Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/EthgKfW1Fn8qvv-BVQ-a9AnH9SQ.roa
File: EthgKfW1Fn8qvv-BVQ-a9AnH9SQ.roa (raw, json)
Hash identifier: NxMckf6twYI2VKVp3J58EiIhJC9FbMRhTPJY8CJWknA=
Subject key identifier: 12:D8:60:29:F5:B5:16:7F:2A:BE:FF:81:55:0F:9A:F4:09:C7:F5:24
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 018A09C0801AF4192537BB936ED1569F7A7D
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/EthgKfW1Fn8qvv-BVQ-a9AnH9SQ.roa
Signing time: Fri 18 Aug 2023 17:45:25 +0000
ROA not before: Fri 18 Aug 2023 17:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50012
IP address blocks: 31.129.232.0/24 maxlen: 24
31.129.233.0/24 maxlen: 24
31.129.235.0/24 maxlen: 24
31.129.234.0/24 maxlen: 24
213.5.192.0/24 maxlen: 24
213.5.195.0/24 maxlen: 24
213.5.193.0/24 maxlen: 24
213.5.194.0/24 maxlen: 24
31.129.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:09:c0:80:1a:f4:19:25:37:bb:93:6e:d1:56:9f:7a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Aug 18 17:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12d86029f5b5167f2abeff81550f9af409c7f524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:93:6f:d3:d0:e8:a3:a7:a8:2f:fc:2f:09:ad:
af:69:ee:ae:03:ea:4f:90:58:06:b8:03:8c:4f:4e:
69:64:95:df:ab:cb:9a:db:76:f1:cb:a4:48:a4:29:
ba:ad:9d:4d:91:72:d0:de:e0:c0:3b:72:9b:16:a2:
a9:df:35:58:51:b2:63:04:b9:1d:cf:7d:11:34:2c:
60:5f:29:9b:0a:dc:88:ca:53:c0:19:42:36:c8:d0:
a3:bd:85:44:4a:35:27:c1:16:56:73:6d:68:0c:30:
00:12:3a:cb:05:e0:b1:87:2e:91:58:44:41:7d:ab:
c6:25:ce:98:45:b2:b0:9d:28:e5:c0:78:fb:c8:4b:
6e:d8:f4:84:c4:58:1f:c8:1b:0f:b7:33:98:cb:30:
a0:e9:51:5e:df:d8:37:5c:c7:d5:3d:a0:8f:f8:8e:
27:73:3e:fe:92:3f:a1:c3:34:08:f1:2e:b2:19:97:
e4:48:0f:f3:39:62:33:26:f3:0b:37:98:db:31:5c:
4d:73:38:25:f5:87:bf:6b:7b:2a:bf:98:84:c8:a2:
17:65:7c:3a:d7:c5:ba:07:06:15:e6:31:f8:cb:e9:
72:44:ad:2d:d2:d4:b8:40:88:6f:41:c2:eb:c7:ef:
72:de:49:e3:6e:04:e8:2c:9f:0d:46:67:63:98:87:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D8:60:29:F5:B5:16:7F:2A:BE:FF:81:55:0F:9A:F4:09:C7:F5:24
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/EthgKfW1Fn8qvv-BVQ-a9AnH9SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.232.0/22
31.129.251.0/24
213.5.192.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:63:03:c3:79:3c:98:fb:80:93:44:e7:65:4d:76:d6:b5:7d:
b8:4e:15:ac:be:84:1a:b0:b8:3d:94:22:26:a3:42:48:78:8a:
7e:df:70:89:c1:6f:0d:9a:57:3a:4f:d9:52:b7:7f:16:54:f9:
8d:a3:cf:f3:91:df:75:b5:06:94:eb:30:25:21:33:c3:3d:5c:
e1:df:b7:23:0e:dd:52:22:ca:7b:5c:c2:b4:c7:ba:b8:48:a7:
30:b5:0c:0f:ef:c5:34:c0:36:6f:b8:43:77:75:1e:98:50:a0:
5f:7a:f7:86:8b:e6:91:af:4b:a7:51:29:0d:22:fc:e4:a5:07:
ba:25:5b:ed:89:04:49:de:24:c4:48:a3:b1:64:a9:5a:4c:e8:
2e:04:53:6b:18:f8:ee:b4:2f:7a:e8:9a:45:e0:f4:5b:c0:75:
c2:5d:63:6d:ce:8e:5c:c3:c2:c1:c6:33:bc:00:4c:e0:1f:46:
7d:df:18:8f:2f:bb:ae:4c:de:cc:e6:25:91:a4:fb:83:ce:26:
81:a4:c2:ef:92:d1:66:41:ad:38:a9:12:bb:df:bc:84:c5:1b:
f3:f6:41:8c:ca:bc:eb:23:ad:9e:52:76:70:0a:45:ee:38:31:
91:10:3f:d5:82:a3:3c:33:ae:8f:c4:19:e6:1b:74:73:a6:87:
be:6b:c4:78
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYoJwIAa9BklN7uTbtFWn3p9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl
ZTA4ZTAwHhcNMjMwODE4MTc0NTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmQ4NjAyOWY1YjUxNjdmMmFiZWZmODE1NTBmOWFmNDA5YzdmNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZNv09Doo6eoL/wvCa2vae6uA+pP
kFgGuAOMT05pZJXfq8ua23bxy6RIpCm6rZ1NkXLQ3uDAO3KbFqKp3zVYUbJjBLkd
z30RNCxgXymbCtyIylPAGUI2yNCjvYVESjUnwRZWc21oDDAAEjrLBeCxhy6RWERB
favGJc6YRbKwnSjlwHj7yEtu2PSExFgfyBsPtzOYyzCg6VFe39g3XMfVPaCP+I4n
cz7+kj+hwzQI8S6yGZfkSA/zOWIzJvMLN5jbMVxNczgl9Ye/a3sqv5iEyKIXZXw6
18W6BwYV5jH4y+lyRK0t0tS4QIhvQcLrx+9y3knjbgToLJ8NRmdjmIewbwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBLYYCn1tRZ/Kr7/gVUPmvQJx/UkMB8GA1UdIwQY
MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt
ODYzYzliM2QzMmIwLzEvRXRoZ0tmVzFGbjhxdnYtQlZRLWE5QW5IOVNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw
LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCH4HoAwQA
H4H7AwQC1QXAMA0GCSqGSIb3DQEBCwUAA4IBAQCNYwPDeTyY+4CTROdlTXbWtX24
ThWsvoQasLg9lCImo0JIeIp+33CJwW8Nmlc6T9lSt38WVPmNo8/zkd91tQaU6zAl
ITPDPVzh37cjDt1SIsp7XMK0x7q4SKcwtQwP78U0wDZvuEN3dR6YUKBfeveGi+aR
r0unUSkNIvzkpQe6JVvtiQRJ3iTESKOxZKlaTOguBFNrGPjutC966JpF4PRbwHXC
XWNtzo5cw8LBxjO8AEzgH0Z93xiPL7uuTN7M5iWRpPuDziaBpMLvktFmQa04qRK7
37yExRvz9kGMyrzrI62eUnZwCkXuODGRED/VgqM8M66PxBnmG3Rzpoe+a8R4
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:57 2024 by rpki-client on console-ams.rpki-client.org