Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/p3tCWbRdwMfVhgz59g8WsHGRcx8.roa
File: p3tCWbRdwMfVhgz59g8WsHGRcx8.roa (raw, json)
Hash identifier: QdmR5PcIctE28dPiEMsu2XbjpTBCjS2b9iH0FKgLjJ8=
Subject key identifier: A7:7B:42:59:B4:5D:C0:C7:D5:86:0C:F9:F6:0F:16:B0:71:91:73:1F
Certificate issuer: /CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Certificate serial: 018571552DF0E7C315412F0AE0A2030AF300
Authority key identifier: 3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/p3tCWbRdwMfVhgz59g8WsHGRcx8.roa
Signing time: Mon 02 Jan 2023 07:14:45 +0000
ROA not before: Mon 02 Jan 2023 07:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49067
IP address blocks: 194.31.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:2d:f0:e7:c3:15:41:2f:0a:e0:a2:03:0a:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Validity
Not Before: Jan 2 07:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a77b4259b45dc0c7d5860cf9f60f16b07191731f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:3c:2a:65:2a:b0:63:50:2e:a0:da:91:66:
b4:f8:de:1d:30:00:2c:a1:7e:04:33:65:3d:12:15:
c1:77:b9:0d:ef:53:cd:b3:15:fd:c9:9e:22:57:a8:
74:cc:ec:0d:69:1c:48:78:c6:be:81:a1:3b:c6:1f:
f0:80:5d:a3:d0:21:9d:29:bd:19:58:15:6a:07:8b:
c1:71:87:dd:4f:c1:ec:59:ff:97:84:d8:90:ac:22:
ce:1c:15:cc:6d:90:f2:b3:fd:53:5a:bd:ec:b0:2c:
98:b9:29:f8:59:bc:92:7c:c1:fd:59:f3:26:25:e4:
43:db:52:84:1f:3a:62:b7:90:64:29:05:f1:56:5f:
88:fe:9f:f4:79:b3:fd:2d:3d:c5:b8:6d:2d:fb:c6:
d2:49:91:84:7c:95:fe:ad:24:fb:ce:57:96:d0:aa:
7f:87:0f:47:ab:41:87:05:86:73:05:5f:07:90:03:
d4:ef:07:0f:64:fc:3e:f5:67:5b:29:be:c1:fb:4e:
ce:1c:35:fb:6e:3c:aa:04:c9:c3:b2:96:72:5d:17:
50:4d:64:ad:57:d8:1c:f8:46:7b:2f:f1:75:79:2d:
c2:b4:da:91:a4:2f:b9:f6:c3:ec:19:e1:a0:9e:48:
90:9e:e0:ae:20:6e:d9:d9:e7:63:cb:12:2a:64:80:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7B:42:59:B4:5D:C0:C7:D5:86:0C:F9:F6:0F:16:B0:71:91:73:1F
X509v3 Authority Key Identifier:
keyid:3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/p3tCWbRdwMfVhgz59g8WsHGRcx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:cc:2e:bd:8e:ea:35:86:f3:b8:2a:00:5a:7a:0a:fd:4a:d7:
5a:b4:fe:59:d5:bb:ea:72:45:2a:0f:27:bb:ce:fa:aa:92:e2:
e4:b3:1e:89:83:e0:e4:ce:90:2f:d7:ee:e1:f9:47:24:31:a4:
c5:84:1f:83:fd:bf:ad:6f:05:e1:b6:3c:4b:2b:a6:e4:7e:d8:
f9:48:b4:22:ab:fc:02:6a:44:59:8d:6a:a7:87:a2:47:6a:69:
a8:d9:c5:fb:af:a8:f4:46:0f:1e:5f:2f:61:10:bb:c5:c4:29:
47:19:29:dc:91:70:49:82:17:4d:77:c4:fb:e1:66:f8:56:f2:
3f:38:30:ec:5c:c4:ed:9c:ae:bf:6f:11:ea:91:76:a4:ce:e8:
0e:b4:1b:f5:d1:73:f6:6c:1d:ee:01:c2:fc:ac:8a:d2:c9:26:
82:de:00:3f:1e:15:bf:0f:02:db:dd:5b:c4:9b:ae:bf:ea:1c:
df:41:1d:cc:97:ce:d4:61:f1:b3:97:10:15:79:30:9e:5e:dd:
bc:f0:5b:df:1a:03:8e:ed:c8:c6:71:07:19:a7:54:2a:06:f1:
44:e7:da:9e:06:0a:c5:7b:0d:75:82:2a:c2:47:da:99:4d:29:
93:b6:5f:55:07:eb:12:90:4d:09:71:4a:e4:f7:cf:48:7c:b5:
3f:f7:12:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxVS3w58MVQS8K4KIDCvMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjZlMjRjZmMwMGQyMmY0ZWZhMzlhNDIxZGFmYjdiYjFk
YTRiODMwHhcNMjMwMTAyMDcxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzdiNDI1OWI0NWRjMGM3ZDU4NjBjZjlmNjBmMTZiMDcxOTE3MzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o88KmUqsGNQLqDakWa0+N4dMAAs
oX4EM2U9EhXBd7kN71PNsxX9yZ4iV6h0zOwNaRxIeMa+gaE7xh/wgF2j0CGdKb0Z
WBVqB4vBcYfdT8HsWf+XhNiQrCLOHBXMbZDys/1TWr3ssCyYuSn4WbySfMH9WfMm
JeRD21KEHzpit5BkKQXxVl+I/p/0ebP9LT3FuG0t+8bSSZGEfJX+rST7zleW0Kp/
hw9Hq0GHBYZzBV8HkAPU7wcPZPw+9WdbKb7B+07OHDX7bjyqBMnDspZyXRdQTWSt
V9gc+EZ7L/F1eS3CtNqRpC+59sPsGeGgnkiQnuCuIG7Z2edjyxIqZIBGMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKd7Qlm0XcDH1YYM+fYPFrBxkXMfMB8GA1UdIwQY
MBaAFD224kz8ANIvTvo5pCHa+3ux2kuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mN2JiYzQtNTYyYS00ZTc5LWE4ZWUt
OTM4MGU1Y2MwNTgwLzEvcDN0Q1diUmR3TWZWaGd6NTlnOFdzSEdSY3g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mN2JiYzQtNTYyYS00ZTc5LWE4ZWUtOTM4MGU1Y2MwNTgw
LzEvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh8LMA0G
CSqGSIb3DQEBCwUAA4IBAQA+zC69juo1hvO4KgBaegr9StdatP5Z1bvqckUqDye7
zvqqkuLksx6Jg+DkzpAv1+7h+UckMaTFhB+D/b+tbwXhtjxLK6bkftj5SLQiq/wC
akRZjWqnh6JHammo2cX7r6j0Rg8eXy9hELvFxClHGSnckXBJghdNd8T74Wb4VvI/
ODDsXMTtnK6/bxHqkXakzugOtBv10XP2bB3uAcL8rIrSySaC3gA/HhW/DwLb3VvE
m66/6hzfQR3Ml87UYfGzlxAVeTCeXt288FvfGgOO7cjGcQcZp1QqBvFE59qeBgrF
ew11girCR9qZTSmTtl9VB+sSkE0JcUrk989IfLU/9xKb
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:30 2023 by rpki-client on console.sobornost.net