Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/p8p2vz_--7MFqUiTBEzl5eXv1UQ.roa
File: p8p2vz_--7MFqUiTBEzl5eXv1UQ.roa (raw, json)
Hash identifier: ez+32L4ZJyzmX8LFkMCLmTuN6oYqBsoUG+59njA1wTc=
Subject key identifier: A7:CA:76:BF:3F:FE:FB:B3:05:A9:48:93:04:4C:E5:E5:E5:EF:D5:44
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018F40280ABBF36FD2311DCE8432A3FCB2A3
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/p8p2vz_--7MFqUiTBEzl5eXv1UQ.roa
Signing time: Fri 03 May 2024 20:31:57 +0000
ROA not before: Fri 03 May 2024 20:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60086
IP address blocks: 81.31.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 18:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:28:0a:bb:f3:6f:d2:31:1d:ce:84:32:a3:fc:b2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: May 3 20:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7ca76bf3ffefbb305a94893044ce5e5e5efd544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b8:4f:e0:ed:11:bd:ec:57:5e:18:98:98:2a:
ff:81:2b:50:d7:8c:de:13:47:cb:22:8a:bf:4c:51:
5f:11:26:4e:99:76:9d:fa:af:8f:c8:bb:ce:c7:04:
77:3e:d4:4e:2a:52:85:50:1a:ef:20:42:77:24:74:
25:cd:21:bf:c7:99:a8:ce:81:2a:7d:55:bd:da:15:
ad:96:82:5e:5c:c4:72:d5:24:54:c0:8e:32:a4:87:
2b:91:81:19:ee:2a:38:cc:50:ef:b1:68:e5:c5:6b:
15:af:0c:9e:6e:1a:51:29:2b:00:8b:a1:db:4e:89:
d5:cf:4e:7c:24:b0:16:c9:ff:df:be:79:39:9f:0a:
b2:82:ad:ff:c7:5d:12:f1:c4:18:82:cb:ce:c3:33:
97:70:f8:dd:41:83:82:6a:f7:f3:48:81:b0:ac:4f:
b4:6f:f6:b9:b6:79:0a:1c:4b:7c:1f:9a:67:09:7e:
5b:82:37:0c:8e:52:b5:88:5a:cf:91:b1:11:f0:d0:
87:c4:d7:e1:a3:d3:54:b7:ef:83:2d:43:71:15:2d:
aa:ca:1b:4a:2b:ed:ad:3a:ec:34:90:2f:50:f4:18:
81:5c:12:c2:7e:0a:83:73:db:2e:ac:d7:f2:fb:18:
98:b7:db:a9:97:c7:aa:27:5b:ed:d6:6c:b3:59:a5:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CA:76:BF:3F:FE:FB:B3:05:A9:48:93:04:4C:E5:E5:E5:EF:D5:44
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/p8p2vz_--7MFqUiTBEzl5eXv1UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
Signature Algorithm: sha256WithRSAEncryption
db:5c:5b:d0:82:d9:10:05:93:3e:83:fe:c9:ff:85:17:13:01:
45:3b:89:d7:96:f1:d4:7e:21:3a:0c:a9:f0:8d:c2:6e:8e:75:
af:2c:c4:08:16:c6:72:78:34:f3:d9:41:70:94:31:74:5a:06:
ac:27:94:5f:cd:90:27:b6:2c:19:ee:35:29:8c:2f:be:0c:e0:
14:9f:a4:ea:6f:0a:2d:8d:8a:58:5b:68:87:03:dd:ff:3d:cb:
9e:fd:8c:e3:c9:60:73:dd:05:f8:a4:9f:6a:16:1d:b8:9f:a6:
bb:40:77:8f:89:2e:aa:cb:59:71:d3:7c:13:ee:97:8c:61:e0:
9b:74:68:3c:ab:04:d8:71:2c:31:6c:cb:93:2b:56:cf:31:c0:
bf:74:99:fe:8a:f3:2a:32:28:37:bf:e7:a7:33:4b:48:bf:bb:
5c:ac:31:5d:38:d0:95:5f:c7:41:8f:fc:31:48:e0:fd:3b:4f:
8b:37:a4:cd:30:64:f7:49:d4:6e:b0:65:0e:c7:b9:0f:38:b1:
84:b4:50:3b:80:6d:dd:de:bb:cf:b7:49:33:0d:bb:6f:0c:90:
23:af:69:c6:a4:d3:7d:27:89:f5:32:44:1b:5e:3d:1e:2b:40:
a0:7d:07:29:dc:08:5f:92:15:44:5f:79:bd:fc:8e:7d:d9:cc:
a2:5e:88:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9AKAq782/SMR3OhDKj/LKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjQwNTAzMjAzMTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2NhNzZiZjNmZmVmYmIzMDVhOTQ4OTMwNDRjZTVlNWU1ZWZkNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LhP4O0RvexXXhiYmCr/gStQ14ze
E0fLIoq/TFFfESZOmXad+q+PyLvOxwR3PtROKlKFUBrvIEJ3JHQlzSG/x5mozoEq
fVW92hWtloJeXMRy1SRUwI4ypIcrkYEZ7io4zFDvsWjlxWsVrwyebhpRKSsAi6Hb
TonVz058JLAWyf/fvnk5nwqygq3/x10S8cQYgsvOwzOXcPjdQYOCavfzSIGwrE+0
b/a5tnkKHEt8H5pnCX5bgjcMjlK1iFrPkbER8NCHxNfho9NUt++DLUNxFS2qyhtK
K+2tOuw0kC9Q9BiBXBLCfgqDc9surNfy+xiYt9upl8eqJ1vt1myzWaW21QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKfKdr8//vuzBalIkwRM5eXl79VEMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvcDhwMnZ6Xy0tN01GcVVpVEJFemw1ZVh2MVVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR/nMA0G
CSqGSIb3DQEBCwUAA4IBAQDbXFvQgtkQBZM+g/7J/4UXEwFFO4nXlvHUfiE6DKnw
jcJujnWvLMQIFsZyeDTz2UFwlDF0WgasJ5RfzZAntiwZ7jUpjC++DOAUn6Tqbwot
jYpYW2iHA93/Pcue/YzjyWBz3QX4pJ9qFh24n6a7QHePiS6qy1lx03wT7peMYeCb
dGg8qwTYcSwxbMuTK1bPMcC/dJn+ivMqMig3v+enM0tIv7tcrDFdONCVX8dBj/wx
SOD9O0+LN6TNMGT3SdRusGUOx7kPOLGEtFA7gG3d3rvPt0kzDbtvDJAjr2nGpNN9
J4n1MkQbXj0eK0CgfQcp3AhfkhVEX3m9/I592cyiXoh6
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:33 2024 by rpki-client on console-ams.rpki-client.org