Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/Pley5fbz00fKMzcbHhiv_bgfuss.roa
File: Pley5fbz00fKMzcbHhiv_bgfuss.roa (raw, json)
Hash identifier: A4GcWYkQvfF43p8LU7AckUyslMPgPKQWdPKLC3uI79k=
Subject key identifier: 3E:57:B2:E5:F6:F3:D3:47:CA:33:37:1B:1E:18:AF:FD:B8:1F:BA:CB
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 0187EC4E458912EC2239571AA4A3F8390312
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/Pley5fbz00fKMzcbHhiv_bgfuss.roa
Signing time: Fri 05 May 2023 14:26:05 +0000
ROA not before: Fri 05 May 2023 14:26:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208011
IP address blocks: 194.156.190.0/23 maxlen: 24
194.156.198.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:4e:45:89:12:ec:22:39:57:1a:a4:a3:f8:39:03:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: May 5 14:26:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e57b2e5f6f3d347ca33371b1e18affdb81fbacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:e6:11:82:54:99:be:10:10:d8:7d:ca:65:
28:9e:25:87:56:c2:39:ca:fe:e9:85:94:20:ce:4b:
b5:a9:b0:8a:ba:3b:ed:5f:f1:f6:61:f0:28:3d:82:
09:b2:32:dc:38:85:6b:17:d4:d6:9e:cd:0e:ea:cd:
eb:7e:43:ba:51:1e:69:a9:44:79:0f:e7:fd:fd:e4:
2d:e0:f0:48:af:38:b6:ed:ed:ee:87:18:f0:a6:7b:
87:46:6b:8b:14:a5:0e:18:3a:1f:c6:5e:6b:2a:42:
59:ce:9f:b5:73:60:0f:19:76:28:6c:8d:06:2a:f8:
b0:e2:67:1a:e4:96:63:37:de:01:52:ce:d8:b7:ba:
46:72:b2:8a:c3:4f:87:f2:72:68:b6:83:74:51:08:
79:d0:be:ad:9a:1b:42:1a:12:f0:f0:76:16:68:20:
de:ef:40:91:96:ec:71:6e:b3:02:14:61:67:7c:7b:
d0:5e:26:d5:44:b7:87:ab:fd:d9:22:78:2f:f6:33:
c8:a5:55:12:d0:51:48:a0:9a:cc:25:88:03:fc:3e:
b1:ad:37:70:8b:aa:e0:0b:7f:9a:6d:47:3e:7f:6d:
5e:33:0b:1b:b6:23:3d:a4:e6:10:9a:23:35:06:cb:
cc:e8:8e:e7:81:f9:89:c1:78:47:0e:86:1a:68:d6:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:57:B2:E5:F6:F3:D3:47:CA:33:37:1B:1E:18:AF:FD:B8:1F:BA:CB
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/Pley5fbz00fKMzcbHhiv_bgfuss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.190.0/23
194.156.198.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:ac:09:b8:5e:20:df:50:4f:a4:a8:60:ed:e0:b7:04:4a:93:
d6:76:0e:e9:09:9a:8b:31:e5:00:70:88:64:66:f3:16:2b:2b:
7b:31:78:19:9f:56:c0:3c:76:38:91:d0:ef:8a:0e:50:e8:c2:
86:7e:21:0b:9b:70:7f:00:6b:5a:fd:4c:d8:ac:81:75:08:b0:
4c:3a:aa:de:a9:2a:74:7f:e2:29:b4:38:65:9a:96:f8:cb:be:
94:0f:98:e3:52:a4:61:7f:dd:cf:85:0a:a5:9a:9a:4f:9e:20:
2c:3f:0d:f2:20:b4:67:3f:7a:b7:f8:35:ad:be:ff:26:b1:aa:
c4:b6:46:65:66:3c:69:36:ef:ca:85:b9:84:67:90:3a:66:c8:
eb:44:97:93:ac:61:4f:70:8e:b9:13:03:4a:4c:64:0a:a5:69:
23:4e:9a:b7:14:c4:61:64:19:11:e0:3c:f9:4b:8b:d6:ff:45:
20:83:15:b3:38:99:b2:c4:8d:4f:a8:3f:98:11:31:bb:9e:19:
ff:a3:ea:90:0e:1a:05:1c:6b:f8:d8:f5:ea:7e:72:ac:92:75:
d9:3d:a2:92:8f:23:f6:bc:83:6b:71:08:d1:b7:1c:8e:a5:fe:
ce:d6:a0:e3:a2:f0:68:b1:c5:9f:e6:1d:c1:e5:ba:9c:eb:97:
50:60:fc:7a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYfsTkWJEuwiOVcapKP4OQMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjZjOTFhZjBhYjI2NjhhMzYwMWIyZDk1N2RjNGNlMDAy
ZDU5ODYwHhcNMjMwNTA1MTQyNjA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTU3YjJlNWY2ZjNkMzQ3Y2EzMzM3MWIxZTE4YWZmZGI4MWZiYWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNHmEYJUmb4QENh9ymUoniWHVsI5
yv7phZQgzku1qbCKujvtX/H2YfAoPYIJsjLcOIVrF9TWns0O6s3rfkO6UR5pqUR5
D+f9/eQt4PBIrzi27e3uhxjwpnuHRmuLFKUOGDofxl5rKkJZzp+1c2APGXYobI0G
Kviw4mca5JZjN94BUs7Yt7pGcrKKw0+H8nJotoN0UQh50L6tmhtCGhLw8HYWaCDe
70CRluxxbrMCFGFnfHvQXibVRLeHq/3ZIngv9jPIpVUS0FFIoJrMJYgD/D6xrTdw
i6rgC3+abUc+f21eMwsbtiM9pOYQmiM1BsvM6I7ngfmJwXhHDoYaaNa2gwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD5XsuX289NHyjM3Gx4Yr/24H7rLMB8GA1UdIwQY
MBaAFM8myRrwqyZoo2AbLZV9xM4ALVmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTkt
NmJjODM5NDY1NmI3LzEvUGxleTVmYnowMGZLTXpjYkhoaXZfYmdmdXNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTktNmJjODM5NDY1NmI3
LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwpy+AwQB
wpzGMA0GCSqGSIb3DQEBCwUAA4IBAQBdrAm4XiDfUE+kqGDt4LcESpPWdg7pCZqL
MeUAcIhkZvMWKyt7MXgZn1bAPHY4kdDvig5Q6MKGfiELm3B/AGta/UzYrIF1CLBM
OqreqSp0f+IptDhlmpb4y76UD5jjUqRhf93PhQqlmppPniAsPw3yILRnP3q3+DWt
vv8msarEtkZlZjxpNu/KhbmEZ5A6ZsjrRJeTrGFPcI65EwNKTGQKpWkjTpq3FMRh
ZBkR4Dz5S4vW/0UggxWzOJmyxI1PqD+YETG7nhn/o+qQDhoFHGv42PXqfnKsknXZ
PaKSjyP2vINrcQjRtxyOpf7O1qDjovBoscWf5h3B5bqc65dQYPx6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:06 2024 by rpki-client on console-ams.rpki-client.org