Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/6tZKCT1gJ2JESMjpzteXhM2xyyk.roa
File: 6tZKCT1gJ2JESMjpzteXhM2xyyk.roa (raw, json)
Hash identifier: VoSTeEG9eONhLWP4it677uGHQ0inFNOzykXT1PvJ/IA=
Subject key identifier: EA:D6:4A:09:3D:60:27:62:44:48:C8:E9:CE:D7:97:84:CD:B1:CB:29
Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial: 01874EA16CB7CF67FACE628929A1731C89EC
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/6tZKCT1gJ2JESMjpzteXhM2xyyk.roa
Signing time: Tue 04 Apr 2023 23:36:54 +0000
ROA not before: Tue 04 Apr 2023 23:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 147.233.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 14:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4e:a1:6c:b7:cf:67:fa:ce:62:89:29:a1:73:1c:89:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
Validity
Not Before: Apr 4 23:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ead64a093d6027624448c8e9ced79784cdb1cb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:09:66:00:59:44:6c:04:62:46:25:2d:78:d7:
09:7b:42:87:70:00:77:1b:be:c9:09:ab:68:ac:cd:
38:94:22:5e:e1:25:b3:ae:7e:bd:4d:99:2e:66:82:
84:41:38:63:71:60:93:da:68:ef:ec:60:6a:6d:7f:
1e:30:82:f5:d1:2d:90:82:32:38:6c:ea:f1:27:6e:
d3:54:15:42:f2:27:25:d3:5c:6e:01:4d:c1:7d:50:
0e:9a:07:1f:98:83:a7:37:04:37:53:b4:dc:7c:6f:
91:87:f9:72:bb:20:39:a0:55:89:bb:3d:86:ed:4f:
bd:94:cb:b0:9b:d9:ba:84:2f:b7:8b:cf:6d:b4:99:
1b:56:e0:b5:8e:6b:42:0e:51:7f:bd:ba:a8:36:6b:
58:e2:fe:cf:66:59:9e:d7:50:17:4d:0e:57:00:8c:
f7:d3:1f:1b:c0:b9:e1:25:e9:30:ab:f2:18:ef:b4:
64:16:19:18:bc:1b:9c:65:4c:a2:73:af:b0:36:90:
aa:b3:69:e6:6d:c5:31:13:35:6b:a4:ac:33:bf:73:
c7:c1:77:9c:a9:8a:36:61:6c:63:37:c6:b8:b5:da:
cd:e6:f4:10:f0:4d:d8:7b:b1:6d:0b:94:7f:c5:17:
72:79:ab:31:0e:94:b2:f3:9c:0b:76:e3:75:3a:fe:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D6:4A:09:3D:60:27:62:44:48:C8:E9:CE:D7:97:84:CD:B1:CB:29
X509v3 Authority Key Identifier:
keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/6tZKCT1gJ2JESMjpzteXhM2xyyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.233.250.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:1e:ca:8a:a9:87:df:73:8d:ba:7f:11:65:b6:20:b7:89:b9:
a0:96:8a:42:06:b2:5b:b0:c1:e3:d4:e4:7f:14:11:73:19:1c:
d6:e5:74:87:1a:49:d8:33:a2:69:d4:a9:c3:2b:56:c5:b4:dc:
59:cb:ed:4b:f5:dd:8e:b1:c9:00:f0:c7:c3:39:f3:de:18:dd:
9f:02:85:ea:e4:89:29:8d:99:02:2a:75:b0:e1:49:19:87:a2:
fe:9f:09:8c:0a:41:92:f1:be:1e:80:26:b8:d0:06:d6:c6:93:
44:aa:91:6a:ae:75:1e:7c:81:c5:52:4b:c4:e3:44:4f:d1:14:
cb:72:a5:77:28:aa:e1:ba:a9:72:26:d9:4a:58:08:30:28:8a:
2c:36:80:f4:75:08:bb:aa:2a:af:e6:ed:f7:75:d4:a5:dc:cc:
b1:ef:41:78:7e:1b:e3:f3:78:79:e5:c4:2b:e2:8f:e0:44:04:
bb:93:b0:08:18:39:01:9a:1a:d6:3e:f3:31:11:43:f8:66:d9:
32:4f:6f:1f:46:1c:25:c4:3c:b3:32:85:5a:57:ed:9f:93:b7:
a5:35:8c:9b:a8:3e:3b:f6:41:e9:7f:d8:5c:ce:bf:f2:c5:fd:
a7:26:7d:f6:4c:ab:2a:35:8a:3e:18:14:0e:ae:e7:0e:a0:5e:
3c:10:2b:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdOoWy3z2f6zmKJKaFzHInsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTQ1OWMwMjdhODZlMWE1NTcwOWY4NjA5MzdmZTJmODFi
MzEyZjAwHhcNMjMwNDA0MjMzNjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWQ2NGEwOTNkNjAyNzYyNDQ0OGM4ZTljZWQ3OTc4NGNkYjFjYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwlmAFlEbARiRiUteNcJe0KHcAB3
G77JCatorM04lCJe4SWzrn69TZkuZoKEQThjcWCT2mjv7GBqbX8eMIL10S2QgjI4
bOrxJ27TVBVC8icl01xuAU3BfVAOmgcfmIOnNwQ3U7TcfG+Rh/lyuyA5oFWJuz2G
7U+9lMuwm9m6hC+3i89ttJkbVuC1jmtCDlF/vbqoNmtY4v7PZlme11AXTQ5XAIz3
0x8bwLnhJekwq/IY77RkFhkYvBucZUyic6+wNpCqs2nmbcUxEzVrpKwzv3PHwXec
qYo2YWxjN8a4tdrN5vQQ8E3Ye7FtC5R/xRdyeasxDpSy85wLduN1Ov5MTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOrWSgk9YCdiREjI6c7Xl4TNscspMB8GA1UdIwQY
MBaAFFAUWcAnqG4aVXCfhgk3/i+BsxLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYt
MTYyYjAyYmIxNWJkLzEvNnRaS0NUMWdKMkpFU01qcHp0ZVhoTTJ4eXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYtMTYyYjAyYmIxNWJk
LzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+n6MA0G
CSqGSIb3DQEBCwUAA4IBAQDPHsqKqYffc426fxFltiC3ibmglopCBrJbsMHj1OR/
FBFzGRzW5XSHGknYM6Jp1KnDK1bFtNxZy+1L9d2OsckA8MfDOfPeGN2fAoXq5Ikp
jZkCKnWw4UkZh6L+nwmMCkGS8b4egCa40AbWxpNEqpFqrnUefIHFUkvE40RP0RTL
cqV3KKrhuqlyJtlKWAgwKIosNoD0dQi7qiqv5u33ddSl3Myx70F4fhvj83h55cQr
4o/gRAS7k7AIGDkBmhrWPvMxEUP4ZtkyT28fRhwlxDyzMoVaV+2fk7elNYybqD47
9kHpf9hczr/yxf2nJn32TKsqNYo+GBQOrucOoF48ECvj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:00 2024 by rpki-client on console-ams.rpki-client.org