Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/ercwDpmuuToabgh_6Ur1Jdh1evg.roa
File: ercwDpmuuToabgh_6Ur1Jdh1evg.roa (raw, json)
Hash identifier: nv5cP2BKBu3VQeZF2bAmdLxUhDb5YJaavxIxh1DLlJE=
Subject key identifier: 7A:B7:30:0E:99:AE:B9:3A:1A:6E:08:7F:E9:4A:F5:25:D8:75:7A:F8
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 01856DDD3C3BD1EB7E484987755F2B681300
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/ercwDpmuuToabgh_6Ur1Jdh1evg.roa
Signing time: Sun 01 Jan 2023 15:04:53 +0000
ROA not before: Sun 01 Jan 2023 15:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207416
IP address blocks: 31.129.250.0/24 maxlen: 24
31.129.249.0/24 maxlen: 24
31.129.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Aug 2023 17:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:3c:3b:d1:eb:7e:48:49:87:75:5f:2b:68:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Jan 1 15:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ab7300e99aeb93a1a6e087fe94af525d8757af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:da:59:14:7d:80:83:91:c0:c2:0f:ce:71:
34:d9:2b:28:96:83:7c:ac:d7:09:14:e0:79:72:1d:
d0:46:cd:35:78:02:b8:a3:31:9d:73:ef:c2:92:df:
37:6f:71:43:57:36:74:4a:6b:be:d9:65:11:9e:29:
3e:ea:16:f3:74:d6:b6:e7:fd:4c:af:dd:e8:34:cd:
82:b2:3e:c6:11:24:69:46:8f:88:75:e2:9c:88:e7:
d1:b0:b0:d0:3f:b9:ac:18:e7:38:2c:7f:49:e9:e8:
9b:c1:a8:b6:2c:85:02:42:a6:1b:99:08:12:fd:76:
4e:f4:27:fa:d3:b2:f0:c1:2f:5f:86:f8:5b:6b:73:
c3:00:bc:34:ff:d9:05:19:c4:66:4a:ed:d4:95:94:
cc:3a:d0:16:06:1a:7f:d4:c7:e5:58:57:ef:cc:28:
45:e6:18:1f:dd:cc:f0:41:99:5e:77:e8:ac:45:f7:
ad:00:9c:9b:89:8d:c1:ad:70:cb:36:62:fe:49:78:
23:29:b5:9b:23:53:8a:1f:ad:e5:0f:f0:46:ef:bb:
8e:ff:4e:5b:66:07:13:6c:2e:36:93:6d:ae:ea:f2:
41:83:00:0a:6b:2f:66:27:fb:bf:bd:1c:fe:2b:4f:
8a:9b:9b:38:6b:c4:35:01:12:ac:e7:70:1d:28:ca:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B7:30:0E:99:AE:B9:3A:1A:6E:08:7F:E9:4A:F5:25:D8:75:7A:F8
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/ercwDpmuuToabgh_6Ur1Jdh1evg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.248.0-31.129.250.255
Signature Algorithm: sha256WithRSAEncryption
ac:dd:9b:6e:71:47:29:b6:9c:6f:59:dc:f5:bd:e9:47:0e:28:
d2:aa:48:8a:2c:dc:56:71:43:58:7c:95:a9:4c:5c:85:3e:57:
de:9c:4f:7d:15:74:36:42:14:a0:60:91:53:c8:ce:9f:a2:f4:
89:f2:b8:ff:01:38:65:d6:48:33:1a:93:30:fe:fd:79:2d:8c:
7a:5c:f8:47:80:12:2f:e2:5f:48:51:34:6d:32:ee:c9:7a:76:
d4:c1:f0:07:1e:cc:3b:47:88:40:a0:f3:f8:39:8c:20:34:d4:
e9:97:e6:0a:e3:fa:7a:62:1d:fe:56:de:2a:cd:b3:9e:20:93:
96:10:b4:cd:3d:5f:d2:cf:32:03:43:f0:e6:1a:0f:6e:c3:dc:
e3:4f:04:73:59:6a:61:20:c8:b5:c4:15:28:be:b1:93:49:d3:
65:53:a9:1d:43:cd:2c:c1:fa:af:39:72:43:32:0d:49:2f:11:
4c:a2:dc:59:a1:5b:75:7b:f8:ec:97:75:59:07:b9:da:ab:27:
ea:62:e8:12:97:6f:97:4c:dd:cf:8f:3c:f0:f5:5e:9d:57:e5:
3d:e4:7b:4c:62:31:87:6b:ff:dd:56:40:c1:f3:1e:ab:38:c6:
c7:cf:6e:5b:03:e7:34:2e:db:c0:0d:3e:c6:41:9d:e7:73:23:
2a:00:47:0a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVt3Tw70et+SEmHdV8raBMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl
ZTA4ZTAwHhcNMjMwMTAxMTUwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWI3MzAwZTk5YWViOTNhMWE2ZTA4N2ZlOTRhZjUyNWQ4NzU3YWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDzaWRR9gIORwMIPznE02SsoloN8
rNcJFOB5ch3QRs01eAK4ozGdc+/Ckt83b3FDVzZ0Smu+2WURnik+6hbzdNa25/1M
r93oNM2Csj7GESRpRo+IdeKciOfRsLDQP7msGOc4LH9J6eibwai2LIUCQqYbmQgS
/XZO9Cf607LwwS9fhvhba3PDALw0/9kFGcRmSu3UlZTMOtAWBhp/1MflWFfvzChF
5hgf3czwQZled+isRfetAJybiY3BrXDLNmL+SXgjKbWbI1OKH63lD/BG77uO/05b
ZgcTbC42k22u6vJBgwAKay9mJ/u/vRz+K0+Km5s4a8Q1ARKs53AdKMrr0wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHq3MA6Zrrk6Gm4If+lK9SXYdXr4MB8GA1UdIwQY
MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt
ODYzYzliM2QzMmIwLzEvZXJjd0RwbXV1VG9hYmdoXzZVcjFKZGgxZXZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw
LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMfgfgD
BAAfgfowDQYJKoZIhvcNAQELBQADggEBAKzdm25xRym2nG9Z3PW96UcOKNKqSIos
3FZxQ1h8lalMXIU+V96cT30VdDZCFKBgkVPIzp+i9InyuP8BOGXWSDMakzD+/Xkt
jHpc+EeAEi/iX0hRNG0y7sl6dtTB8AcezDtHiECg8/g5jCA01OmX5grj+npiHf5W
3irNs54gk5YQtM09X9LPMgND8OYaD27D3ONPBHNZamEgyLXEFSi+sZNJ02VTqR1D
zSzB+q85ckMyDUkvEUyi3FmhW3V7+OyXdVkHudqrJ+pi6BKXb5dM3c+PPPD1Xp1X
5T3ke0xiMYdr/91WQMHzHqs4xsfPblsD5zQu28ANPsZBnedzIyoARwo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:10 2024 by rpki-client on console-fra.rpki-client.org