Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JKYZNfQ8KV42TLD4w-gw0gXMlKg.roa
File: JKYZNfQ8KV42TLD4w-gw0gXMlKg.roa (raw, json)
Hash identifier: uN6Srgn7XmovOm71UNQfNY8RTNqVzuLhBTXxi3WlZsQ=
Subject key identifier: 24:A6:19:35:F4:3C:29:5E:36:4C:B0:F8:C3:E8:30:D2:05:CC:94:A8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01877AD5266C288C7A92F6866E9EB00FB2EF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JKYZNfQ8KV42TLD4w-gw0gXMlKg.roa
Signing time: Thu 13 Apr 2023 13:36:42 +0000
ROA not before: Thu 13 Apr 2023 13:36:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42794
IP address blocks: 31.13.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:d5:26:6c:28:8c:7a:92:f6:86:6e:9e:b0:0f:b2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 13 13:36:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24a61935f43c295e364cb0f8c3e830d205cc94a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:19:0f:9a:03:b7:50:d9:90:52:af:4e:4d:
ca:43:3e:4d:5a:29:f3:52:86:71:43:31:4e:2c:c4:
61:99:9a:cb:4c:91:16:8e:e1:35:3f:c7:1b:3a:8f:
9f:f7:59:7a:6d:cb:2d:43:97:80:61:e6:b2:fd:7e:
e5:20:6c:f7:c4:9a:e5:49:ba:9b:4a:88:ba:29:ac:
cc:41:e9:db:39:24:1c:0f:25:eb:a1:ae:22:80:2a:
d3:b0:ed:53:35:ea:fb:90:a9:ef:f2:b7:a6:56:6b:
18:03:0c:96:5c:dd:14:aa:75:0b:d0:13:f8:c6:b9:
2f:84:1d:17:20:99:fc:d8:1d:d1:31:db:8a:d2:1f:
95:26:55:9b:95:fc:6a:e4:c4:e0:58:cf:50:44:4a:
18:36:8d:7f:a8:93:5e:6f:a6:6f:43:cf:bf:39:b3:
1a:50:f8:3d:77:75:ef:0e:59:48:65:ce:b9:75:21:
34:65:6c:a5:03:51:66:c5:ee:fd:67:11:98:af:f0:
ac:08:a9:5e:c2:d3:94:64:4f:f9:7e:f9:34:46:2e:
9b:a0:30:f5:6a:ec:a5:19:a0:fa:dd:b8:79:a8:36:
c0:79:b9:0b:39:4e:9c:cd:08:99:fc:21:fa:77:2d:
65:fc:6a:a7:65:7a:c6:55:52:e7:70:75:db:e9:2e:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A6:19:35:F4:3C:29:5E:36:4C:B0:F8:C3:E8:30:D2:05:CC:94:A8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JKYZNfQ8KV42TLD4w-gw0gXMlKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.198.0/24
Signature Algorithm: sha256WithRSAEncryption
49:44:0f:47:02:63:1e:4c:85:56:07:e1:d3:78:d3:ca:e5:ca:
4a:d7:c8:3d:ac:6c:23:ef:1a:60:10:6a:ac:55:ed:c4:b9:ab:
22:5b:9d:f6:9b:c6:ec:e6:f6:77:58:6a:67:a9:56:fa:16:72:
24:86:eb:03:de:54:b9:1a:aa:54:03:01:e6:15:e0:3e:fb:0c:
f5:fe:59:10:48:89:15:d7:8f:0b:1e:5e:48:f3:5c:ba:53:c8:
b0:58:cd:e0:f9:45:d4:d1:ac:d0:d5:c1:77:68:e2:f9:1e:eb:
22:23:66:a1:e3:97:e8:99:2e:b0:91:4a:3f:8e:95:c3:07:de:
6d:08:48:8e:01:48:c2:25:0c:06:cf:81:3b:0a:d6:f2:cc:bc:
c7:c5:93:66:00:c0:4e:51:db:3c:9f:e1:a4:05:bb:48:85:2a:
ea:8a:be:7a:54:c6:ab:fe:6f:d1:f3:59:cb:ce:22:15:a4:f2:
5b:4c:95:5f:e0:dd:ae:bf:9a:57:12:80:5b:06:ba:a7:57:65:
4b:7b:56:65:ab:8c:47:96:ac:da:64:f1:b4:3d:91:8f:a7:c7:
33:99:e7:bb:89:d7:e1:10:b9:9b:50:68:c5:33:1f:2c:92:c9:
3e:27:a4:4a:42:83:63:b6:48:8a:32:e7:f5:f4:62:0e:02:c5:
a9:9d:fa:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd61SZsKIx6kvaGbp6wD7LvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNDEzMTMzNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGE2MTkzNWY0M2MyOTVlMzY0Y2IwZjhjM2U4MzBkMjA1Y2M5NGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujkZD5oDt1DZkFKvTk3KQz5NWinz
UoZxQzFOLMRhmZrLTJEWjuE1P8cbOo+f91l6bcstQ5eAYeay/X7lIGz3xJrlSbqb
Soi6KazMQenbOSQcDyXroa4igCrTsO1TNer7kKnv8remVmsYAwyWXN0UqnUL0BP4
xrkvhB0XIJn82B3RMduK0h+VJlWblfxq5MTgWM9QREoYNo1/qJNeb6ZvQ8+/ObMa
UPg9d3XvDllIZc65dSE0ZWylA1Fmxe79ZxGYr/CsCKlewtOUZE/5fvk0Ri6boDD1
auylGaD63bh5qDbAebkLOU6czQiZ/CH6dy1l/GqnZXrGVVLncHXb6S6gxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCSmGTX0PCleNkyw+MPoMNIFzJSoMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSktZWk5mUThLVjQyVExENHctZ3cwZ1hNbEtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHw3GMA0G
CSqGSIb3DQEBCwUAA4IBAQBJRA9HAmMeTIVWB+HTeNPK5cpK18g9rGwj7xpgEGqs
Ve3EuasiW532m8bs5vZ3WGpnqVb6FnIkhusD3lS5GqpUAwHmFeA++wz1/lkQSIkV
148LHl5I81y6U8iwWM3g+UXU0azQ1cF3aOL5HusiI2ah45fomS6wkUo/jpXDB95t
CEiOAUjCJQwGz4E7CtbyzLzHxZNmAMBOUds8n+GkBbtIhSrqir56VMar/m/R81nL
ziIVpPJbTJVf4N2uv5pXEoBbBrqnV2VLe1Zlq4xHlqzaZPG0PZGPp8czmee7idfh
ELmbUGjFMx8sksk+J6RKQoNjtkiKMuf19GIOAsWpnfqk
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org