Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/N7QxzDJCJUC4b1U0El7ClI-DT8I.roa
File: N7QxzDJCJUC4b1U0El7ClI-DT8I.roa (raw, json)
Hash identifier: xX18e554jFfoboccjYUMTQUXFAD+dQtVDe35iy6vuwI=
Subject key identifier: 37:B4:31:CC:32:42:25:40:B8:6F:55:34:12:5E:C2:94:8F:83:4F:C2
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 0185F3843CC963C0B2904EABBFA5CCA937F1
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/N7QxzDJCJUC4b1U0El7ClI-DT8I.roa
Signing time: Fri 27 Jan 2023 13:56:47 +0000
ROA not before: Fri 27 Jan 2023 13:56:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204326
IP address blocks: 31.132.40.0/22 maxlen: 24
185.18.240.0/22 maxlen: 24
2a0d:9f40::/29 maxlen: 48
2a04:d00::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Feb 2023 13:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:84:3c:c9:63:c0:b2:90:4e:ab:bf:a5:cc:a9:37:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Jan 27 13:56:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37b431cc32422540b86f5534125ec2948f834fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9a:27:49:b9:a3:65:aa:bd:54:9f:dd:ba:84:
8e:86:00:f6:45:ed:24:9b:cd:31:75:db:79:06:94:
5e:fe:dd:6f:2f:bd:e0:14:76:36:71:c1:4c:20:37:
d6:9f:4c:19:dc:7e:24:cc:54:1c:21:2a:a0:47:23:
f6:96:53:7f:85:92:74:85:00:7d:22:9f:c0:a8:19:
05:f5:32:3b:08:c1:04:9b:ce:3d:74:ab:94:94:22:
2d:ad:a2:7b:45:1d:14:3f:f4:98:5d:9f:21:06:34:
23:18:7f:3f:a7:e6:86:3e:72:0e:e5:f2:ef:5d:1b:
77:c0:82:9c:2f:42:d3:7e:24:81:95:a0:cb:69:a0:
20:39:b5:80:97:74:8d:51:a9:1d:77:07:34:53:60:
61:b6:dd:51:33:d0:04:f9:69:e0:33:38:80:eb:46:
ff:8f:fb:a3:f0:e0:f0:cd:88:b4:a5:47:67:4a:b9:
66:26:c2:f8:48:0c:ff:c5:d3:f6:e1:cb:c8:95:c6:
8e:39:91:ee:f5:67:93:c7:11:d8:9d:77:47:ab:b8:
2c:29:84:5a:97:20:b1:d0:65:53:3a:5b:10:5c:e2:
4e:8a:de:83:fd:2f:98:cd:7c:20:8b:9e:18:e3:6d:
7f:c7:4a:ae:24:02:c6:8b:4c:41:39:74:50:b8:4d:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B4:31:CC:32:42:25:40:B8:6F:55:34:12:5E:C2:94:8F:83:4F:C2
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/N7QxzDJCJUC4b1U0El7ClI-DT8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.40.0/22
185.18.240.0/22
IPv6:
2a04:d00::/29
2a0d:9f40::/29
Signature Algorithm: sha256WithRSAEncryption
7c:96:2b:7f:17:b2:60:99:c8:69:02:63:ab:93:81:a3:96:95:
31:4a:14:7d:71:5f:a1:a3:dd:a7:0a:ff:64:ae:2a:5b:2a:ad:
6c:14:4b:45:f7:0b:a3:fc:5d:c8:b5:71:eb:b9:fb:2f:7b:68:
91:6c:69:92:d0:45:91:17:d6:72:cd:30:9d:41:a1:b8:c7:80:
ab:72:4a:58:f9:a9:d2:62:60:72:24:ac:5a:0d:40:dd:94:ee:
f4:df:d3:71:ac:e5:af:e5:06:cc:b8:54:1e:89:2b:2d:84:12:
85:2f:78:13:6a:06:e6:e4:9b:04:9b:6c:97:c2:b9:7a:5d:aa:
0b:2f:a7:48:ac:65:99:b5:ec:1d:01:ec:ef:a8:9d:7c:50:97:
7d:10:fb:cb:d2:0d:1c:52:8a:e0:e4:24:40:ae:34:f7:6e:90:
55:90:ce:6b:36:90:86:a3:c4:f8:57:25:8f:2d:a2:03:72:1b:
c1:a0:d0:aa:ac:62:13:17:16:f8:02:3e:72:0f:ee:d4:08:0f:
16:d4:bd:95:fc:21:44:f7:63:53:4c:8d:a8:66:51:29:e0:8e:
4f:8f:a6:76:3b:ed:8c:0e:a3:d9:3a:40:0c:26:8d:15:f6:46:
9b:a6:58:4c:3c:22:23:7a:51:b4:22:96:45:b3:98:a8:d2:66:
d2:4b:0c:e5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYXzhDzJY8CykE6rv6XMqTfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWUzZmRkZjc4ODRkNzg1YTcwOGZkNGU2NjRiNjJkZTkx
MGViZTgwHhcNMjMwMTI3MTM1NjQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2I0MzFjYzMyNDIyNTQwYjg2ZjU1MzQxMjVlYzI5NDhmODM0ZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJonSbmjZaq9VJ/duoSOhgD2Re0k
m80xddt5BpRe/t1vL73gFHY2ccFMIDfWn0wZ3H4kzFQcISqgRyP2llN/hZJ0hQB9
Ip/AqBkF9TI7CMEEm849dKuUlCItraJ7RR0UP/SYXZ8hBjQjGH8/p+aGPnIO5fLv
XRt3wIKcL0LTfiSBlaDLaaAgObWAl3SNUakddwc0U2Bhtt1RM9AE+WngMziA60b/
j/uj8ODwzYi0pUdnSrlmJsL4SAz/xdP24cvIlcaOOZHu9WeTxxHYnXdHq7gsKYRa
lyCx0GVTOlsQXOJOit6D/S+YzXwgi54Y421/x0quJALGi0xBOXRQuE1qHQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDe0McwyQiVAuG9VNBJewpSPg0/CMB8GA1UdIwQY
MBaAFDweP933iE14WnCP1OZkti3pEOvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDct
NTljMThhZGEzNTJmLzEvTjdReHpESkNKVUM0YjFVMEVsN0NsSS1EVDhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDctNTljMThhZGEzNTJm
LzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCH4QoAwQC
uRLwMBQEAgACMA4DBQMqBA0AAwUDKg2fQDANBgkqhkiG9w0BAQsFAAOCAQEAfJYr
fxeyYJnIaQJjq5OBo5aVMUoUfXFfoaPdpwr/ZK4qWyqtbBRLRfcLo/xdyLVx67n7
L3tokWxpktBFkRfWcs0wnUGhuMeAq3JKWPmp0mJgciSsWg1A3ZTu9N/Tcazlr+UG
zLhUHokrLYQShS94E2oG5uSbBJtsl8K5el2qCy+nSKxlmbXsHQHs76idfFCXfRD7
y9INHFKK4OQkQK40926QVZDOazaQhqPE+Fcljy2iA3IbwaDQqqxiExcW+AI+cg/u
1AgPFtS9lfwhRPdjU0yNqGZRKeCOT4+mdjvtjA6j2TpADCaNFfZGm6ZYTDwiI3pR
tCKWRbOYqNJm0ksM5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:34 2024 by rpki-client on console-ams.rpki-client.org