Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/zEuumeq2S4l9Heb3EYXyobVTvmc.roa
File: zEuumeq2S4l9Heb3EYXyobVTvmc.roa (raw, json)
Hash identifier: D14ATzfVH9HvJs/iuevZ/to39u+AHcTnEto97l9aT0s=
Subject key identifier: CC:4B:AE:99:EA:B6:4B:89:7D:1D:E6:F7:11:85:F2:A1:B5:53:BE:67
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0189C79F126F7B1283A09DDF610E59546264
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/zEuumeq2S4l9Heb3EYXyobVTvmc.roa
Signing time: Sat 05 Aug 2023 21:33:58 +0000
ROA not before: Sat 05 Aug 2023 21:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.31.232.0/24 maxlen: 24
81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
185.84.160.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c7:9f:12:6f:7b:12:83:a0:9d:df:61:0e:59:54:62:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Aug 5 21:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc4bae99eab64b897d1de6f71185f2a1b553be67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:86:8f:20:e4:4e:55:6a:2a:80:e5:1a:dd:
16:b7:6e:c6:1b:26:2f:2d:f5:f9:ae:26:e7:7b:be:
3d:a0:bb:51:d2:a4:a0:0f:7c:74:68:4e:6e:7d:3c:
4f:58:87:76:38:4e:1c:8d:a1:87:e3:7d:e4:39:bd:
04:ea:b6:91:2d:eb:7c:60:e5:d1:7b:d8:ca:36:47:
b8:9e:ad:7b:41:11:4d:30:a4:ba:50:4e:3f:68:4d:
16:5d:23:5f:73:e1:1b:73:a9:86:1a:68:88:6a:d6:
82:c1:aa:6a:76:7e:0f:a2:b8:73:e1:52:c3:46:6f:
df:18:ac:fb:b3:87:45:42:5d:70:6c:41:04:3c:f3:
44:a0:fc:70:9d:52:1e:93:56:92:3f:ce:6c:9a:da:
94:13:77:2d:27:b0:d8:30:23:3c:34:56:30:f3:ee:
d9:42:7b:73:e4:2a:a7:0c:c8:e4:f4:5a:8b:30:9b:
db:24:76:82:fa:0c:79:f1:d1:7d:23:ab:cb:8f:69:
a4:a9:ab:51:05:24:87:6f:78:ed:21:9b:07:fa:61:
b0:4a:8e:5c:1e:e7:7f:37:5a:d7:e6:e2:bc:c3:fe:
7d:24:ee:ef:aa:9d:ca:81:2d:81:52:0b:2b:9d:ae:
3c:35:3f:ef:f1:43:0c:d7:a1:8c:7a:16:7e:1f:2f:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4B:AE:99:EA:B6:4B:89:7D:1D:E6:F7:11:85:F2:A1:B5:53:BE:67
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/zEuumeq2S4l9Heb3EYXyobVTvmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.232.0/24
81.31.242.0-81.31.247.255
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:ac:f5:71:07:80:1b:75:e9:f6:81:44:10:9c:e9:ea:e2:db:
3e:06:61:af:2f:e9:eb:ea:b9:4b:91:b9:bc:24:80:cf:95:b0:
b7:c9:93:53:6c:95:a7:3b:26:bd:69:d0:d9:91:6c:a1:84:7f:
48:d5:f8:af:3e:d4:2d:17:03:fc:47:fc:5d:69:2d:bf:2c:c1:
dc:93:4c:8c:38:1f:15:8b:1b:7c:37:49:ad:64:98:af:6d:8e:
30:03:59:61:fe:8e:c4:99:19:dd:d3:45:6a:11:dd:89:f9:75:
3f:27:2c:87:a7:27:b4:53:64:c5:0f:69:eb:dc:23:23:07:92:
ec:df:3f:a3:77:e7:66:a9:da:d0:7e:59:63:d8:94:52:78:61:
a4:61:50:89:0e:a5:64:81:42:b5:ec:a2:59:ef:44:bb:c5:b4:
f5:76:04:9f:b1:bd:93:ab:a1:90:0c:ab:5a:c5:b4:6b:71:84:
81:95:7b:f8:60:3b:bf:43:d6:7c:e1:d6:77:b3:8d:76:d1:bf:
87:88:d9:6b:3a:6a:3e:3d:2a:56:eb:c2:f6:15:de:9e:45:0b:
27:8e:cd:3e:fc:f1:40:be:d0:15:2b:07:aa:ad:d2:02:c7:36:
74:37:42:d0:d7:f6:46:9c:66:d8:d2:5c:2c:26:12:dc:b3:de:
41:90:8e:8d
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYnHnxJvexKDoJ3fYQ5ZVGJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjMwODA1MjEzMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzRiYWU5OWVhYjY0Yjg5N2QxZGU2ZjcxMTg1ZjJhMWI1NTNiZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG+GjyDkTlVqKoDlGt0Wt27GGyYv
LfX5ribne749oLtR0qSgD3x0aE5ufTxPWId2OE4cjaGH433kOb0E6raRLet8YOXR
e9jKNke4nq17QRFNMKS6UE4/aE0WXSNfc+Ebc6mGGmiIataCwapqdn4Porhz4VLD
Rm/fGKz7s4dFQl1wbEEEPPNEoPxwnVIek1aSP85smtqUE3ctJ7DYMCM8NFYw8+7Z
Qntz5CqnDMjk9FqLMJvbJHaC+gx58dF9I6vLj2mkqatRBSSHb3jtIZsH+mGwSo5c
Hud/N1rX5uK8w/59JO7vqp3KgS2BUgsrna48NT/v8UMM16GMehZ+Hy86qQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMxLrpnqtkuJfR3m9xGF8qG1U75nMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvekV1dW1lcTJTNGw5SGViM0VZWHlvYlZUdm1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAUR/oMAwD
BAFRH/IDBANRH/ADBAG5VKAwDQYJKoZIhvcNAQELBQADggEBABus9XEHgBt16faB
RBCc6eri2z4GYa8v6evquUuRubwkgM+VsLfJk1Nslac7Jr1p0NmRbKGEf0jV+K8+
1C0XA/xH/F1pLb8swdyTTIw4HxWLG3w3Sa1kmK9tjjADWWH+jsSZGd3TRWoR3Yn5
dT8nLIenJ7RTZMUPaevcIyMHkuzfP6N352ap2tB+WWPYlFJ4YaRhUIkOpWSBQrXs
olnvRLvFtPV2BJ+xvZOroZAMq1rFtGtxhIGVe/hgO79D1nzh1nezjXbRv4eI2Ws6
aj49KlbrwvYV3p5FCyeOzT788UC+0BUrB6qt0gLHNnQ3QtDX9kacZtjSXCwmEtyz
3kGQjo0=
-----END CERTIFICATE-----
Generated at Tue Aug 22 06:54:50 2023 by rpki-client on console-fra.rpki-client.org