Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/h5vyObTaF-MaxBEg0nMC_joPI0E.roa
File: h5vyObTaF-MaxBEg0nMC_joPI0E.roa (raw, json)
Hash identifier: RzwwCUgAaxZS5d8LtFwBCIxHeYbWWLLBqdbT2JtxdKM=
Subject key identifier: 87:9B:F2:39:B4:DA:17:E3:1A:C4:11:20:D2:73:02:FE:3A:0F:23:41
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018D01C985EF3FECD0CA6B943DF124075763
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/h5vyObTaF-MaxBEg0nMC_joPI0E.roa
Signing time: Sat 13 Jan 2024 07:46:40 +0000
ROA not before: Sat 13 Jan 2024 07:46:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57235
IP address blocks: 81.31.224.0/22 maxlen: 24
81.31.233.0/24 maxlen: 24
81.31.228.0/23 maxlen: 24
81.31.230.0/24 maxlen: 24
81.31.234.0/24 maxlen: 24
81.31.234.0/23 maxlen: 24
81.31.235.0/24 maxlen: 24
81.31.236.0/24 maxlen: 24
81.31.236.0/22 maxlen: 24
81.31.238.0/24 maxlen: 24
81.31.240.0/23 maxlen: 24
81.31.248.0/22 maxlen: 24
81.31.250.0/24 maxlen: 24
81.31.251.0/24 maxlen: 24
2a05:a6c7:ffff:ff00::/56 maxlen: 64
2a05:a6c0::/56 maxlen: 64
Validation: Failed, certificate revoked on Tue 06 Feb 2024 07:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:01:c9:85:ef:3f:ec:d0:ca:6b:94:3d:f1:24:07:57:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 13 07:46:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=879bf239b4da17e31ac41120d27302fe3a0f2341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:39:a1:9e:a4:1a:82:0b:72:fe:5f:f8:1d:
93:d8:7c:32:51:85:e2:42:3a:f7:30:26:42:31:0c:
46:cd:01:66:d2:62:ad:8a:8d:6a:2a:ed:78:ad:b6:
45:f0:49:35:ac:bb:fd:28:2c:e0:70:9c:41:4f:db:
c7:57:6f:e4:46:5e:f6:08:30:40:f5:a1:e1:45:46:
a7:fb:cd:c6:07:15:96:1b:bf:2f:d8:e0:9d:48:24:
7d:72:ea:36:44:91:5a:84:d0:eb:a2:3c:46:de:49:
34:82:b0:2d:ca:bf:7e:82:57:24:ed:84:77:aa:30:
e3:8d:5c:e5:4f:f5:71:47:39:e9:77:e7:f2:aa:c7:
ba:6e:87:9b:e1:b0:7e:71:7c:72:94:ab:b2:37:c5:
8f:10:90:f2:66:1e:7a:6f:42:d6:62:eb:6c:7b:6e:
58:c5:14:86:e3:2e:92:e7:a2:12:a6:07:ff:84:85:
fc:da:20:73:49:ff:0b:e5:e1:9a:e6:fc:d4:4d:24:
cf:c9:fd:a8:3d:e7:9e:44:c5:d9:58:c3:5c:bc:dc:
f7:33:d6:a9:95:15:a4:4f:4d:83:31:ee:f0:06:37:
4e:3a:eb:3c:b3:2e:b0:45:9f:b0:ac:d5:6e:53:d6:
0d:92:3f:1c:55:99:d3:98:3b:03:85:e9:fa:64:3c:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:F2:39:B4:DA:17:E3:1A:C4:11:20:D2:73:02:FE:3A:0F:23:41
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/h5vyObTaF-MaxBEg0nMC_joPI0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.224.0-81.31.230.255
