Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9050.roa
File: AS9050.roa (raw, json)
Hash identifier: bARKBJkP8K+uwjaW0/2AL2TinBJgdcKHoJ55GAczx3k=
Subject key identifier: 6B:DC:52:F9:00:91:6D:83:B4:22:9C:68:CA:BF:DD:72:1A:87:56:2C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 70F65ACEFDF4902C10E42B26460FA739B38D008C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9050.roa
Signing time: Thu 27 Jun 2024 08:54:08 +0000
ROA not before: Thu 27 Jun 2024 08:49:08 +0000
ROA not after: Thu 26 Jun 2025 08:54:08 +0000
asID: 9050
IP address blocks: 140.233.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 19:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f6:5a:ce:fd:f4:90:2c:10:e4:2b:26:46:0f:a7:39:b3:8d:00:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 27 08:49:08 2024 GMT
Not After : Jun 26 08:54:08 2025 GMT
Subject: CN=6BDC52F900916D83B4229C68CABFDD721A87562C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:69:6c:60:fa:95:17:5e:61:5b:39:22:e4:
e9:8d:e0:36:c0:f0:96:65:72:1c:48:d7:a1:75:22:
39:e1:93:bd:b5:cf:80:d7:cf:2c:16:09:00:58:d7:
51:41:a5:1c:30:b8:6c:4e:14:90:cf:2d:47:71:ea:
0d:17:88:7f:5e:4f:db:69:c1:17:a3:0c:ef:25:73:
79:be:a6:56:bb:09:f8:af:17:6d:05:44:68:4c:15:
cf:cd:28:73:a3:00:2c:7f:92:0c:af:68:0f:99:ef:
dc:7b:77:13:63:97:72:b7:ae:4f:92:9f:e3:aa:aa:
e4:1b:c2:db:20:f7:16:fc:d2:47:24:9f:1a:4b:0b:
f2:74:2d:32:fc:15:09:9a:a1:ec:74:0e:dc:4a:8e:
44:f7:6e:0c:c4:8d:a1:66:d2:cc:b9:a7:03:72:88:
04:0a:09:7b:61:c6:67:6f:38:78:71:ad:2e:e5:27:
e5:fd:ca:76:cc:99:2e:09:5f:a5:c3:64:be:eb:fd:
66:f3:b5:d7:fc:34:8a:83:02:d9:bc:9d:a5:ea:b9:
22:13:f1:1d:ae:01:5f:a1:0e:b3:1b:29:fd:33:e4:
0d:70:6b:e3:df:a9:b5:8a:c9:c7:71:f2:90:0f:ad:
df:ff:57:01:b7:ba:db:9e:59:c8:ec:0b:fa:e7:47:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DC:52:F9:00:91:6D:83:B4:22:9C:68:CA:BF:DD:72:1A:87:56:2C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9050.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:76:1d:a9:43:f9:83:c2:c1:ff:02:1f:cd:43:81:0e:16:0f:
3e:d1:02:5b:70:7f:14:96:d4:ed:e1:66:f2:48:00:5c:5e:38:
2f:d1:a7:fa:b4:95:0d:f6:3b:5b:36:17:6a:ae:96:4a:73:3b:
0b:c4:57:24:ac:bb:3a:1f:64:2b:97:75:e4:69:f5:1a:09:c5:
96:70:ea:56:e4:52:78:86:d9:f5:bb:9c:c8:6c:a4:ef:40:08:
d2:4b:2a:2b:a5:a0:db:6c:d8:31:f3:0e:c8:ef:ee:f2:01:fd:
58:3e:fd:61:e2:e5:ce:6e:0e:4a:49:b0:8c:e4:9c:be:2c:f1:
c1:b2:84:c9:90:7e:d8:3e:07:df:df:83:5a:17:38:50:67:5c:
2d:8a:5e:5d:50:04:e4:17:e9:bb:99:5f:41:f2:84:40:04:0d:
47:e4:49:e5:c9:a7:4e:ff:fc:a8:ee:8c:8a:df:b2:c2:fe:90:
66:93:68:26:15:b2:35:49:0c:83:df:ed:8b:59:15:70:39:cc:
68:51:db:73:4b:79:9c:3f:b5:b8:62:89:96:d8:d4:8b:e1:a7:
5a:9a:fa:56:bd:75:dc:0f:d9:4d:35:d6:78:e4:28:8b:aa:b6:
03:24:d5:c9:2b:84:5c:6b:d7:60:a3:ca:30:c5:7c:84:6f:0a:
f8:73:d3:97
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUcPZazv30kCwQ5CsmRg+nObONAIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDA2MjcwODQ5MDhaFw0yNTA2MjYwODU0MDhaMDMxMTAvBgNV
BAMTKDZCREM1MkY5MDA5MTZEODNCNDIyOUM2OENBQkZERDcyMUE4NzU2MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJ2lsYPqVF15hWzki5OmN4DbA
8JZlchxI16F1Ijnhk721z4DXzywWCQBY11FBpRwwuGxOFJDPLUdx6g0XiH9eT9tp
wRejDO8lc3m+pla7CfivF20FRGhMFc/NKHOjACx/kgyvaA+Z79x7dxNjl3K3rk+S
n+OqquQbwtsg9xb80kcknxpLC/J0LTL8FQmaoex0DtxKjkT3bgzEjaFm0sy5pwNy
iAQKCXthxmdvOHhxrS7lJ+X9ynbMmS4JX6XDZL7r/Wbztdf8NIqDAtm8naXquSIT
8R2uAV+hDrMbKf0z5A1wa+PfqbWKycdx8pAPrd//VwG3utueWcjsC/rnRwLFAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUa9xS+QCRbYO0Ipxoyr/dchqHViwwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTOTA1MC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIzpvjAN
BgkqhkiG9w0BAQsFAAOCAQEAsXYdqUP5g8LB/wIfzUOBDhYPPtECW3B/FJbU7eFm
8kgAXF44L9Gn+rSVDfY7WzYXaq6WSnM7C8RXJKy7Oh9kK5d15Gn1GgnFlnDqVuRS
eIbZ9bucyGyk70AI0ksqK6Wg22zYMfMOyO/u8gH9WD79YeLlzm4OSkmwjOScvizx
wbKEyZB+2D4H39+DWhc4UGdcLYpeXVAE5Bfpu5lfQfKEQAQNR+RJ5cmnTv/8qO6M
it+ywv6QZpNoJhWyNUkMg9/ti1kVcDnMaFHbc0t5nD+1uGKJltjUi+GnWpr6Vr11
3A/ZTTXWeOQoi6q2AyTVySuEXGvXYKPKMMV8hG8K+HPTlw==
-----END CERTIFICATE-----
Generated at Thu Jul 4 21:28:01 2024 by rpki-client on console-ams.rpki-client.org