Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS50391.roa
File: AS50391.roa (raw, json)
Hash identifier: bFCSOoDDS0TJOWpzVaKTsoXX3CecWmqqBtGs6SDgMXE=
Subject key identifier: 43:8B:2D:B3:4D:B8:02:23:A8:0A:FE:7C:41:7F:68:83:66:35:DD:09
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 28E58EB5A7F8D6E75AE80CB711CDB3BB4E87D624
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS50391.roa
Signing time: Sun 07 May 2023 17:27:24 +0000
ROA not before: Sun 07 May 2023 17:22:24 +0000
ROA not after: Sun 05 May 2024 17:27:24 +0000
asID: 50391
IP address blocks: 147.78.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e5:8e:b5:a7:f8:d6:e7:5a:e8:0c:b7:11:cd:b3:bb:4e:87:d6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 7 17:22:24 2023 GMT
Not After : May 5 17:27:24 2024 GMT
Subject: CN=438B2DB34DB80223A80AFE7C417F68836635DD09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:28:7d:64:b9:0f:41:96:9a:9e:a3:f3:a3:ea:
79:8e:26:cb:5c:b0:cb:ed:35:41:a3:1f:5a:b1:4b:
17:0c:59:a9:92:3c:ef:49:dc:b8:d9:5a:a1:e9:4a:
c4:f3:0d:bb:a4:a1:be:6c:21:91:b5:a9:e5:b8:fa:
f3:a5:1e:6d:ce:e3:bd:ef:33:41:e5:d2:7c:b9:d0:
bd:97:55:06:a7:b3:a1:a9:e0:b6:a3:ce:a8:6a:d7:
1a:0a:4b:7a:73:3b:ce:21:8a:9b:85:49:e8:a3:c2:
2f:33:f8:22:6d:9d:d5:eb:0f:a2:08:36:8d:90:22:
39:9b:aa:29:fe:fe:c8:3d:91:e4:f3:23:94:08:37:
a8:c3:88:59:14:68:15:61:45:74:8f:2f:f9:f1:35:
96:59:67:24:88:90:90:d7:99:c1:b3:a4:dc:b4:0f:
d7:33:17:67:91:f8:f8:15:11:20:ae:0c:83:a0:24:
a8:db:19:fc:9d:9f:21:c6:dd:f9:cd:fd:36:69:13:
52:b8:a4:6d:38:0b:d7:47:81:3a:06:ef:d4:36:5b:
c0:11:89:c4:ae:59:7c:12:37:8b:db:49:6c:ef:04:
6b:1a:eb:88:fa:f8:77:0a:51:3a:c7:f5:f0:ee:f9:
3d:45:6c:1b:5f:a9:13:4d:0c:7d:1a:be:98:3e:d7:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8B:2D:B3:4D:B8:02:23:A8:0A:FE:7C:41:7F:68:83:66:35:DD:09
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS50391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.123.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:6f:0c:e5:ef:77:4a:a2:89:a6:07:99:e2:f6:db:2e:70:a9:
88:6e:a9:1f:f8:86:ac:ec:d5:c0:1e:ff:8e:d4:32:44:68:75:
29:10:77:25:6c:15:6d:f6:7c:b0:2c:4d:05:08:cd:f3:e9:08:
01:69:da:7b:84:f1:1e:2c:55:08:de:d8:81:3d:0b:51:66:5e:
40:f5:dd:5e:ce:98:f2:0b:52:ea:43:80:fc:13:2a:0f:44:53:
d1:56:7f:80:cd:2a:72:e2:f0:24:a6:c7:67:23:fc:4a:a3:de:
59:67:82:7f:5c:33:04:58:c9:99:ea:82:9f:ec:45:2b:ef:af:
24:18:99:14:d1:86:22:d4:e8:fd:ef:cf:44:b2:0f:96:d9:df:
a3:b4:b0:e3:4e:e7:d2:74:0d:8e:17:f9:41:33:4d:03:10:8d:
af:dc:c2:9c:08:d5:9b:42:8a:b9:d4:e0:5d:f1:79:35:b4:d0:
13:72:22:0d:30:4f:9e:a8:05:b5:ed:5d:a3:f3:1b:5c:59:39:
b8:d3:7d:4d:70:f7:86:4a:bc:9b:06:7d:47:b5:da:3b:3f:1f:
eb:3f:20:c6:f1:bb:7a:bc:8b:76:42:8d:f6:9e:52:4e:12:d1:
8d:7f:49:08:b8:1a:c1:44:41:f6:85:4e:b5:79:59:24:b4:56:
d2:6a:6f:9f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUKOWOtaf41uda6Ay3Ec2zu06H1iQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yMzA1MDcxNzIyMjRaFw0yNDA1MDUxNzI3MjRaMDMxMTAvBgNV
BAMTKDQzOEIyREIzNERCODAyMjNBODBBRkU3QzQxN0Y2ODgzNjYzNUREMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrKH1kuQ9Blpqeo/Oj6nmOJstc
sMvtNUGjH1qxSxcMWamSPO9J3LjZWqHpSsTzDbukob5sIZG1qeW4+vOlHm3O473v
M0Hl0ny50L2XVQans6Gp4Lajzqhq1xoKS3pzO84hipuFSeijwi8z+CJtndXrD6II
No2QIjmbqin+/sg9keTzI5QIN6jDiFkUaBVhRXSPL/nxNZZZZySIkJDXmcGzpNy0
D9czF2eR+PgVESCuDIOgJKjbGfydnyHG3fnN/TZpE1K4pG04C9dHgToG79Q2W8AR
icSuWXwSN4vbSWzvBGsa64j6+HcKUTrH9fDu+T1FbBtfqRNNDH0avpg+1055AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUQ4sts024AiOoCv58QX9og2Y13QkwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNTAzOTEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTTnsw
DQYJKoZIhvcNAQELBQADggEBANBvDOXvd0qiiaYHmeL22y5wqYhuqR/4hqzs1cAe
/47UMkRodSkQdyVsFW32fLAsTQUIzfPpCAFp2nuE8R4sVQje2IE9C1FmXkD13V7O
mPILUupDgPwTKg9EU9FWf4DNKnLi8CSmx2cj/Eqj3llngn9cMwRYyZnqgp/sRSvv
ryQYmRTRhiLU6P3vz0SyD5bZ36O0sONO59J0DY4X+UEzTQMQja/cwpwI1ZtCirnU
4F3xeTW00BNyIg0wT56oBbXtXaPzG1xZObjTfU1w94ZKvJsGfUe12js/H+s/IMbx
u3q8i3ZCjfaeUk4S0Y1/SQi4GsFEQfaFTrV5WSS0VtJqb58=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org