Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/w7ThMEh4PK13SgLUl_wqrvfTrw0.roa
File: w7ThMEh4PK13SgLUl_wqrvfTrw0.roa (raw, json)
Hash identifier: RvhYg1dbfrtY0mx59jpNarDD+sgzL+VzaSK8KzhJkOg=
Subject key identifier: C3:B4:E1:30:48:78:3C:AD:77:4A:02:D4:97:FC:2A:AE:F7:D3:AF:0D
Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial: 01888B3050A8C08192727D86DCFFDA6C695B
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/w7ThMEh4PK13SgLUl_wqrvfTrw0.roa
Signing time: Mon 05 Jun 2023 10:52:59 +0000
ROA not before: Mon 05 Jun 2023 10:52:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41242
IP address blocks: 81.31.48.0/20 maxlen: 20
193.142.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:30:50:a8:c0:81:92:72:7d:86:dc:ff:da:6c:69:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Validity
Not Before: Jun 5 10:52:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3b4e13048783cad774a02d497fc2aaef7d3af0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:3e:6d:0e:96:3f:7a:6e:7d:61:93:ce:b9:
75:c4:26:88:23:27:e0:a2:37:a9:f1:a0:22:b4:ec:
48:07:94:43:5a:29:d9:fc:f5:52:b9:b6:65:33:0e:
b7:4f:b7:7e:1c:6b:3a:d5:96:ff:f0:f0:b4:d3:7b:
ee:13:e4:fc:1c:7b:3f:20:fb:76:5d:8b:d5:09:0c:
a2:14:e4:91:b8:d0:98:a4:a3:7e:68:6a:f8:03:9f:
14:a0:b6:bd:a9:cd:b6:5b:60:4c:9f:bb:c1:e4:35:
1c:55:bb:63:a5:92:47:52:c5:ed:ca:c7:47:33:c4:
06:b7:8c:7e:59:0f:2b:19:13:66:4b:30:af:ab:08:
7b:68:95:d4:ef:5e:ee:0b:51:e7:c2:23:1e:ce:5a:
af:cd:0d:ad:66:7d:2d:38:7b:b0:03:d2:ac:fc:0b:
c0:d2:eb:13:0d:47:e7:5b:73:f1:c7:a1:26:76:bb:
5d:89:5a:f4:5b:b6:2f:c6:eb:ee:d7:aa:8b:09:83:
87:84:d5:48:b7:5d:f2:89:e2:d0:05:bc:4c:0e:f9:
28:bf:ba:95:c9:15:6c:93:39:88:8f:b6:60:e0:c2:
f6:de:73:c5:14:60:e0:7b:d7:9a:ca:6c:bf:a0:cc:
f8:86:73:b7:08:8a:a3:60:90:77:1e:9e:96:89:50:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B4:E1:30:48:78:3C:AD:77:4A:02:D4:97:FC:2A:AE:F7:D3:AF:0D
X509v3 Authority Key Identifier:
keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/w7ThMEh4PK13SgLUl_wqrvfTrw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.48.0/20
193.142.121.0/24
Signature Algorithm: sha256WithRSAEncryption
79:dc:b0:59:d6:1a:76:cc:d4:9b:d0:15:fb:6c:04:d4:b8:dc:
ba:04:85:d1:cf:c0:4f:cd:3b:47:f9:71:7e:f2:bb:73:fb:5e:
d0:9f:bb:84:9c:b1:5b:de:2d:0d:71:4a:f0:c0:46:d4:05:1e:
86:9b:8b:55:8d:52:f6:47:e9:dc:03:79:18:80:02:54:ed:9f:
64:24:13:fb:ba:4b:e1:71:00:7e:35:65:d4:c4:08:57:56:de:
68:09:81:24:ee:30:80:5f:c6:53:f7:4a:3b:99:7d:64:99:b4:
dd:d8:dd:a8:aa:bd:bc:fe:ec:0c:1c:09:ac:e2:be:0b:e6:4b:
b3:ef:eb:c4:cd:78:11:a6:74:00:35:d5:0c:90:a6:0a:bc:7b:
b3:79:ea:25:f9:45:b4:db:76:25:c2:8a:da:8a:25:db:a7:a7:
89:cb:07:c3:0e:b1:23:e8:5c:cc:dc:84:9c:40:03:56:84:35:
a9:9f:0c:aa:af:e7:85:7d:b6:2b:99:c0:64:0f:62:1e:a8:3c:
a5:16:b4:90:17:c7:b9:cc:5d:15:98:05:1e:b1:c0:44:9f:6c:
91:c8:11:eb:bf:f6:91:f9:cf:ae:b8:38:46:c5:b0:95:86:ee:
85:be:cd:9d:f7:f5:76:a5:d4:ea:7b:bb:5f:b0:f6:0b:e9:a3:
6e:a8:85:b3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYiLMFCowIGScn2G3P/abGlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzljYjUzMDJkOGQxM2ZlOTFlODBmNWNiZDFmYmFjYmMw
MTQ4MjcwHhcNMjMwNjA1MTA1MjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2I0ZTEzMDQ4NzgzY2FkNzc0YTAyZDQ5N2ZjMmFhZWY3ZDNhZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEI+bQ6WP3pufWGTzrl1xCaIIyfg
ojep8aAitOxIB5RDWinZ/PVSubZlMw63T7d+HGs61Zb/8PC003vuE+T8HHs/IPt2
XYvVCQyiFOSRuNCYpKN+aGr4A58UoLa9qc22W2BMn7vB5DUcVbtjpZJHUsXtysdH
M8QGt4x+WQ8rGRNmSzCvqwh7aJXU717uC1HnwiMezlqvzQ2tZn0tOHuwA9Ks/AvA
0usTDUfnW3Pxx6EmdrtdiVr0W7Yvxuvu16qLCYOHhNVIt13yieLQBbxMDvkov7qV
yRVskzmIj7Zg4ML23nPFFGDge9eaymy/oMz4hnO3CIqjYJB3Hp6WiVA19wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMO04TBIeDytd0oC1Jf8Kq73068NMB8GA1UdIwQY
MBaAFC3Jy1MC2NE/6R6A9cvR+6y8AUgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5Yzgt
MmYxMWE2NTE5NjJiLzEvdzdUaE1FaDRQSzEzU2dMVWxfd3FydmZUcncwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5YzgtMmYxMWE2NTE5NjJi
LzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEUR8wAwQA
wY55MA0GCSqGSIb3DQEBCwUAA4IBAQB53LBZ1hp2zNSb0BX7bATUuNy6BIXRz8BP
zTtH+XF+8rtz+17Qn7uEnLFb3i0NcUrwwEbUBR6Gm4tVjVL2R+ncA3kYgAJU7Z9k
JBP7ukvhcQB+NWXUxAhXVt5oCYEk7jCAX8ZT90o7mX1kmbTd2N2oqr28/uwMHAms
4r4L5kuz7+vEzXgRpnQANdUMkKYKvHuzeeol+UW023YlworaiiXbp6eJywfDDrEj
6FzM3IScQANWhDWpnwyqr+eFfbYrmcBkD2IeqDylFrSQF8e5zF0VmAUescBEn2yR
yBHrv/aR+c+uuDhGxbCVhu6Fvs2d9/V2pdTqe7tfsPYL6aNuqIWz
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:57 2024 by rpki-client on console-ams.rpki-client.org