Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/4530a1-3fd0-4d04-bd95-a4647ad97ea3/1/UO9PbHTda6t9WFbf3j71MWmMJSk.roa
File: UO9PbHTda6t9WFbf3j71MWmMJSk.roa (raw, json)
Hash identifier: syzg6gRnJDIEzWHGsWAmNnlAEo69FRhuHoSIROlVjtg=
Subject key identifier: 50:EF:4F:6C:74:DD:6B:AB:7D:58:56:DF:DE:3E:F5:31:69:8C:25:29
Certificate issuer: /CN=aaabc8e1e31f149029f9a255b1a446c92c922f5e
Certificate serial: 018570796B64FA4718392DACD6729E8B6162
Authority key identifier: AA:AB:C8:E1:E3:1F:14:90:29:F9:A2:55:B1:A4:46:C9:2C:92:2F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqvI4eMfFJAp-aJVsaRGySySL14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/4530a1-3fd0-4d04-bd95-a4647ad97ea3/1/UO9PbHTda6t9WFbf3j71MWmMJSk.roa
Signing time: Mon 02 Jan 2023 03:14:43 +0000
ROA not before: Mon 02 Jan 2023 03:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 194.104.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:6b:64:fa:47:18:39:2d:ac:d6:72:9e:8b:61:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaabc8e1e31f149029f9a255b1a446c92c922f5e
Validity
Not Before: Jan 2 03:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50ef4f6c74dd6bab7d5856dfde3ef531698c2529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:e8:a8:02:0c:10:1f:b4:51:e9:aa:72:f9:
d6:b7:ed:e3:49:97:2a:8f:3a:47:42:40:98:c8:b4:
c9:db:fe:99:6b:90:46:06:f9:75:fe:5f:1b:4e:96:
57:9e:00:a9:e0:5d:cf:42:ec:2d:89:56:19:e3:85:
fd:27:4a:e5:21:f6:2d:a6:ca:74:bf:ee:df:2b:bc:
ba:8b:d0:7e:ba:f8:c9:c1:28:28:1f:23:3e:ad:e3:
13:d2:03:15:d3:f8:18:48:fa:40:33:33:69:9b:b4:
70:10:30:07:cb:a5:07:4e:33:67:17:4d:39:03:b0:
ae:13:46:f0:3f:9a:a9:59:01:84:73:cf:07:83:f4:
9c:33:5b:25:0b:c2:c1:f6:91:1a:9b:71:2b:ca:d2:
a4:03:15:63:d2:ef:a2:25:1d:fd:0c:f6:16:0e:80:
b1:4d:8e:fb:ad:a4:39:9b:b7:38:ee:76:67:c3:6f:
8e:14:19:fd:ef:3d:eb:f6:d2:0c:44:26:e1:82:84:
90:2c:f4:dd:2b:ab:da:d8:ba:d3:6e:5d:75:0e:33:
1c:14:57:3e:02:ae:a2:84:3c:5d:6a:34:11:b0:80:
3b:8c:7a:0c:d8:01:5c:28:d0:83:8a:92:51:ae:85:
52:e7:a3:44:1f:17:d4:1b:52:4d:db:03:0d:bb:06:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EF:4F:6C:74:DD:6B:AB:7D:58:56:DF:DE:3E:F5:31:69:8C:25:29
X509v3 Authority Key Identifier:
keyid:AA:AB:C8:E1:E3:1F:14:90:29:F9:A2:55:B1:A4:46:C9:2C:92:2F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqvI4eMfFJAp-aJVsaRGySySL14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4530a1-3fd0-4d04-bd95-a4647ad97ea3/1/UO9PbHTda6t9WFbf3j71MWmMJSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4530a1-3fd0-4d04-bd95-a4647ad97ea3/1/qqvI4eMfFJAp-aJVsaRGySySL14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.234.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3d:c5:41:a5:fe:5b:46:f3:b0:2f:ae:52:9e:7a:73:84:fa:
