Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/6zy3zEotV-fMuEfFRA8NawwPTnc.roa
File: 6zy3zEotV-fMuEfFRA8NawwPTnc.roa (raw, json)
Hash identifier: eC+UBzAdvJ4SXS1w8IaIUNoHEB7fYwPBktqEzUZ0gIs=
Subject key identifier: EB:3C:B7:CC:4A:2D:57:E7:CC:B8:47:C5:44:0F:0D:6B:0C:0F:4E:77
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 018B1A73C19746C1EFC6A77121277351ABC5
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/6zy3zEotV-fMuEfFRA8NawwPTnc.roa
Signing time: Tue 10 Oct 2023 16:37:55 +0000
ROA not before: Tue 10 Oct 2023 16:37:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48314
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1a:73:c1:97:46:c1:ef:c6:a7:71:21:27:73:51:ab:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Oct 10 16:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb3cb7cc4a2d57e7ccb847c5440f0d6b0c0f4e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:39:10:10:61:b3:66:de:24:c1:25:7d:7d:
83:4f:32:bf:ee:36:6f:82:37:73:a7:e7:70:51:86:
93:50:8c:9a:3a:84:b2:f6:6f:eb:48:ad:34:17:ec:
3a:66:5e:a9:43:3d:98:c8:06:19:b7:b8:eb:62:73:
df:1c:24:16:4f:6d:95:13:2f:63:00:21:c4:db:b1:
99:ee:b9:ee:7e:f5:ff:e1:8c:50:fc:46:08:81:ba:
8e:10:9f:18:38:22:59:d5:fd:5a:b9:47:2c:2f:b8:
dc:cb:18:d6:b0:79:89:cc:a3:54:ab:54:27:1e:d8:
8b:52:f3:46:90:e1:6e:33:83:7b:da:59:c8:08:c7:
48:69:0b:1f:e5:21:ab:f9:a7:e6:4d:4a:5c:ab:cb:
84:c0:7b:a2:ba:e5:d2:e6:27:ab:f3:76:55:4b:69:
67:fa:d1:95:9d:95:51:35:ae:4e:fe:0f:6f:99:25:
16:66:0f:02:cb:e9:7a:b1:18:dd:c3:20:de:7e:93:
9a:5a:8d:fc:20:7d:2b:10:3a:2b:c6:cd:0a:57:7b:
9f:7c:0e:89:7c:15:a3:75:d6:0f:77:f8:88:f3:06:
2a:29:8e:44:71:9d:fe:94:c0:93:65:aa:1b:78:d2:
17:16:7b:e3:18:87:a1:04:8e:57:ed:47:52:7a:1e:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3C:B7:CC:4A:2D:57:E7:CC:B8:47:C5:44:0F:0D:6B:0C:0F:4E:77
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/6zy3zEotV-fMuEfFRA8NawwPTnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
22:51:60:38:fa:84:c7:33:98:17:45:17:77:20:25:8a:6d:f0:
dc:25:b2:7e:ad:e5:f8:94:6c:ad:c8:7d:75:9f:40:9d:b3:2e:
a1:a3:8a:ff:c4:db:47:8b:55:a0:3d:02:7b:10:8b:b7:85:d1:
a7:82:65:4c:42:e3:bc:e3:23:9c:12:6c:99:25:75:d5:21:cf:
44:8b:dd:7a:25:17:a7:51:47:6f:a1:3b:69:7e:57:4c:1e:33:
06:29:ea:d4:59:b1:16:47:ef:f8:c3:c5:87:3d:80:42:d7:c8:
af:bd:b5:c3:f7:f3:b6:9a:d0:3d:ae:9d:c4:fc:21:d7:13:ba:
10:8f:c8:d5:ff:99:86:b0:53:d3:04:2f:b7:72:bb:83:f4:8f:
b2:17:92:0e:d4:02:55:72:22:5e:9d:b0:aa:fc:35:6a:b5:2e:
c8:64:f9:fa:30:c1:d9:7c:59:a4:91:c6:47:42:61:87:c1:3b:
a7:a6:c9:a2:38:a1:07:4a:56:e2:e5:2b:91:f7:6b:2c:79:6f:
53:6d:2b:ec:07:63:3e:7c:79:9c:c0:cf:48:b5:12:f0:9c:48:
ad:c3:d7:3c:42:ea:dc:e0:b5:4a:bc:6a:97:cb:f8:6b:1e:df:
66:70:3b:8d:dc:49:d8:78:31:ae:cb:91:55:b0:56:4e:a5:9d:
0f:f7:b9:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsac8GXRsHvxqdxISdzUavFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi
ODU3NGUwHhcNMjMxMDEwMTYzNzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjNjYjdjYzRhMmQ1N2U3Y2NiODQ3YzU0NDBmMGQ2YjBjMGY0ZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTs5EBBhs2beJMElfX2DTzK/7jZv
gjdzp+dwUYaTUIyaOoSy9m/rSK00F+w6Zl6pQz2YyAYZt7jrYnPfHCQWT22VEy9j
ACHE27GZ7rnufvX/4YxQ/EYIgbqOEJ8YOCJZ1f1auUcsL7jcyxjWsHmJzKNUq1Qn
HtiLUvNGkOFuM4N72lnICMdIaQsf5SGr+afmTUpcq8uEwHuiuuXS5ier83ZVS2ln
+tGVnZVRNa5O/g9vmSUWZg8Cy+l6sRjdwyDefpOaWo38IH0rEDorxs0KV3uffA6J
fBWjddYPd/iI8wYqKY5EcZ3+lMCTZaobeNIXFnvjGIehBI5X7UdSeh6pJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOs8t8xKLVfnzLhHxUQPDWsMD053MB8GA1UdIwQY
MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt
NGUyMjM5MTdiODYwLzEvNnp5M3pFb3RWLWZNdUVmRlJBOE5hd3dQVG5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw
LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjIAMA0G
CSqGSIb3DQEBCwUAA4IBAQAiUWA4+oTHM5gXRRd3ICWKbfDcJbJ+reX4lGytyH11
n0Cdsy6ho4r/xNtHi1WgPQJ7EIu3hdGngmVMQuO84yOcEmyZJXXVIc9Ei916JRen
UUdvoTtpfldMHjMGKerUWbEWR+/4w8WHPYBC18ivvbXD9/O2mtA9rp3E/CHXE7oQ
j8jV/5mGsFPTBC+3cruD9I+yF5IO1AJVciJenbCq/DVqtS7IZPn6MMHZfFmkkcZH
QmGHwTunpsmiOKEHSlbi5SuR92sseW9TbSvsB2M+fHmcwM9ItRLwnEitw9c8Qurc
4LVKvGqXy/hrHt9mcDuN3EnYeDGuy5FVsFZOpZ0P97nX
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:49 2024 by rpki-client on console-ams.rpki-client.org