Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/q0IHruHKDXInHZd_gxNMiDBBAXg.roa
File: q0IHruHKDXInHZd_gxNMiDBBAXg.roa (raw, json)
Hash identifier: pYVIutmO2PqgAGiEwhR7D4583oBe6vcHKTgyD20UOUQ=
Subject key identifier: AB:42:07:AE:E1:CA:0D:72:27:1D:97:7F:83:13:4C:88:30:41:01:78
Certificate issuer: /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Certificate serial: 0186DDCA15BB6327A4992471A433A2F2E5F5
Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/q0IHruHKDXInHZd_gxNMiDBBAXg.roa
Signing time: Tue 14 Mar 2023 01:44:13 +0000
ROA not before: Tue 14 Mar 2023 01:44:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 31.204.26.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 15:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dd:ca:15:bb:63:27:a4:99:24:71:a4:33:a2:f2:e5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Validity
Not Before: Mar 14 01:44:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab4207aee1ca0d72271d977f83134c8830410178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:02:7d:50:af:04:ff:30:d3:73:71:b0:9c:45:
b3:66:ce:8b:c0:81:d1:4b:ba:6f:4d:b6:f1:66:25:
93:87:a0:90:b8:5c:2f:63:94:fd:19:cc:50:6f:9a:
93:20:47:5e:6e:53:91:52:4d:be:3c:e9:32:39:e9:
9f:d2:20:a2:a8:59:98:2b:6b:3e:7c:b8:04:a3:93:
5a:98:58:63:95:d7:24:37:ec:49:1a:c5:d5:f3:6f:
67:9a:d4:83:5a:06:21:70:c5:5b:85:fa:0c:9d:1e:
10:80:b3:da:0e:8e:64:76:08:a9:6c:eb:d6:ad:95:
29:0f:64:5b:b2:6a:4a:92:16:59:7d:9f:89:a5:49:
ed:93:5d:31:39:36:7e:3c:59:15:74:97:17:72:68:
16:d4:5d:0b:fb:5c:89:af:b9:c8:31:e2:15:08:13:
1f:73:65:99:db:6a:4d:e3:c0:a2:3a:01:97:7d:c3:
e2:c4:03:7a:08:64:5d:d5:36:9e:ba:ee:37:5f:66:
8a:9b:42:35:b3:6f:8c:7c:68:3f:86:c8:16:4c:83:
f2:29:fc:45:ab:87:bc:6d:5b:12:f5:74:40:32:6f:
ab:d8:e0:73:ec:fb:84:4d:70:8b:ed:58:52:a0:85:
8c:47:33:3e:3c:7e:08:6f:b8:a1:b5:74:c7:18:8c:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:42:07:AE:E1:CA:0D:72:27:1D:97:7F:83:13:4C:88:30:41:01:78
X509v3 Authority Key Identifier:
keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/q0IHruHKDXInHZd_gxNMiDBBAXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.26.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:74:7d:73:49:16:de:b7:42:b6:b9:ab:00:a6:d4:98:c7:2e:
2f:4f:1a:0e:d7:37:53:b0:ea:e0:9c:23:b6:f3:33:6a:ef:74:
99:26:80:6c:7f:b9:be:39:12:bb:80:91:ee:47:4a:4f:5d:02:
25:34:03:37:92:b5:05:e8:4b:91:54:ec:11:d6:c2:c9:93:16:
75:06:b5:bf:0d:c0:2a:e3:3a:70:87:4e:4a:02:2e:59:3f:96:
dc:71:20:f3:52:ad:25:9d:63:98:5b:dd:e3:12:11:13:88:91:
74:08:7d:c2:7b:b0:e0:9c:ef:1b:cc:3c:c7:6a:44:5c:0a:6f:
21:b1:e6:c5:c1:b0:a1:58:71:9c:ef:c6:35:8d:11:3e:4f:4c:
31:48:c3:fb:3d:f9:75:69:b6:88:2d:e1:e3:47:cc:de:d1:b6:
d8:10:99:9e:af:80:be:f9:ef:93:06:9f:81:9f:22:3b:3f:4e:
c5:bb:35:a2:4c:4f:ce:25:22:04:37:3c:0b:5f:e5:2f:96:10:
b5:12:b6:73:45:c7:e3:c2:1c:a5:12:ab:99:fb:77:30:2e:da:
03:b4:96:1e:08:5d:aa:d1:f2:fc:15:8f:4d:2b:2c:f1:9c:db:
cb:59:e2:a8:6b:cb:a9:42:4a:55:4d:87:d6:22:06:61:be:a3:
ec:74:e7:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbdyhW7YyekmSRxpDOi8uX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNzgzNThhNmE5N2QxOWIyZjVhZmZmMWNmYzc5M2ZiYjRl
YWZjOWQwHhcNMjMwMzE0MDE0NDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjQyMDdhZWUxY2EwZDcyMjcxZDk3N2Y4MzEzNGM4ODMwNDEwMTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQJ9UK8E/zDTc3GwnEWzZs6LwIHR
S7pvTbbxZiWTh6CQuFwvY5T9GcxQb5qTIEdeblORUk2+POkyOemf0iCiqFmYK2s+
fLgEo5NamFhjldckN+xJGsXV829nmtSDWgYhcMVbhfoMnR4QgLPaDo5kdgipbOvW
rZUpD2RbsmpKkhZZfZ+JpUntk10xOTZ+PFkVdJcXcmgW1F0L+1yJr7nIMeIVCBMf
c2WZ22pN48CiOgGXfcPixAN6CGRd1Taeuu43X2aKm0I1s2+MfGg/hsgWTIPyKfxF
q4e8bVsS9XRAMm+r2OBz7PuETXCL7VhSoIWMRzM+PH4Ib7ihtXTHGIyV/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKtCB67hyg1yJx2Xf4MTTIgwQQF4MB8GA1UdIwQY
MBaAFOt4NYpql9GbL1r/8c/Hk/u06vydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQt
NGE1ZWVkMWVlNWJjLzEvcTBJSHJ1SEtEWEluSFpkX2d4Tk1pREJCQVhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQtNGE1ZWVkMWVlNWJj
LzEvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH8waMA0G
CSqGSIb3DQEBCwUAA4IBAQCddH1zSRbet0K2uasAptSYxy4vTxoO1zdTsOrgnCO2
8zNq73SZJoBsf7m+ORK7gJHuR0pPXQIlNAM3krUF6EuRVOwR1sLJkxZ1BrW/DcAq
4zpwh05KAi5ZP5bccSDzUq0lnWOYW93jEhETiJF0CH3Ce7DgnO8bzDzHakRcCm8h
sebFwbChWHGc78Y1jRE+T0wxSMP7Pfl1abaILeHjR8ze0bbYEJmer4C++e+TBp+B
nyI7P07FuzWiTE/OJSIENzwLX+UvlhC1ErZzRcfjwhylEquZ+3cwLtoDtJYeCF2q
0fL8FY9NKyzxnNvLWeKoa8upQkpVTYfWIgZhvqPsdOer
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:30 2024 by rpki-client on console-fra.rpki-client.org