Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/1DyyazvgE5KzkSxGFgS2uz4diLU.roa
File: 1DyyazvgE5KzkSxGFgS2uz4diLU.roa (raw, json)
Hash identifier: 3fGhyTbv7s7WutioJdy6qnqB8t2jCTEIq9sHO6s7XVw=
Subject key identifier: D4:3C:B2:6B:3B:E0:13:92:B3:91:2C:46:16:04:B6:BB:3E:1D:88:B5
Certificate issuer: /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Certificate serial: 0186DDB41CE08D4D9B1E4ED4C26D59B32515
Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/1DyyazvgE5KzkSxGFgS2uz4diLU.roa
Signing time: Tue 14 Mar 2023 01:20:13 +0000
ROA not before: Tue 14 Mar 2023 01:20:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 31.204.26.0/24 maxlen: 24
31.204.26.0/23 maxlen: 23
31.204.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Mar 2023 01:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dd:b4:1c:e0:8d:4d:9b:1e:4e:d4:c2:6d:59:b3:25:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Validity
Not Before: Mar 14 01:20:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d43cb26b3be01392b3912c461604b6bb3e1d88b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:b1:13:fa:e0:28:25:eb:00:7b:da:a5:ff:
63:40:8e:8a:93:9b:13:2f:ad:5e:a0:34:c9:48:01:
09:dc:5a:96:c4:53:a6:06:c2:db:90:59:ca:49:db:
87:9c:df:ee:a1:f1:0b:16:de:75:ac:ce:4c:bd:c7:
68:2b:a9:ea:9d:92:08:ed:59:f6:15:9f:f2:a4:a1:
0f:cf:d9:29:80:1c:f8:68:c7:f7:42:a0:99:b3:a3:
dc:69:1f:ce:fd:5e:d8:27:ed:64:7f:15:8f:87:b0:
d3:ea:43:79:72:8d:7b:3d:1c:dc:9f:93:d7:b6:37:
30:05:7a:88:e5:b8:b3:d9:6d:92:27:ee:52:33:17:
3c:6a:49:18:57:03:14:b2:d1:cf:a7:9d:3a:e7:20:
2a:fb:cf:ec:67:5a:3c:3f:23:ad:92:88:f3:b5:0c:
35:24:85:c7:91:4c:83:2f:74:13:77:26:fe:33:ef:
5e:4d:d5:24:b5:f0:bb:eb:f4:94:49:b9:f6:fd:45:
b4:99:75:51:09:0a:c5:4a:8f:e4:91:39:37:77:0f:
7f:6f:6b:9a:4e:65:95:49:45:81:1f:37:a8:f1:a0:
92:a8:a6:8b:f1:19:38:dd:64:f9:1c:0f:02:68:86:
27:ce:64:17:1c:f5:46:c5:76:cb:e6:7d:af:fa:9d:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3C:B2:6B:3B:E0:13:92:B3:91:2C:46:16:04:B6:BB:3E:1D:88:B5
X509v3 Authority Key Identifier:
keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/1DyyazvgE5KzkSxGFgS2uz4diLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.26.0/23
Signature Algorithm: sha256WithRSAEncryption
22:e4:82:07:24:5e:8a:56:3a:94:3c:2a:b4:94:0c:20:33:b1:
d9:cd:ba:79:14:91:15:f3:1f:f2:a5:9b:36:7e:36:1e:ff:45:
80:5d:bf:83:54:ec:67:28:ae:f7:9b:27:8d:6b:25:e9:d3:83:
8a:4c:f4:a2:2b:96:a8:88:97:48:62:45:cc:06:3b:cb:2f:14:
c7:ff:2c:1c:f9:e8:52:9e:34:87:bd:9a:31:cd:b9:1b:f4:4a:
21:fe:da:dd:21:c5:49:9c:46:80:fd:2f:3c:f4:a6:3c:39:c7:
fe:f7:97:63:e4:f4:7d:70:d9:38:df:88:23:48:21:aa:dc:69:
7f:bc:a0:98:5d:87:d9:9a:35:04:99:7e:39:8d:ba:f2:c8:b3:
ff:19:b8:67:f9:8a:b2:d4:5f:58:37:84:b5:b0:f8:bd:02:5e:
52:61:a6:02:5f:06:ac:5f:1b:eb:22:4a:47:75:e2:e7:d4:ec:
7d:48:63:9a:0f:9f:d0:a7:c2:d3:25:dc:d3:16:9e:16:68:c0:
0d:11:15:27:a2:b8:ee:d5:42:0e:98:05:f0:59:6a:eb:7f:16:
a0:eb:6c:94:af:41:cc:e0:f5:c5:0c:d7:0f:79:88:21:2c:70:
17:c8:6b:72:4e:bb:49:ba:06:5c:ee:03:8c:e6:23:9c:80:6a:
80:00:c4:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbdtBzgjU2bHk7Uwm1ZsyUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNzgzNThhNmE5N2QxOWIyZjVhZmZmMWNmYzc5M2ZiYjRl
YWZjOWQwHhcNMjMwMzE0MDEyMDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDNjYjI2YjNiZTAxMzkyYjM5MTJjNDYxNjA0YjZiYjNlMWQ4OGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmexE/rgKCXrAHvapf9jQI6Kk5sT
L61eoDTJSAEJ3FqWxFOmBsLbkFnKSduHnN/uofELFt51rM5MvcdoK6nqnZII7Vn2
FZ/ypKEPz9kpgBz4aMf3QqCZs6PcaR/O/V7YJ+1kfxWPh7DT6kN5co17PRzcn5PX
tjcwBXqI5biz2W2SJ+5SMxc8akkYVwMUstHPp5065yAq+8/sZ1o8PyOtkojztQw1
JIXHkUyDL3QTdyb+M+9eTdUktfC76/SUSbn2/UW0mXVRCQrFSo/kkTk3dw9/b2ua
TmWVSUWBHzeo8aCSqKaL8Rk43WT5HA8CaIYnzmQXHPVGxXbL5n2v+p1aMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNQ8sms74BOSs5EsRhYEtrs+HYi1MB8GA1UdIwQY
MBaAFOt4NYpql9GbL1r/8c/Hk/u06vydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQt
NGE1ZWVkMWVlNWJjLzEvMUR5eWF6dmdFNUt6a1N4R0ZnUzJ1ejRkaUxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQtNGE1ZWVkMWVlNWJj
LzEvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH8waMA0G
CSqGSIb3DQEBCwUAA4IBAQAi5IIHJF6KVjqUPCq0lAwgM7HZzbp5FJEV8x/ypZs2
fjYe/0WAXb+DVOxnKK73myeNayXp04OKTPSiK5aoiJdIYkXMBjvLLxTH/ywc+ehS
njSHvZoxzbkb9Eoh/trdIcVJnEaA/S889KY8Ocf+95dj5PR9cNk434gjSCGq3Gl/
vKCYXYfZmjUEmX45jbryyLP/Gbhn+Yqy1F9YN4S1sPi9Al5SYaYCXwasXxvrIkpH
deLn1Ox9SGOaD5/Qp8LTJdzTFp4WaMANERUnorju1UIOmAXwWWrrfxag62yUr0HM
4PXFDNcPeYghLHAXyGtyTrtJugZc7gOM5iOcgGqAAMSi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:30 2024 by rpki-client on console-fra.rpki-client.org