Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_Sfr2eu0-fq6gkDdQ85dJae5ixE.roa
File: _Sfr2eu0-fq6gkDdQ85dJae5ixE.roa (raw, json)
Hash identifier: AcAtxtZ/l55Pg5eT7yQTn4Wc0l7k52KIe6AcSqy7PQ4=
Subject key identifier: FD:27:EB:D9:EB:B4:F9:FA:BA:82:40:DD:43:CE:5D:25:A7:B9:8B:11
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019054449577DE8F1E5C1D80C878F66B6E5F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_Sfr2eu0-fq6gkDdQ85dJae5ixE.roa
Signing time: Wed 26 Jun 2024 11:18:19 +0000
ROA not before: Wed 26 Jun 2024 11:18:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48584
IP address blocks: 31.13.224.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.166.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:44:95:77:de:8f:1e:5c:1d:80:c8:78:f6:6b:6e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 26 11:18:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd27ebd9ebb4f9faba8240dd43ce5d25a7b98b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:9e:0a:64:78:33:07:e4:d1:9a:ef:ef:ff:
26:19:a4:99:05:a9:94:1e:2c:9e:6a:9d:89:55:85:
d9:ef:c0:b0:f5:bd:cc:1b:ef:d4:de:2a:ee:34:4a:
32:b1:5f:93:ef:42:d0:18:b1:e9:f8:2f:aa:6e:20:
9e:06:e9:67:43:50:cc:e1:d7:de:ee:22:2f:71:d5:
59:83:9a:9f:ee:30:26:89:01:c6:b3:1d:c0:02:58:
87:0e:2c:3e:20:f0:06:6a:71:de:5e:e9:da:01:13:
80:a8:5b:61:10:ae:6e:a6:55:c9:d9:79:c1:c1:fa:
76:8c:36:c1:6f:29:64:47:97:19:2e:4c:9c:fe:b2:
d6:ca:0a:2d:52:6d:bf:87:d7:90:16:c3:b5:b8:b5:
ee:f5:7f:7f:26:b5:22:8c:d5:01:a4:de:fa:2c:9a:
d9:ec:8c:21:d2:4d:81:1b:58:0a:25:54:dc:14:24:
4a:40:85:8f:c2:9b:fb:03:5f:0e:41:2b:9f:b7:e0:
a8:4c:0d:18:b7:43:2a:7a:ff:37:c1:69:53:38:72:
92:f6:d3:9b:ba:7d:79:00:a1:06:88:0c:6b:2e:84:
be:d2:27:b2:bd:6e:b2:df:1e:80:27:5e:e9:e6:7e:
63:ae:b6:e7:c0:fe:53:d9:7c:44:7e:75:77:49:aa:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:27:EB:D9:EB:B4:F9:FA:BA:82:40:DD:43:CE:5D:25:A7:B9:8B:11
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_Sfr2eu0-fq6gkDdQ85dJae5ixE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
93.123.109.0/24
94.156.104.0/23
94.156.166.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:30:36:64:d0:e6:1c:b0:24:e0:dc:8c:7b:8e:7d:15:67:9d:
d3:c4:b1:13:ca:1d:4c:d7:7e:30:83:82:f5:3e:0a:c5:00:1b:
57:28:61:7b:63:d3:6f:9f:13:97:6b:a2:01:03:98:99:ee:ab:
ff:fd:2e:e2:30:e7:a6:82:6f:76:4c:e0:b2:59:50:4c:fd:9a:
c3:f5:75:82:14:3c:a8:ce:e2:91:97:08:7d:d8:fb:4e:be:f7:
76:bd:14:6b:33:32:7d:88:a8:a9:70:a5:de:0c:49:84:36:3e:
8c:d7:87:8c:0f:4e:80:93:cc:b4:7a:a2:20:f3:02:88:cb:60:
cf:c8:eb:ab:49:65:ef:0b:07:ea:a8:3c:da:da:0c:c8:30:39:
7f:0e:3b:a0:df:af:55:a9:f0:6b:e4:aa:71:8c:ab:6e:06:e9:
67:20:5e:75:b5:a7:30:c2:56:6b:9d:59:e9:5a:5f:fe:96:82:
05:af:0a:ff:14:01:c2:87:ac:26:52:35:bb:13:40:0e:71:02:
4b:96:9c:cf:eb:7c:02:b8:eb:33:1f:fe:cb:ba:5b:9c:f6:ce:
90:b8:cd:d6:81:22:08:dc:7e:78:74:52:2a:a4:7d:66:5d:48:
49:dc:ff:18:ef:cd:c4:19:64:ee:d8:25:18:43:eb:0c:bc:0b:
96:89:6f:77
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZBURJV33o8eXB2AyHj2a25fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNjI2MTExODE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDI3ZWJkOWViYjRmOWZhYmE4MjQwZGQ0M2NlNWQyNWE3Yjk4YjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZSeCmR4Mwfk0Zrv7/8mGaSZBamU
Hiyeap2JVYXZ78Cw9b3MG+/U3iruNEoysV+T70LQGLHp+C+qbiCeBulnQ1DM4dfe
7iIvcdVZg5qf7jAmiQHGsx3AAliHDiw+IPAGanHeXunaAROAqFthEK5uplXJ2XnB
wfp2jDbBbylkR5cZLkyc/rLWygotUm2/h9eQFsO1uLXu9X9/JrUijNUBpN76LJrZ
7Iwh0k2BG1gKJVTcFCRKQIWPwpv7A18OQSuft+CoTA0Yt0Mqev83wWlTOHKS9tOb
un15AKEGiAxrLoS+0ieyvW6y3x6AJ17p5n5jrrbnwP5T2XxEfnV3Sap/bQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFP0n69nrtPn6uoJA3UPOXSWnuYsRMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvX1NmcjJldTAtZnE2Z2tEZFE4NWRKYWU1aXhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHw3gAwQA
XXttAwQBXpxoAwQBXpymMA0GCSqGSIb3DQEBCwUAA4IBAQCoMDZk0OYcsCTg3Ix7
jn0VZ53TxLETyh1M134wg4L1PgrFABtXKGF7Y9NvnxOXa6IBA5iZ7qv//S7iMOem
gm92TOCyWVBM/ZrD9XWCFDyozuKRlwh92PtOvvd2vRRrMzJ9iKipcKXeDEmENj6M
14eMD06Ak8y0eqIg8wKIy2DPyOurSWXvCwfqqDza2gzIMDl/Djug369VqfBr5Kpx
jKtuBulnIF51tacwwlZrnVnpWl/+loIFrwr/FAHCh6wmUjW7E0AOcQJLlpzP63wC
uOszH/7Luluc9s6QuM3WgSII3H54dFIqpH1mXUhJ3P8Y783EGWTu2CUYQ+sMvAuW
iW93
-----END CERTIFICATE-----
Generated at Thu Sep 5 07:58:47 2024 by rpki-client on console-fra.rpki-client.org