Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/ghCl8YV-l6i_xBrG82TDscIDADs.roa
File: ghCl8YV-l6i_xBrG82TDscIDADs.roa (raw, json)
Hash identifier: uYRdlOLT5WYpgUDGXd3zGNPuXvkHH7d3zwyadg6aE+A=
Subject key identifier: 82:10:A5:F1:85:7E:97:A8:BF:C4:1A:C6:F3:64:C3:B1:C2:03:00:3B
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 01874E03F3033593525E79A060A54AB47F05
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/ghCl8YV-l6i_xBrG82TDscIDADs.roa
Signing time: Tue 04 Apr 2023 20:44:54 +0000
ROA not before: Tue 04 Apr 2023 20:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56716
IP address blocks: 31.129.240.0/22 maxlen: 22
31.129.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4e:03:f3:03:35:93:52:5e:79:a0:60:a5:4a:b4:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Apr 4 20:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8210a5f1857e97a8bfc41ac6f364c3b1c203003b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6f:f0:22:a6:b1:29:43:2f:d1:b5:c3:9a:bc:
52:e1:68:f4:b5:67:cd:30:54:58:1b:d4:48:ca:35:
c5:7d:05:02:0a:ae:f7:85:25:1d:4d:2b:c1:4c:d3:
6c:48:9c:c7:08:7b:a4:46:46:fe:43:00:8c:1e:a4:
5e:7b:27:b2:2f:1c:a7:e5:b0:2e:d6:35:bc:8c:56:
61:8f:27:f5:01:f8:68:76:e2:13:36:be:81:fb:f4:
af:83:2a:76:a3:5a:2b:de:de:82:5f:40:61:93:11:
0b:84:0b:e7:13:f2:ba:2c:4b:88:6e:d4:78:16:e7:
63:89:1c:5e:a5:66:02:88:18:d7:bd:cf:ff:c9:96:
32:e6:83:99:7d:39:c1:45:86:d2:31:97:e0:98:b5:
0c:af:aa:09:08:4f:6d:e0:ef:5e:99:44:15:cf:90:
31:c0:ea:dd:5f:9d:89:4d:21:7f:4f:72:79:21:56:
1f:36:8b:13:22:a3:fb:ca:3d:4d:20:3b:ac:23:6b:
c7:c6:80:eb:9e:35:a3:6a:a6:26:7b:02:33:2f:9a:
3a:bb:b8:04:a4:5f:c5:92:31:84:37:5b:f5:f4:13:
f5:ab:29:0c:06:73:38:c6:f3:bc:ea:9a:bc:c2:6e:
12:96:0f:eb:77:e8:11:9e:6d:4d:50:fc:f2:eb:ff:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:10:A5:F1:85:7E:97:A8:BF:C4:1A:C6:F3:64:C3:B1:C2:03:00:3B
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/ghCl8YV-l6i_xBrG82TDscIDADs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.236.0-31.129.243.255
Signature Algorithm: sha256WithRSAEncryption
51:07:f5:19:0c:f0:3f:85:a7:0f:de:5b:ca:d0:b8:92:e1:fa:
2a:95:cc:d5:de:14:4e:eb:b1:4b:a2:e6:b5:df:9b:72:42:d9:
c3:9e:f2:f6:5a:d6:a7:a5:10:c4:ab:60:81:96:ba:b8:2a:24:
e0:ce:fe:13:e1:2b:f5:05:c7:99:fe:97:13:eb:22:94:60:ea:
14:75:80:c0:7c:0f:08:9a:04:3b:a1:f4:93:fa:7a:5a:fc:1f:
28:a9:0a:e3:a5:8a:13:8f:ed:3b:81:22:4e:8f:ff:15:43:79:
11:71:f8:e3:ac:e5:00:01:0a:e6:aa:02:39:ae:f2:6f:77:89:
3c:72:0d:95:59:61:15:be:f1:d7:84:52:a0:bf:0f:96:57:48:
b7:33:5a:21:6c:50:90:08:e0:67:27:39:48:19:92:83:bc:3a:
b5:4b:ea:a3:b5:70:a7:65:2e:2c:00:5b:5b:c2:a5:c4:29:95:
fb:e6:12:a3:65:5e:eb:05:ef:0f:cc:d8:cf:04:54:8e:b1:fb:
c2:73:d4:50:ed:fc:3a:01:19:2b:4f:81:cc:6f:74:34:bc:14:
ff:c3:6c:38:14:8d:c0:11:22:43:71:a1:c4:f6:ad:27:35:cf:
f6:64:2f:fa:67:4d:12:75:b1:9a:52:9a:b3:85:88:83:5d:a8:
84:c2:f2:e0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYdOA/MDNZNSXnmgYKVKtH8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl
ZTA4ZTAwHhcNMjMwNDA0MjA0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjEwYTVmMTg1N2U5N2E4YmZjNDFhYzZmMzY0YzNiMWMyMDMwMDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2/wIqaxKUMv0bXDmrxS4Wj0tWfN
MFRYG9RIyjXFfQUCCq73hSUdTSvBTNNsSJzHCHukRkb+QwCMHqReeyeyLxyn5bAu
1jW8jFZhjyf1AfhoduITNr6B+/Svgyp2o1or3t6CX0BhkxELhAvnE/K6LEuIbtR4
FudjiRxepWYCiBjXvc//yZYy5oOZfTnBRYbSMZfgmLUMr6oJCE9t4O9emUQVz5Ax
wOrdX52JTSF/T3J5IVYfNosTIqP7yj1NIDusI2vHxoDrnjWjaqYmewIzL5o6u7gE
pF/FkjGEN1v19BP1qykMBnM4xvO86pq8wm4Slg/rd+gRnm1NUPzy6/8eCQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIIQpfGFfpeov8QaxvNkw7HCAwA7MB8GA1UdIwQY
MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt
ODYzYzliM2QzMmIwLzEvZ2hDbDhZVi1sNmlfeEJyRzgyVERzY0lEQURzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw
LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAIfgewD
BAIfgfAwDQYJKoZIhvcNAQELBQADggEBAFEH9RkM8D+Fpw/eW8rQuJLh+iqVzNXe
FE7rsUui5rXfm3JC2cOe8vZa1qelEMSrYIGWurgqJODO/hPhK/UFx5n+lxPrIpRg
6hR1gMB8DwiaBDuh9JP6elr8HyipCuOlihOP7TuBIk6P/xVDeRFx+OOs5QABCuaq
Ajmu8m93iTxyDZVZYRW+8deEUqC/D5ZXSLczWiFsUJAI4GcnOUgZkoO8OrVL6qO1
cKdlLiwAW1vCpcQplfvmEqNlXusF7w/M2M8EVI6x+8Jz1FDt/DoBGStPgcxvdDS8
FP/DbDgUjcARIkNxocT2rSc1z/ZkL/pnTRJ1sZpSmrOFiINdqITC8uA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:57 2024 by rpki-client on console-ams.rpki-client.org