Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/UAYvINuoM3LAiQj7MAagKQNtqgI.roa
File: UAYvINuoM3LAiQj7MAagKQNtqgI.roa (raw, json)
Hash identifier: YanetIrKm49iBDT0NuI8ZE8wMS0tLmgS7u17+/6RFEU=
Subject key identifier: 50:06:2F:20:DB:A8:33:72:C0:89:08:FB:30:06:A0:29:03:6D:AA:02
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 01856D0190E174F35129C979B0A3E6CF3B1D
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/UAYvINuoM3LAiQj7MAagKQNtqgI.roa
Signing time: Sun 01 Jan 2023 11:04:57 +0000
ROA not before: Sun 01 Jan 2023 11:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197746
IP address blocks: 31.22.112.0/24 maxlen: 24
31.22.113.0/24 maxlen: 24
31.22.114.0/24 maxlen: 24
31.22.118.0/24 maxlen: 24
31.22.115.0/24 maxlen: 24
31.22.119.0/24 maxlen: 24
185.23.88.0/24 maxlen: 24
185.23.89.0/24 maxlen: 24
2a00:6620:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:90:e1:74:f3:51:29:c9:79:b0:a3:e6:cf:3b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Jan 1 11:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50062f20dba83372c08908fb3006a029036daa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:22:e3:07:4d:ac:26:7d:70:db:8e:5e:88:
7f:e3:14:b8:d2:5d:c0:88:6d:e7:76:7c:f9:48:86:
6e:80:25:51:d0:05:d9:0d:b3:dc:4f:43:30:35:68:
4d:9d:8f:79:30:79:44:a8:1b:3a:27:91:4b:40:df:
e1:01:c8:49:79:11:75:c8:a9:2c:c7:09:59:98:78:
9b:e6:cc:36:e2:4e:0c:f9:7b:67:25:bb:52:de:9d:
f5:29:c9:13:f0:56:a5:2a:f4:b0:4c:31:b3:e9:d2:
1c:35:38:52:f8:36:ab:5b:33:f3:f1:2a:d3:da:de:
77:52:b0:0d:1a:c7:30:3c:ba:fc:c6:d8:42:0d:c5:
15:45:0a:86:76:7d:bd:ea:cf:67:2c:73:0d:f7:25:
60:e3:a5:73:02:41:cd:ef:ed:d4:14:87:1d:e0:21:
ed:49:73:6b:ae:13:a4:46:31:a6:5e:44:08:26:ba:
46:1e:c5:03:f2:7a:93:46:ad:f7:54:fb:7f:10:db:
f5:2b:ce:3e:84:c3:43:5d:e1:09:c7:aa:6c:06:56:
34:be:80:b8:db:7f:2d:0c:b9:a2:9c:2a:a7:4a:d3:
d9:cb:b9:24:b2:61:6b:36:63:d6:2b:de:02:64:c5:
ad:b3:f1:57:de:1c:2f:b3:18:db:ef:c8:a0:64:5d:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:2F:20:DB:A8:33:72:C0:89:08:FB:30:06:A0:29:03:6D:AA:02
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/UAYvINuoM3LAiQj7MAagKQNtqgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.112.0/22
31.22.118.0/23
185.23.88.0/23
IPv6:
2a00:6620:2000::/48
Signature Algorithm: sha256WithRSAEncryption
1d:6e:2d:7e:11:01:11:fb:92:95:22:a6:c3:9b:bc:51:d4:5a:
1e:04:32:f4:d8:51:89:d8:43:cb:6c:01:6a:81:c7:ef:eb:25:
05:52:68:12:9e:1c:6c:94:2d:ef:60:49:9d:bc:dd:98:a7:1a:
05:e7:ca:2a:c4:79:fb:2c:63:b4:e9:22:d6:30:1e:15:fe:9a:
a7:a9:ec:b1:71:82:45:85:46:79:dd:0c:b8:9e:3f:62:5a:86:
06:a0:0c:85:d6:ed:8d:52:6b:15:aa:45:43:76:97:35:41:1c:
bb:b0:70:ff:53:59:eb:49:6d:ff:79:51:fb:54:4a:95:fc:90:
12:91:a3:6e:75:ac:f4:4a:76:45:62:58:98:ab:39:f0:ee:09:
1a:42:87:05:ce:36:72:29:ca:d0:bd:13:6c:a3:cf:ff:6b:b2:
bd:40:d8:23:c0:a7:8b:39:21:9f:4c:50:eb:25:2c:73:f1:41:
f0:b5:9a:4f:5f:50:77:ff:b4:8b:6e:27:fb:a0:0b:9a:75:61:
91:67:e1:f7:95:63:5c:b6:b8:f8:0b:57:f0:db:a5:84:19:98:
82:01:5f:dd:ae:fa:7e:a0:09:a6:6d:78:47:a2:dc:fb:c6:48:
69:11:76:02:55:e5:d3:d0:d0:e4:a6:9a:8c:f7:dc:bb:3c:f6:
22:c0:a6:9b
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVtAZDhdPNRKcl5sKPmzzsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYTQzYmIzOGQ2ZTBiZThjMjg5MDk0YmE0YWRmMzg3ZDBk
ZTQwYTAwHhcNMjMwMTAxMTEwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDA2MmYyMGRiYTgzMzcyYzA4OTA4ZmIzMDA2YTAyOTAzNmRhYTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLgi4wdNrCZ9cNuOXoh/4xS40l3A
iG3ndnz5SIZugCVR0AXZDbPcT0MwNWhNnY95MHlEqBs6J5FLQN/hAchJeRF1yKks
xwlZmHib5sw24k4M+XtnJbtS3p31KckT8FalKvSwTDGz6dIcNThS+DarWzPz8SrT
2t53UrANGscwPLr8xthCDcUVRQqGdn296s9nLHMN9yVg46VzAkHN7+3UFIcd4CHt
SXNrrhOkRjGmXkQIJrpGHsUD8nqTRq33VPt/ENv1K84+hMNDXeEJx6psBlY0voC4
238tDLminCqnStPZy7kksmFrNmPWK94CZMWts/FX3hwvsxjb78igZF1h6wIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFFAGLyDbqDNywIkI+zAGoCkDbaoCMB8GA1UdIwQY
MBaAFI6kO7ONbgvowokJS6St84fQ3kCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWIt
MjRmN2Y5NDM2Y2VjLzEvVUFZdklOdW9NM0xBaVFqN01BYWdLUU50cWdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWItMjRmN2Y5NDM2Y2Vj
LzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCHxZwAwQB
HxZ2AwQBuRdYMA8EAgACMAkDBwAqAGYgIAAwDQYJKoZIhvcNAQELBQADggEBAB1u
LX4RARH7kpUipsObvFHUWh4EMvTYUYnYQ8tsAWqBx+/rJQVSaBKeHGyULe9gSZ28
3ZinGgXnyirEefssY7TpItYwHhX+mqep7LFxgkWFRnndDLieP2JahgagDIXW7Y1S
axWqRUN2lzVBHLuwcP9TWetJbf95UftUSpX8kBKRo251rPRKdkViWJirOfDuCRpC
hwXONnIpytC9E2yjz/9rsr1A2CPAp4s5IZ9MUOslLHPxQfC1mk9fUHf/tItuJ/ug
C5p1YZFn4feVY1y2uPgLV/DbpYQZmIIBX92u+n6gCaZteEei3PvGSGkRdgJV5dPQ
0OSmmoz33Ls89iLApps=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:53 2024 by rpki-client on console-fra.rpki-client.org