Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/pXUYZSSCInH5kEdNg5Ke5sqwyR8.roa
File: pXUYZSSCInH5kEdNg5Ke5sqwyR8.roa (raw, json)
Hash identifier: y9H7AGW3XK7QIQ3emvbIdjnJKIk39DD1ZrNbfDCI98Y=
Subject key identifier: A5:75:18:65:24:82:22:71:F9:90:47:4D:83:92:9E:E6:CA:B0:C9:1F
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 01856CAEF462DF19231B923B9B8C61A636F0
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/pXUYZSSCInH5kEdNg5Ke5sqwyR8.roa
Signing time: Sun 01 Jan 2023 09:34:43 +0000
ROA not before: Sun 01 Jan 2023 09:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.248.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 May 2023 14:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:f4:62:df:19:23:1b:92:3b:9b:8c:61:a6:36:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Jan 1 09:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a575186524822271f990474d83929ee6cab0c91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:76:29:81:26:0f:bd:2e:23:ac:a8:0e:7b:
ac:e1:a3:d0:55:51:58:e9:09:f0:00:80:f5:49:db:
03:fe:7a:f1:3f:a9:5a:b3:9b:8a:80:90:4d:68:5e:
10:de:0d:57:25:b5:35:a3:b9:8a:f7:ff:97:ae:5b:
a5:53:c8:b5:f5:1e:57:b5:37:b4:9b:6b:74:e8:5a:
b5:6e:32:25:f8:9a:b1:41:e4:d6:0d:a2:ff:04:fd:
d9:ac:02:50:68:67:34:5a:9d:2f:2d:d8:87:ef:81:
b8:80:d5:6d:d6:98:83:36:07:58:60:e5:2a:1c:25:
cd:5a:76:36:a5:8b:ea:fd:f6:0d:24:34:47:4a:8a:
c6:58:c4:9b:ae:e8:5e:a8:1f:21:bc:2f:59:08:79:
16:51:30:d7:95:61:1b:ea:67:c5:f7:87:c3:af:7a:
23:80:72:6b:ba:00:33:ae:19:f9:36:04:7f:63:32:
64:db:28:36:be:4a:f3:66:ab:86:86:c1:f9:9d:c7:
a2:e2:fc:73:29:52:94:41:35:89:1e:9b:17:0b:0c:
48:61:d2:e9:38:57:39:dc:42:a1:f5:3e:2f:14:32:
b9:98:2d:89:bb:c5:9e:6c:b6:d1:97:a2:f6:41:9e:
b4:e3:c0:ca:4b:a9:c0:20:76:2f:31:20:30:4e:ae:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:75:18:65:24:82:22:71:F9:90:47:4D:83:92:9E:E6:CA:B0:C9:1F
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/pXUYZSSCInH5kEdNg5Ke5sqwyR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.50.0/24
Signature Algorithm: sha256WithRSAEncryption
09:71:25:03:bc:cb:a3:84:e0:5d:ef:5e:64:5d:30:7d:5c:cd:
00:47:ab:af:33:cd:85:7d:1b:c8:a5:d6:83:fe:b2:4d:e0:ee:
ec:4c:c1:9f:a0:e1:50:1c:4e:96:61:47:13:7c:d9:0e:02:9d:
88:28:9a:f3:d3:73:4d:63:3e:a2:bc:7c:de:ef:c2:e1:2d:0f:
f5:06:be:49:8e:82:49:b0:9c:fe:9f:33:82:90:ce:82:52:f2:
74:a7:f6:f9:b8:96:df:5f:7b:b2:0a:bc:a7:e2:6e:18:70:05:
70:61:99:95:09:25:f8:46:d1:b3:8f:72:86:f8:ef:09:05:c4:
7a:b8:34:5e:c4:64:a2:ed:fe:5b:1c:0a:68:df:4f:a8:03:1c:
9e:93:8e:fd:b3:7f:4d:cd:a2:6e:28:a1:47:c2:41:2d:be:01:
c2:23:f6:99:f7:37:0b:7b:4d:1d:03:d3:8b:69:68:20:e7:e3:
2f:41:c2:84:39:32:00:c1:f6:45:16:5e:f8:71:02:60:63:7e:
3f:db:84:89:31:50:f6:c4:0d:fe:43:f4:78:66:67:e3:92:cc:
11:66:8e:64:45:aa:7d:46:cf:86:5b:6a:b8:de:7f:91:3c:54:
78:50:d4:2a:4f:35:4e:f9:ed:77:56:4b:84:2d:c5:9c:b9:f0:
d7:b2:1e:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsrvRi3xkjG5I7m4xhpjbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj
MWFlM2QwHhcNMjMwMTAxMDkzNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTc1MTg2NTI0ODIyMjcxZjk5MDQ3NGQ4MzkyOWVlNmNhYjBjOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWJ2KYEmD70uI6yoDnus4aPQVVFY
6QnwAID1SdsD/nrxP6las5uKgJBNaF4Q3g1XJbU1o7mK9/+XrlulU8i19R5XtTe0
m2t06Fq1bjIl+JqxQeTWDaL/BP3ZrAJQaGc0Wp0vLdiH74G4gNVt1piDNgdYYOUq
HCXNWnY2pYvq/fYNJDRHSorGWMSbruheqB8hvC9ZCHkWUTDXlWEb6mfF94fDr3oj
gHJrugAzrhn5NgR/YzJk2yg2vkrzZquGhsH5ncei4vxzKVKUQTWJHpsXCwxIYdLp
OFc53EKh9T4vFDK5mC2Ju8WebLbRl6L2QZ6048DKS6nAIHYvMSAwTq5KdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKV1GGUkgiJx+ZBHTYOSnubKsMkfMB8GA1UdIwQY
MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt
NTEzODdkMTYwYmE5LzEvcFhVWVpTU0NJbkg1a0VkTmc1S2U1c3F3eVI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5
LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufgyMA0G
CSqGSIb3DQEBCwUAA4IBAQAJcSUDvMujhOBd715kXTB9XM0AR6uvM82FfRvIpdaD
/rJN4O7sTMGfoOFQHE6WYUcTfNkOAp2IKJrz03NNYz6ivHze78LhLQ/1Br5JjoJJ
sJz+nzOCkM6CUvJ0p/b5uJbfX3uyCryn4m4YcAVwYZmVCSX4RtGzj3KG+O8JBcR6
uDRexGSi7f5bHApo30+oAxyek479s39NzaJuKKFHwkEtvgHCI/aZ9zcLe00dA9OL
aWgg5+MvQcKEOTIAwfZFFl74cQJgY34/24SJMVD2xA3+Q/R4ZmfjkswRZo5kRap9
Rs+GW2q43n+RPFR4UNQqTzVO+e13VkuELcWcufDXsh7R
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:43 2024 by rpki-client on console-fra.rpki-client.org