Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/8d6Eia0m-U4nJ_Xr8oKKvwL6LvQ.roa
File: 8d6Eia0m-U4nJ_Xr8oKKvwL6LvQ.roa (raw, json)
Hash identifier: J6uhxuXAWJlyBYFN8Nn+mGVmyifIEdz7IsuR0TrKEIA=
Subject key identifier: F1:DE:84:89:AD:26:F9:4E:27:27:F5:EB:F2:82:8A:BF:02:FA:2E:F4
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 018FA6814BDEBD2EBE61F1B0D446BDB28235
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/8d6Eia0m-U4nJ_Xr8oKKvwL6LvQ.roa
Signing time: Thu 23 May 2024 17:30:42 +0000
ROA not before: Thu 23 May 2024 17:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39318
IP address blocks: 31.210.174.0/23 maxlen: 24
85.202.192.0/23 maxlen: 24
2a00:5da0:3000::/36 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Jun 2024 10:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a6:81:4b:de:bd:2e:be:61:f1:b0:d4:46:bd:b2:82:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: May 23 17:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1de8489ad26f94e2727f5ebf2828abf02fa2ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:03:96:d7:88:54:e5:2c:bd:51:2e:18:c6:
3e:00:eb:fa:3b:65:03:8b:b4:56:14:43:e2:b7:a6:
36:db:fc:56:ba:10:78:8a:33:ee:23:21:ed:fa:d3:
ac:02:c8:54:27:74:8c:4f:6f:c8:33:f7:09:be:0d:
1d:48:52:77:ac:b6:8d:88:f2:73:7d:4c:e7:9d:32:
14:d3:95:cb:b1:cc:13:47:21:5c:61:7d:da:8a:90:
b2:3c:8d:67:46:4f:7c:87:a6:29:cf:e0:95:66:3c:
e7:53:f8:2c:5d:ec:ac:0d:23:06:30:a9:32:47:a0:
0f:0f:d9:97:d7:bd:1b:95:b0:cd:0d:d3:ec:05:3a:
3c:50:78:9c:d3:27:8e:80:56:48:ab:9c:c0:40:ff:
3a:4b:49:c0:32:d7:56:a5:a3:f1:c6:ee:46:bb:ac:
10:e2:1b:5e:43:a7:9f:ca:b4:e6:9d:4b:09:5c:ab:
ad:09:02:79:20:33:8b:42:c5:fd:33:3a:e7:03:92:
85:49:f5:a8:9d:c3:61:d2:a4:56:de:2d:6d:f1:56:
84:79:14:53:af:9e:c3:16:a4:07:3e:58:96:98:a8:
c0:c4:39:7a:fc:68:b7:ba:34:af:3d:87:83:61:b9:
b8:55:3b:87:6e:e6:46:8e:c2:48:8d:24:aa:5c:1b:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:84:89:AD:26:F9:4E:27:27:F5:EB:F2:82:8A:BF:02:FA:2E:F4
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/8d6Eia0m-U4nJ_Xr8oKKvwL6LvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.174.0/23
85.202.192.0/23
IPv6:
2a00:5da0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
38:b6:1a:98:72:84:f4:3f:0e:99:f5:ba:37:d5:db:64:2b:da:
63:38:a8:16:e0:d3:46:ec:d5:04:23:a5:80:03:5d:d4:52:12:
c4:f9:c1:f7:b5:51:b9:24:60:f5:97:8d:07:45:a9:68:5f:14:
2b:69:01:44:82:03:42:54:f2:c4:e3:30:90:7d:a5:9e:13:44:
1b:06:45:f3:3f:34:9d:2f:a6:5d:d5:e4:52:20:fa:bf:80:1d:
b9:12:25:ac:95:97:21:86:54:78:07:f5:93:4b:00:ca:0c:43:
46:94:ac:17:44:47:2f:67:5d:ca:64:1b:77:10:e1:01:7f:f1:
d3:36:8d:c5:5d:ed:2c:06:58:ba:ce:38:4b:36:59:d8:0e:11:
7a:9b:33:04:ac:fc:c4:01:fe:f1:61:e4:d1:40:20:38:aa:4c:
a5:67:50:34:12:d2:c5:94:25:fa:3f:da:c5:29:26:ce:08:ba:
b1:d7:d3:8b:e3:9b:2b:51:da:16:83:66:b0:31:ed:17:a3:e6:
28:c6:21:d0:a4:b3:d0:4a:90:ec:08:ab:67:1b:ac:83:9d:0f:
12:e7:0a:27:d0:17:93:90:31:fe:f5:21:7c:11:60:8d:c6:71:
8b:4d:d9:bf:ed:3f:8a:f8:57:32:1c:b8:8a:99:36:b4:f1:dc:
4f:fb:06:50
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAY+mgUvevS6+YfGw1Ea9soI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NDdiNTlkMjFlYTM2YjMwNjJmY2E4MGNlNzVjMTYxNmFm
NTExOWEwHhcNMjQwNTIzMTczMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWRlODQ4OWFkMjZmOTRlMjcyN2Y1ZWJmMjgyOGFiZjAyZmEyZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk88DlteIVOUsvVEuGMY+AOv6O2UD
i7RWFEPit6Y22/xWuhB4ijPuIyHt+tOsAshUJ3SMT2/IM/cJvg0dSFJ3rLaNiPJz
fUznnTIU05XLscwTRyFcYX3aipCyPI1nRk98h6Ypz+CVZjznU/gsXeysDSMGMKky
R6APD9mX170blbDNDdPsBTo8UHic0yeOgFZIq5zAQP86S0nAMtdWpaPxxu5Gu6wQ
4hteQ6efyrTmnUsJXKutCQJ5IDOLQsX9MzrnA5KFSfWoncNh0qRW3i1t8VaEeRRT
r57DFqQHPliWmKjAxDl6/Gi3ujSvPYeDYbm4VTuHbuZGjsJIjSSqXBuxKQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFPHehImtJvlOJyf16/KCir8C+i70MB8GA1UdIwQY
MBaAFBhHtZ0h6jazBi/KgM51wWFq9RGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTIt
ZjkxYmI1MTc5MjE3LzEvOGQ2RWlhMG0tVTRuSl9YcjhvS0t2d0w2THZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTItZjkxYmI1MTc5MjE3
LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBH9KuAwQB
VcrAMA4EAgACMAgDBgQqAF2gMDANBgkqhkiG9w0BAQsFAAOCAQEAOLYamHKE9D8O
mfW6N9XbZCvaYzioFuDTRuzVBCOlgANd1FISxPnB97VRuSRg9ZeNB0WpaF8UK2kB
RIIDQlTyxOMwkH2lnhNEGwZF8z80nS+mXdXkUiD6v4AduRIlrJWXIYZUeAf1k0sA
ygxDRpSsF0RHL2ddymQbdxDhAX/x0zaNxV3tLAZYus44SzZZ2A4RepszBKz8xAH+
8WHk0UAgOKpMpWdQNBLSxZQl+j/axSkmzgi6sdfTi+ObK1HaFoNmsDHtF6PmKMYh
0KSz0EqQ7AirZxusg50PEucKJ9AXk5Ax/vUhfBFgjcZxi03Zv+0/ivhXMhy4ipk2
tPHcT/sGUA==
-----END CERTIFICATE-----
Generated at Fri Jun 14 13:48:52 2024 by rpki-client on console-fra.rpki-client.org