Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/PfoylYCT31vyQPcNmLNJyNWo7Gs.roa
File: PfoylYCT31vyQPcNmLNJyNWo7Gs.roa (raw, json)
Hash identifier: KMQS3HpRVqVcWkF0dDIA6HBsJfOiLFRuA71x50d0rEc=
Subject key identifier: 3D:FA:32:95:80:93:DF:5B:F2:40:F7:0D:98:B3:49:C8:D5:A8:EC:6B
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 018684E12D7F4A894AAC5071BA7DE364A4E8
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/PfoylYCT31vyQPcNmLNJyNWo7Gs.roa
Signing time: Fri 24 Feb 2023 19:23:15 +0000
ROA not before: Fri 24 Feb 2023 19:23:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400529
IP address blocks: 185.63.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Mar 2023 05:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:84:e1:2d:7f:4a:89:4a:ac:50:71:ba:7d:e3:64:a4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Feb 24 19:23:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dfa32958093df5bf240f70d98b349c8d5a8ec6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:c0:8d:b8:f7:23:ca:b1:e5:43:5c:9b:bf:
66:96:19:34:3d:a3:8c:bf:28:ef:c6:61:7f:28:09:
8a:77:fc:27:b1:43:6b:fd:c8:cb:f8:ec:05:9d:f6:
56:d8:44:e7:b4:3e:57:bd:a9:0b:1c:f8:4d:82:75:
48:8a:b4:2d:88:2d:04:34:99:e7:6d:3f:8d:c1:82:
a8:b6:cc:37:f0:7e:e8:a7:a9:17:44:1d:ba:cf:02:
b9:37:74:96:a1:9e:d6:db:cf:7b:45:a5:4f:87:d3:
4f:29:71:83:1c:2d:0f:af:37:a9:e2:90:c7:69:a5:
cb:7a:be:59:ab:5c:c3:49:15:db:ad:42:5c:e5:5f:
d3:fe:51:e3:b6:8f:37:02:c7:b0:ac:74:b0:70:3b:
f6:f0:57:f4:81:ed:76:5d:6d:a2:36:32:ba:b9:47:
11:9c:3f:30:c8:e8:6a:f9:d7:41:8a:44:ee:a9:3f:
f1:ca:b5:b1:d5:35:0a:57:a9:18:0d:d0:e7:2b:6c:
a5:bb:eb:ca:1b:ac:a6:aa:71:43:16:ec:e0:5f:04:
49:6c:9a:41:cb:54:42:6b:3a:7a:e6:bd:14:b7:3e:
95:7e:04:c9:51:54:00:e3:45:67:ef:be:c9:e2:e7:
09:8d:ed:b3:df:c3:46:09:11:35:89:01:d3:20:48:
f3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FA:32:95:80:93:DF:5B:F2:40:F7:0D:98:B3:49:C8:D5:A8:EC:6B
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/PfoylYCT31vyQPcNmLNJyNWo7Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.34.0/24
Signature Algorithm: sha256WithRSAEncryption
46:82:e4:c8:12:4c:f8:54:45:91:54:c4:d5:26:21:61:22:8f:
04:fd:c0:57:57:19:d1:3f:89:67:e6:73:12:17:15:59:62:02:
3b:1c:42:2e:22:e9:e7:a7:57:e5:9a:9e:43:4e:35:6c:e9:ad:
7d:a7:70:8c:99:10:de:f5:72:54:47:50:11:2a:9b:94:a7:20:
27:4b:2e:55:f2:ba:66:66:4a:33:d8:d5:a0:da:4f:b8:18:08:
01:ab:b8:ca:a3:6f:6f:32:22:ff:20:a1:36:4f:cb:69:b7:6e:
51:77:88:90:78:60:85:77:2e:47:88:ec:f7:fd:18:66:6e:e6:
ef:bd:60:2b:9c:5f:ac:d5:f7:65:fe:88:fa:62:db:ed:40:47:
64:aa:a3:f7:03:87:91:c3:e9:ad:06:86:d7:7f:6f:f8:2e:fd:
7c:5c:a7:e2:3f:93:0b:4e:34:5d:f2:38:1a:58:95:64:0e:11:
df:b4:fd:25:35:56:09:12:9b:e6:c5:e6:e0:3b:83:be:1c:ee:
25:50:5f:de:d2:01:3a:65:31:35:24:4a:45:86:c1:48:d4:20:
06:ed:c6:89:48:cb:1d:bc:02:6e:ed:75:28:56:4d:81:db:f1:
fb:1c:6f:1c:a1:2e:9f:03:87:5b:1e:dc:58:4d:b1:97:18:bc:
60:b0:b6:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaE4S1/SolKrFBxun3jZKToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQxMWQzNDZiNjNiYjFlYjIyYTA3YzI2Y2MxMjkxYTJh
MDY4OTUwHhcNMjMwMjI0MTkyMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGZhMzI5NTgwOTNkZjViZjI0MGY3MGQ5OGIzNDljOGQ1YThlYzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF/Ajbj3I8qx5UNcm79mlhk0PaOM
vyjvxmF/KAmKd/wnsUNr/cjL+OwFnfZW2ETntD5XvakLHPhNgnVIirQtiC0ENJnn
bT+NwYKotsw38H7op6kXRB26zwK5N3SWoZ7W2897RaVPh9NPKXGDHC0Przep4pDH
aaXLer5Zq1zDSRXbrUJc5V/T/lHjto83AsewrHSwcDv28Ff0ge12XW2iNjK6uUcR
nD8wyOhq+ddBikTuqT/xyrWx1TUKV6kYDdDnK2ylu+vKG6ymqnFDFuzgXwRJbJpB
y1RCazp65r0Utz6VfgTJUVQA40Vn777J4ucJje2z38NGCRE1iQHTIEjzAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD36MpWAk99b8kD3DZizScjVqOxrMB8GA1UdIwQY
MBaAFLPdEdNGtjux6yKgfCbMEpGioGiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEt
OGJiYzIyNmU2YzQ1LzEvUGZveWxZQ1QzMXZ5UVBjTm1MTkp5TldvN0dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEtOGJiYzIyNmU2YzQ1
LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT8iMA0G
CSqGSIb3DQEBCwUAA4IBAQBGguTIEkz4VEWRVMTVJiFhIo8E/cBXVxnRP4ln5nMS
FxVZYgI7HEIuIunnp1flmp5DTjVs6a19p3CMmRDe9XJUR1ARKpuUpyAnSy5V8rpm
Zkoz2NWg2k+4GAgBq7jKo29vMiL/IKE2T8tpt25Rd4iQeGCFdy5HiOz3/Rhmbubv
vWArnF+s1fdl/oj6YtvtQEdkqqP3A4eRw+mtBobXf2/4Lv18XKfiP5MLTjRd8jga
WJVkDhHftP0lNVYJEpvmxebgO4O+HO4lUF/e0gE6ZTE1JEpFhsFI1CAG7caJSMsd
vAJu7XUoVk2B2/H7HG8coS6fA4dbHtxYTbGXGLxgsLZS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:48 2024 by rpki-client on console-fra.rpki-client.org