Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EKPQLGPMwISk-8orKGs_j5FcsuM.roa
File: EKPQLGPMwISk-8orKGs_j5FcsuM.roa (raw, json)
Hash identifier: YRTWpFQ8Tp+IGrgqT1401+sBOYDWBhKSUl3cCVRS9po=
Subject key identifier: 10:A3:D0:2C:63:CC:C0:84:A4:FB:CA:2B:28:6B:3F:8F:91:5C:B2:E3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01881ED8911C26F26AF56AE9BE4399CECD44
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EKPQLGPMwISk-8orKGs_j5FcsuM.roa
Signing time: Mon 15 May 2023 09:58:09 +0000
ROA not before: Mon 15 May 2023 09:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202685
IP address blocks: 31.13.211.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:d8:91:1c:26:f2:6a:f5:6a:e9:be:43:99:ce:cd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 15 09:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10a3d02c63ccc084a4fbca2b286b3f8f915cb2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:79:ef:4a:9f:9e:be:22:07:a3:23:88:fc:
4b:5d:06:f9:e8:51:30:1b:a3:0f:dc:75:a6:ea:24:
49:0b:4a:a3:33:e1:c3:a1:11:d6:1a:ce:d6:33:c6:
3c:a1:64:19:79:3a:13:2a:2c:55:fb:8f:02:61:55:
52:fd:0e:5d:75:66:ed:1f:24:b1:47:4d:0e:3d:6b:
6d:fe:f1:71:85:09:40:22:79:5e:95:3c:a1:9d:f9:
e1:70:ed:29:7e:53:c7:5f:db:2a:2b:d2:24:57:35:
fc:47:b1:ee:c0:eb:92:b3:a2:40:d9:c6:39:d3:2a:
83:48:2a:87:02:98:1e:69:77:55:d6:f6:f8:3d:91:
6e:cb:52:a6:76:87:8d:4a:48:e3:fe:d5:37:01:8d:
f8:a5:8b:54:b4:06:e9:f8:7a:7b:0f:86:3e:20:94:
6d:6f:ea:7f:04:ea:5b:9a:da:42:06:2c:f0:37:9a:
5a:5b:98:24:3c:7a:66:be:3c:94:40:73:f0:e8:26:
d1:9e:d4:0f:d1:62:27:ec:06:72:b9:55:75:35:c4:
c4:4a:8d:83:51:7b:31:3d:d2:3b:de:3e:4f:96:7f:
1e:b8:7d:45:33:67:21:78:18:e5:02:e0:61:04:18:
3d:dd:58:00:30:b6:f2:26:af:40:92:1d:47:45:f8:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A3:D0:2C:63:CC:C0:84:A4:FB:CA:2B:28:6B:3F:8F:91:5C:B2:E3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EKPQLGPMwISk-8orKGs_j5FcsuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.128.232.0/24
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
53:bc:2c:5a:48:12:0a:47:ac:d9:48:57:eb:30:c5:4a:80:06:
74:eb:ff:cf:fb:b6:96:70:3c:ab:e9:04:b7:ac:13:2a:5b:f1:
99:d2:25:6f:51:e7:54:35:d9:bb:4c:0d:f9:48:02:f6:72:33:
5b:97:bc:62:b3:3c:5a:cc:c5:6f:66:29:d6:25:b0:9a:44:f5:
48:b2:c4:87:0a:ec:17:f3:e1:f2:87:64:90:71:76:a5:16:d1:
e0:b2:5e:e9:bc:e1:fe:41:de:da:f6:4e:08:3e:8d:5e:0f:c5:
65:71:31:da:65:a1:04:80:f2:fa:9a:33:96:cd:75:d8:9d:d8:
f3:6a:0c:86:56:67:d1:ab:ee:55:de:6b:dc:ae:54:d5:3a:ca:
d0:46:62:bd:92:63:79:85:16:59:b9:5e:3b:f4:a3:61:74:4f:
6e:e0:4c:69:e8:90:c5:22:cd:df:e1:03:e1:64:46:aa:f8:f8:
4e:d6:64:9f:d0:ad:88:ce:74:3a:72:d1:3c:04:68:7d:71:9b:
6e:23:9b:1b:f0:91:cd:c0:b2:1f:79:7f:cb:57:b1:b4:1b:87:
7d:e4:7a:46:21:93:6f:56:59:ba:51:08:f2:45:ee:c9:e6:fb:
93:fa:57:02:fa:b3:01:01:14:90:19:81:df:f8:8b:ed:bc:64:
95:b5:1f:d6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYge2JEcJvJq9WrpvkOZzs1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNTE1MDk1ODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGEzZDAyYzYzY2NjMDg0YTRmYmNhMmIyODZiM2Y4ZjkxNWNiMmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiex570qfnr4iB6MjiPxLXQb56FEw
G6MP3HWm6iRJC0qjM+HDoRHWGs7WM8Y8oWQZeToTKixV+48CYVVS/Q5ddWbtHySx
R00OPWtt/vFxhQlAInlelTyhnfnhcO0pflPHX9sqK9IkVzX8R7HuwOuSs6JA2cY5
0yqDSCqHApgeaXdV1vb4PZFuy1KmdoeNSkjj/tU3AY34pYtUtAbp+Hp7D4Y+IJRt
b+p/BOpbmtpCBizwN5paW5gkPHpmvjyUQHPw6CbRntQP0WIn7AZyuVV1NcTESo2D
UXsxPdI73j5Pln8euH1FM2cheBjlAuBhBBg93VgAMLbyJq9Akh1HRfg8EwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBCj0CxjzMCEpPvKKyhrP4+RXLLjMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRUtQUUxHUE13SVNrLThvcktHc19qNUZjc3VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHw3TAwQA
LYDoAwQAwSMSMA0GCSqGSIb3DQEBCwUAA4IBAQBTvCxaSBIKR6zZSFfrMMVKgAZ0
6//P+7aWcDyr6QS3rBMqW/GZ0iVvUedUNdm7TA35SAL2cjNbl7xiszxazMVvZinW
JbCaRPVIssSHCuwX8+Hyh2SQcXalFtHgsl7pvOH+Qd7a9k4IPo1eD8VlcTHaZaEE
gPL6mjOWzXXYndjzagyGVmfRq+5V3mvcrlTVOsrQRmK9kmN5hRZZuV479KNhdE9u
4Exp6JDFIs3f4QPhZEaq+PhO1mSf0K2IznQ6ctE8BGh9cZtuI5sb8JHNwLIfeX/L
V7G0G4d95HpGIZNvVlm6UQjyRe7J5vuT+lcC+rMBARSQGYHf+IvtvGSVtR/W
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:40 2023 by rpki-client on console-fra.rpki-client.org