d2:75:23:71:b3:03:a7:81:74:6d:fb:88:af:81:30:ff:1e:0f:
6a:66:7a:5c:c7:1c:2a:0b:64:e4:b0:39:e8:f0:9f:08:c2:4c:
a7:a0:fb:a4:55:c5:6c:c9:98:1f:d4:06:6b:96:54:b0:0e:99:
ed:bc:b2:75:fd:e2:0b:9a:c0:5e:ca:5b:40:ba:e3:94:05:3f:
5d:27:32:8b:95:0a:1e:d7:02:d2:7c:78:a3:00:78:8d:f4:94:
60:94:65:95:89:a1:d3:e0:cc:b8:a1:93:33:61:55:71:e9:ee:
48:59:cf:8e:d9:7d:56:1a:7c:76:18:a1:89:ba:13:56:64:da:
30:d9:ce:a1:89:ca:41:d0:2c:21:b6:b2:07:46:1d:f4:f9:3a:
f8:8d:de:85:3e:f6:88:37:fe:77:31:eb:71:c0:b3:d0:0d:dc:
ec:15:c2:72:87:90:55:04:d2:87:df:9e:82:d0:3a:49:7b:9f:
72:ca:e0:55:7a:85:ff:49:34:4f:9b:72:b7:d2:df:c4:46:38:
c1:24:be:2d:2e:1e:6d:c1:d0:15:8a:ab:fc:86:ad:ef:24:2d:
0d:1f:7e:73:5b:13:45:7f:e9:fe:b0:d2:0c:2e:db:e5:04:37:
99:61:d5:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVweWtk+kcYOS2s1nKei2FiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYWJjOGUxZTMxZjE0OTAyOWY5YTI1NWIxYTQ0NmM5MmM5
MjJmNWUwHhcNMjMwMTAyMDMxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGVmNGY2Yzc0ZGQ2YmFiN2Q1ODU2ZGZkZTNlZjUzMTY5OGMyNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjHoqAIMEB+0UemqcvnWt+3jSZcq
jzpHQkCYyLTJ2/6Za5BGBvl1/l8bTpZXngCp4F3PQuwtiVYZ44X9J0rlIfYtpsp0
v+7fK7y6i9B+uvjJwSgoHyM+reMT0gMV0/gYSPpAMzNpm7RwEDAHy6UHTjNnF005
A7CuE0bwP5qpWQGEc88Hg/ScM1slC8LB9pEam3ErytKkAxVj0u+iJR39DPYWDoCx
TY77raQ5m7c47nZnw2+OFBn97z3r9tIMRCbhgoSQLPTdK6va2LrTbl11DjMcFFc+
Aq6ihDxdajQRsIA7jHoM2AFcKNCDipJRroVS56NEHxfUG1JN2wMNuwa54wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFDvT2x03WurfVhW394+9TFpjCUpMB8GA1UdIwQY
MBaAFKqryOHjHxSQKfmiVbGkRskski9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXF2STRlTWZGSkFwLWFKVnNhUkd5U3lTTDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80NTMwYTEtM2ZkMC00ZDA0LWJkOTUt
YTQ2NDdhZDk3ZWEzLzEvVU85UGJIVGRhNnQ5V0ZiZjNqNzFNV21NSlNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS80NTMwYTEtM2ZkMC00ZDA0LWJkOTUtYTQ2NDdhZDk3ZWEz
LzEvcXF2STRlTWZGSkFwLWFKVnNhUkd5U3lTTDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmjqMA0G
CSqGSIb3DQEBCwUAA4IBAQAnPcVBpf5bRvOwL65SnnpzhPrSdSNxswOngXRt+4iv
gTD/Hg9qZnpcxxwqC2TksDno8J8IwkynoPukVcVsyZgf1AZrllSwDpntvLJ1/eIL
msBeyltAuuOUBT9dJzKLlQoe1wLSfHijAHiN9JRglGWViaHT4My4oZMzYVVx6e5I
Wc+O2X1WGnx2GKGJuhNWZNow2c6hicpB0CwhtrIHRh30+Tr4jd6FPvaIN/53Metx
wLPQDdzsFcJyh5BVBNKH356C0DpJe59yyuBVeoX/STRPm3K30t/ERjjBJL4tLh5t
wdAViqv8hq3vJC0NH35zWxNFf+n+sNIMLtvlBDeZYdUV
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:10 2023 by rpki-client on console-fra.rpki-client.org