstbhJYXmf517NgyGxIBpid2XJBl8n+9Gd4m
B86YB7pcspjc5S9w+bNAmNyT9NUBOKN5xYAhK967pQ2tSrk6eadYkISwV+dibusC
Idr/sZTWftMMK8aRIJ8JeEuc/ewBt7je7hj4+jj4gCTDOetb850946I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:13 2024 by rpki-client on console-ams.rpki-client.org