Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/zqMousPUi6SWmfOYMO69jAeS4Bo.roa
File: zqMousPUi6SWmfOYMO69jAeS4Bo.roa (raw, json)
Hash identifier: C54YPH/PsvfcNdBWH5+SYsnqsVsEBTDo2ETLJyRQjWo=
Subject key identifier: CE:A3:28:BA:C3:D4:8B:A4:96:99:F3:98:30:EE:BD:8C:07:92:E0:1A
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 018721A3FDCC035C43D3D015A2C014643B9C
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/zqMousPUi6SWmfOYMO69jAeS4Bo.roa
Signing time: Mon 27 Mar 2023 05:56:48 +0000
ROA not before: Mon 27 Mar 2023 05:56:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42971
IP address blocks: 31.44.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:21:a3:fd:cc:03:5c:43:d3:d0:15:a2:c0:14:64:3b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Mar 27 05:56:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cea328bac3d48ba49699f39830eebd8c0792e01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:fa:6c:b6:6f:db:a6:6b:f2:cf:31:03:cd:
60:2d:9e:2c:8e:04:be:ab:ca:40:c3:a6:02:08:9c:
39:0b:46:79:00:34:2e:75:1d:4e:40:aa:25:6d:25:
d2:f6:72:81:b4:56:60:67:f9:8d:11:64:44:1a:88:
4a:76:3f:df:15:5d:a1:10:f7:a9:8c:d7:55:30:69:
36:11:57:cc:6a:a6:81:4d:ec:cd:7b:07:63:07:65:
51:d7:c8:a6:d7:a2:ad:c4:65:69:04:06:4e:a3:a8:
5e:53:ce:e4:8f:d8:d2:a2:06:c8:5d:b5:7b:95:34:
a7:69:d4:15:61:91:66:e1:42:bc:f7:f1:e5:e4:79:
db:c6:c9:88:72:14:74:a6:f4:94:bc:a0:e9:12:fb:
6e:8d:05:c5:98:aa:09:dd:80:f3:a4:1c:b5:ef:ac:
4b:24:23:6d:46:04:fb:69:ad:ea:b2:d9:df:92:89:
9c:54:3d:6f:2f:d8:bb:5a:5e:7a:75:40:85:8a:a7:
91:3f:c1:b8:cb:f7:7b:3d:3e:c0:27:a8:e0:d9:13:
70:74:bb:64:96:f5:82:3f:bd:b9:a3:12:ab:e8:f7:
89:7a:79:8f:a7:c5:19:bd:a1:3f:40:92:7f:ca:eb:
a2:d6:e2:14:87:b9:1a:4f:3d:54:52:2c:fb:73:cb:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A3:28:BA:C3:D4:8B:A4:96:99:F3:98:30:EE:BD:8C:07:92:E0:1A
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/zqMousPUi6SWmfOYMO69jAeS4Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.248.0/23
Signature Algorithm: sha256WithRSAEncryption
27:22:53:0e:41:75:f8:3a:60:67:0a:34:91:33:f7:37:17:cc:
58:8b:62:d8:f7:a9:7a:55:5d:24:60:61:47:45:bc:8e:f8:52:
76:43:d5:61:a3:de:84:8f:83:df:dc:e8:3a:fb:8f:2b:95:1c:
1e:60:b2:a2:1b:85:0c:dc:e1:95:b3:73:06:7d:79:10:6e:40:
b8:bb:22:b8:25:e7:04:2d:1c:f9:53:c3:0a:c6:52:b5:39:1f:
42:3a:a3:1d:62:de:3f:9f:31:08:64:df:3d:7c:cb:8f:cf:20:
4e:03:f0:96:7a:5e:54:7d:b7:0f:d2:0e:3d:6d:59:ba:84:c3:
8d:14:58:d4:aa:1a:18:4b:ec:7d:3f:77:10:d5:f5:9b:c9:cd:
34:6a:dc:b5:02:e5:aa:b3:4b:4e:ab:eb:7a:cd:45:c3:9a:15:
87:9f:5d:cc:a7:39:bb:0e:d7:49:04:05:21:57:a3:9b:9e:6a:
c3:d6:e0:39:dc:15:30:a0:1d:22:f2:1a:65:47:c6:30:9d:c8:
81:dd:70:b5:92:fd:7f:4a:87:cc:ff:a7:ff:ee:30:45:e3:11:
53:d1:58:e6:d3:81:17:88:cc:bc:d9:92:d4:51:c7:a5:73:e4:
2b:15:ca:ef:df:cc:a2:74:41:2f:06:c6:14:48:cc:6d:b8:f3:
34:e3:64:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcho/3MA1xD09AVosAUZDucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTU3MjdmMDdiNzU4Zjk4Njg0NzZjMTNjZjk3NzY1NGJm
MzgwZWUwHhcNMjMwMzI3MDU1NjQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWEzMjhiYWMzZDQ4YmE0OTY5OWYzOTgzMGVlYmQ4YzA3OTJlMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZj6bLZv26Zr8s8xA81gLZ4sjgS+
q8pAw6YCCJw5C0Z5ADQudR1OQKolbSXS9nKBtFZgZ/mNEWREGohKdj/fFV2hEPep
jNdVMGk2EVfMaqaBTezNewdjB2VR18im16KtxGVpBAZOo6heU87kj9jSogbIXbV7
lTSnadQVYZFm4UK89/Hl5HnbxsmIchR0pvSUvKDpEvtujQXFmKoJ3YDzpBy176xL
JCNtRgT7aa3qstnfkomcVD1vL9i7Wl56dUCFiqeRP8G4y/d7PT7AJ6jg2RNwdLtk
lvWCP725oxKr6PeJenmPp8UZvaE/QJJ/yuui1uIUh7kaTz1UUiz7c8tV8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM6jKLrD1IuklpnzmDDuvYwHkuAaMB8GA1UdIwQY
MBaAFAGVcn8Ht1j5hoR2wTz5d2VL84DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAt
NjQ4MzhkZjM5NzdhLzEvenFNb3VzUFVpNlNXbWZPWU1PNjlqQWVTNEJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAtNjQ4MzhkZjM5Nzdh
LzEvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHyz4MA0G
CSqGSIb3DQEBCwUAA4IBAQAnIlMOQXX4OmBnCjSRM/c3F8xYi2LY96l6VV0kYGFH
RbyO+FJ2Q9Vho96Ej4Pf3Og6+48rlRweYLKiG4UM3OGVs3MGfXkQbkC4uyK4JecE
LRz5U8MKxlK1OR9COqMdYt4/nzEIZN89fMuPzyBOA/CWel5UfbcP0g49bVm6hMON
FFjUqhoYS+x9P3cQ1fWbyc00aty1AuWqs0tOq+t6zUXDmhWHn13Mpzm7DtdJBAUh
V6ObnmrD1uA53BUwoB0i8hplR8YwnciB3XC1kv1/SofM/6f/7jBF4xFT0Vjm04EX
iMy82ZLUUcelc+QrFcrv38yidEEvBsYUSMxtuPM042Qn
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:22 2024 by rpki-client on console-ams.rpki-client.org