Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/7I9eBVOv4536cu9UEeMroLYNUMs.roa
File: 7I9eBVOv4536cu9UEeMroLYNUMs.roa (raw, json)
Hash identifier: 14n3GHl7kPPgSv5/CJi9d+wPY2Vj2rElvbYJOy9yn9g=
Subject key identifier: EC:8F:5E:05:53:AF:E3:9D:FA:72:EF:54:11:E3:2B:A0:B6:0D:50:CB
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 0185F3F3EF5D679ECFC161E3B0E9393FFB51
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/7I9eBVOv4536cu9UEeMroLYNUMs.roa
Signing time: Fri 27 Jan 2023 15:58:48 +0000
ROA not before: Fri 27 Jan 2023 15:58:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212390
IP address blocks: 194.50.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:f3:ef:5d:67:9e:cf:c1:61:e3:b0:e9:39:3f:fb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jan 27 15:58:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec8f5e0553afe39dfa72ef5411e32ba0b60d50cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:22:a3:d9:f5:4f:d8:9c:40:fb:78:c3:a6:
61:a6:f2:fa:a7:9f:1f:ad:a5:b2:f7:ce:4f:af:37:
2e:cc:71:62:19:db:b0:c8:12:ac:a3:95:88:a7:ae:
b5:32:48:71:c3:da:63:24:37:87:c8:2f:27:2f:68:
22:83:3e:50:d9:2c:d6:20:f6:3c:e9:51:58:07:47:
61:2b:4d:ef:af:81:19:b5:b0:c3:d0:d1:51:56:63:
33:28:b4:0a:5c:7d:77:c5:ed:6b:73:b7:5b:34:e3:
e2:3f:14:e9:dc:5a:ae:f9:aa:da:5c:16:18:e9:da:
72:b5:7b:2c:98:03:3d:36:e0:c0:df:3d:15:07:5b:
de:46:44:d2:42:b5:26:80:cf:18:97:2b:f2:26:21:
31:be:c3:72:e1:e0:22:e9:62:98:0d:c0:ae:5b:d8:
54:de:f3:ab:f8:3d:02:2b:97:75:e3:67:e2:3a:5e:
6b:05:0a:45:e0:60:50:35:60:04:81:a7:14:8a:a0:
3c:70:4a:4e:33:fb:41:2e:83:24:0e:bd:b0:d7:06:
e1:90:7c:64:1a:14:25:90:b8:3d:1b:7e:09:96:91:
1b:fe:d4:f7:55:b7:ab:36:0a:18:dc:bb:2e:8c:c2:
8a:9d:2f:04:3d:5b:f3:22:15:e4:0e:48:11:d2:be:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8F:5E:05:53:AF:E3:9D:FA:72:EF:54:11:E3:2B:A0:B6:0D:50:CB
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/7I9eBVOv4536cu9UEeMroLYNUMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.187.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f1:d0:76:f0:24:30:1a:f7:0e:f8:99:2f:18:32:94:07:6e:
44:2a:01:55:07:6d:71:7d:33:0d:84:b5:2f:a7:ad:18:67:4c:
55:d8:82:8f:62:d2:d1:ff:2c:24:18:9c:c8:ee:da:bb:c1:c7:
b3:e0:d1:7d:4b:c8:f0:2f:7e:ac:e8:d2:08:60:b7:94:f7:6a:
e8:74:89:76:cd:f2:88:b7:4d:44:2f:aa:cd:ef:cf:fb:41:f0:
ea:71:de:98:dc:99:f1:b1:4d:59:a4:4a:f6:55:c0:50:fd:03:
aa:b7:f0:dc:53:ed:b9:b5:b7:7d:02:15:68:c3:29:04:93:f2:
5a:83:0f:70:13:47:77:f3:a9:ab:58:f0:f8:4d:5d:b0:66:cd:
45:e6:c6:a5:7c:e8:1d:fb:29:dd:ab:24:ed:eb:ea:66:f2:83:
8a:e8:95:f7:2b:c4:21:48:56:47:0c:81:f8:11:9a:04:3c:f1:
d8:d6:87:67:41:a1:7f:9d:c7:78:50:e7:2b:47:6d:86:58:cb:
5b:96:02:da:03:c7:a8:1d:b5:6a:70:90:6e:ba:43:4a:aa:64:
c7:a1:c5:f6:6b:34:1d:cf:82:49:99:37:a2:0b:ad:54:aa:f3:
8e:b1:f9:75:bb:ed:1e:15:18:af:f5:c1:9a:46:7a:46:20:90:
e5:04:5d:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXz8+9dZ57PwWHjsOk5P/tRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz
M2IzMDIwHhcNMjMwMTI3MTU1ODQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzhmNWUwNTUzYWZlMzlkZmE3MmVmNTQxMWUzMmJhMGI2MGQ1MGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Aio9n1T9icQPt4w6ZhpvL6p58f
raWy985PrzcuzHFiGduwyBKso5WIp661Mkhxw9pjJDeHyC8nL2gigz5Q2SzWIPY8
6VFYB0dhK03vr4EZtbDD0NFRVmMzKLQKXH13xe1rc7dbNOPiPxTp3Fqu+araXBYY
6dpytXssmAM9NuDA3z0VB1veRkTSQrUmgM8YlyvyJiExvsNy4eAi6WKYDcCuW9hU
3vOr+D0CK5d142fiOl5rBQpF4GBQNWAEgacUiqA8cEpOM/tBLoMkDr2w1wbhkHxk
GhQlkLg9G34JlpEb/tT3VberNgoY3LsujMKKnS8EPVvzIhXkDkgR0r6BtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOyPXgVTr+Od+nLvVBHjK6C2DVDLMB8GA1UdIwQY
MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct
YjI3ZDg3MzBhMjcwLzEvN0k5ZUJWT3Y0NTM2Y3U5VUVlTXJvTFlOVU1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw
LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjK7MA0G
CSqGSIb3DQEBCwUAA4IBAQC98dB28CQwGvcO+JkvGDKUB25EKgFVB21xfTMNhLUv
p60YZ0xV2IKPYtLR/ywkGJzI7tq7wcez4NF9S8jwL36s6NIIYLeU92rodIl2zfKI
t01EL6rN78/7QfDqcd6Y3JnxsU1ZpEr2VcBQ/QOqt/DcU+25tbd9AhVowykEk/Ja
gw9wE0d386mrWPD4TV2wZs1F5salfOgd+yndqyTt6+pm8oOK6JX3K8QhSFZHDIH4
EZoEPPHY1odnQaF/ncd4UOcrR22GWMtblgLaA8eoHbVqcJBuukNKqmTHocX2azQd
z4JJmTeiC61UqvOOsfl1u+0eFRiv9cGaRnpGIJDlBF1L
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:40 2024 by rpki-client on console-ams.rpki-client.org