81.31.233.0-81.31.241.255
81.31.248.0/22
IPv6:
2a05:a6c0::/56
2a05:a6c7:ffff:ff00::/56
Signature Algorithm: sha256WithRSAEncryption
e0:99:79:cf:fd:94:f0:0c:31:26:ab:ec:e7:b2:14:5b:57:f7:
d0:5c:0c:17:bf:dc:68:3c:dc:5d:07:b1:e6:34:d0:6c:92:b3:
c6:a7:c1:3b:30:eb:6f:ab:d8:97:cf:57:00:af:25:c8:4f:a5:
70:b0:60:a0:e7:ba:a0:4d:c8:17:de:b8:e0:84:68:f2:89:5f:
d0:0a:50:cf:d7:c2:2f:4f:d0:67:08:b7:eb:05:f4:ed:98:2c:
a6:1b:03:94:96:ca:d1:54:45:1d:7a:1d:e3:2c:44:76:c2:c6:
3f:6b:83:9d:73:98:0b:d0:53:0e:5c:94:eb:a4:d5:db:21:2a:
4c:eb:13:a2:21:70:d1:ef:25:57:23:2c:34:09:ce:92:81:49:
74:34:86:dd:b8:a4:1b:9a:a4:80:9b:b9:5a:c8:b9:72:08:cb:
18:61:19:78:03:9a:85:ef:70:8d:54:b7:e1:8c:3d:46:08:60:
39:47:d1:41:e3:2a:93:60:96:da:fb:f2:ca:36:ca:85:1a:7b:
a0:ef:d6:4f:de:98:68:28:6f:b6:04:e9:14:01:de:f1:38:29:
4a:86:70:fc:b9:ac:8a:ee:58:48:bb:b6:f7:bf:02:98:44:4f:
0f:81:df:a3:47:b9:e4:d9:e1:34:a5:c7:b4:d4:59:51:fc:a9:
87:97:0c:cb
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAY0ByYXvP+zQymuUPfEkB1djMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjQwMTEzMDc0NjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzliZjIzOWI0ZGExN2UzMWFjNDExMjBkMjczMDJmZTNhMGYyMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR85oZ6kGoILcv5f+B2T2HwyUYXi
Qjr3MCZCMQxGzQFm0mKtio1qKu14rbZF8Ek1rLv9KCzgcJxBT9vHV2/kRl72CDBA
9aHhRUan+83GBxWWG78v2OCdSCR9cuo2RJFahNDrojxG3kk0grAtyr9+glck7YR3
qjDjjVzlT/VxRznpd+fyqse6boeb4bB+cXxylKuyN8WPEJDyZh56b0LWYutse25Y
xRSG4y6S56ISpgf/hIX82iBzSf8L5eGa5vzUTSTPyf2oPeeeRMXZWMNcvNz3M9ap
lRWkT02DMe7wBjdOOus8sy6wRZ+wrNVuU9YNkj8cVZnTmDsDhen6ZDyNqQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFIeb8jm02hfjGsQRINJzAv46DyNBMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvaDV2eU9iVGFGLU1heEJFZzBuTUNfam9QSTBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAoBAIAATAiMAwDBAVRH+AD
BABRH+YwDAMEAFEf6QMEAVEf8AMEAlEf+DAaBAIAAjAUAwgAKgWmwAAAAAMIACoF
psf///8wDQYJKoZIhvcNAQELBQADggEBAOCZec/9lPAMMSar7OeyFFtX99BcDBe/
3Gg83F0HseY00GySs8anwTsw62+r2JfPVwCvJchPpXCwYKDnuqBNyBfeuOCEaPKJ
X9AKUM/Xwi9P0GcIt+sF9O2YLKYbA5SWytFURR16HeMsRHbCxj9rg51zmAvQUw5c
lOuk1dshKkzrE6IhcNHvJVcjLDQJzpKBSXQ0ht24pBuapICbuVrIuXIIyxhhGXgD
moXvcI1Ut+GMPUYIYDlH0UHjKpNgltr78so2yoUae6Dv1k/emGgob7YE6RQB3vE4
KUqGcPy5rIruWEi7tve/AphETw+B36NHueTZ4TSlx7TUWVH8qYeXDMs=
-----END CERTIFICATE-----
Generated at Tue Feb 6 12:06:56 2024 by rpki-client on console-ams.rpki-client.org