Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/p9k6W5He--3VvGGlUYY0gsu_b5A.roa
File: p9k6W5He--3VvGGlUYY0gsu_b5A.roa (raw, json)
Hash identifier: 4J6WKZ5i6hN1IGTPDSXcjNi/DiZj7kIFjN6lsPi82x4=
Subject key identifier: A7:D9:3A:5B:91:DE:FB:ED:D5:BC:61:A5:51:86:34:82:CB:BF:6F:90
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 0187BE9B4CCD18E1BD8AA8FF16FB6801C56E
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/p9k6W5He--3VvGGlUYY0gsu_b5A.roa
Signing time: Wed 26 Apr 2023 17:27:41 +0000
ROA not before: Wed 26 Apr 2023 17:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 194.31.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:9b:4c:cd:18:e1:bd:8a:a8:ff:16:fb:68:01:c5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Apr 26 17:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d93a5b91defbedd5bc61a551863482cbbf6f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:6f:8a:4f:c6:c1:77:c1:74:5e:e9:ee:a2:
72:1f:2a:72:29:68:72:74:4b:35:c0:12:91:bc:c1:
d6:1c:31:ca:9c:f3:4d:11:b8:36:95:47:4f:df:7e:
4c:3f:ae:77:88:ea:05:b8:6b:16:d2:0e:1a:ac:f9:
b4:1b:63:2e:38:86:78:39:7d:33:5c:75:f8:da:be:
a3:74:83:0b:cc:10:25:78:77:e6:df:11:2c:04:63:
f4:bb:53:f0:65:5d:5e:1e:df:38:e8:ae:bc:1c:82:
d4:fb:4a:dd:72:bd:d1:a5:7d:4d:85:c2:ec:c2:0b:
ae:4a:0b:5f:d4:d6:c2:ff:e5:75:1d:2a:3c:b2:95:
99:06:81:31:01:0a:32:f8:1f:72:48:17:85:ee:8e:
ad:54:19:0e:f1:90:9f:f6:0f:c5:97:05:60:0e:4d:
cb:a1:33:7b:f7:a9:58:16:d9:37:32:f5:f1:6c:ac:
f0:b5:92:09:7b:dd:94:06:a1:e1:0f:f1:70:3f:7a:
a9:ff:c2:79:49:79:3a:8c:80:76:e0:27:4f:7a:31:
80:cd:7a:88:b2:94:a7:26:8a:f0:0b:bd:46:2b:a4:
30:d0:1b:7a:7a:c2:b5:13:bd:9f:4f:ac:2e:b5:03:
08:02:9e:d3:7a:1a:e3:ad:82:c2:5a:be:74:ef:85:
38:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:3A:5B:91:DE:FB:ED:D5:BC:61:A5:51:86:34:82:CB:BF:6F:90
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/p9k6W5He--3VvGGlUYY0gsu_b5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.50.0/24
Signature Algorithm: sha256WithRSAEncryption
69:be:40:65:72:69:44:6c:4e:4c:08:fc:9d:20:e8:5d:d8:f9:
1d:d3:9b:07:98:77:b2:54:e5:30:7f:83:f9:2f:18:76:6b:12:
6c:ce:07:84:b3:7c:f4:fc:9e:04:29:dc:35:38:82:9a:7f:fd:
7e:02:30:ca:63:86:49:70:97:56:d8:1c:11:ce:27:6e:09:97:
dd:33:53:d8:91:47:f5:56:1b:60:34:2f:7e:2a:9b:5a:00:9e:
92:18:76:8a:a2:7b:ba:ed:06:9a:0d:2f:80:b3:7e:7d:29:f2:
4a:f3:77:0c:25:09:23:bd:c9:e0:c9:dd:29:d2:23:0b:2f:20:
48:44:de:0b:14:98:80:ae:67:0c:11:9d:80:ab:66:b9:7d:54:
36:d7:bf:4a:6b:66:ff:ed:17:4a:d2:90:c3:ab:3e:fe:0c:e4:
2a:99:05:59:ef:b7:7b:5b:f3:d9:20:4c:22:b9:9f:86:9f:9d:
03:25:be:a0:58:3b:d6:ea:0f:85:ea:79:6f:92:e2:b9:95:73:
c0:f3:f4:2f:90:98:70:8d:4a:aa:c5:c0:20:61:d4:a1:a6:b6:
3b:a2:3a:79:4c:62:d9:09:b3:a4:27:13:bc:90:4b:eb:cd:f3:
f3:30:cb:52:d1:c6:31:9c:ef:9e:11:95:83:65:3d:03:fb:81:
eb:56:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:15 2024 by rpki-client on console-ams.rpki-client.org