Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/9vSy0AugkFR9zfCXEbO50e12VjY.roa
File: 9vSy0AugkFR9zfCXEbO50e12VjY.roa (raw, json)
Hash identifier: IzQABM4lYRzQxhaRvzERF+30i6Rhn+aJ5spPYc3lPpk=
Subject key identifier: F6:F4:B2:D0:0B:A0:90:54:7D:CD:F0:97:11:B3:B9:D1:ED:76:56:36
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 01856FD527909BA69AD4332F9EDF1934AADE
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/9vSy0AugkFR9zfCXEbO50e12VjY.roa
Signing time: Mon 02 Jan 2023 00:15:18 +0000
ROA not before: Mon 02 Jan 2023 00:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 31.186.170.0/23 maxlen: 23
31.186.174.0/23 maxlen: 23
2a02:40c0:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:27:90:9b:a6:9a:d4:33:2f:9e:df:19:34:aa:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 2 00:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6f4b2d00ba090547dcdf09711b3b9d1ed765636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:e8:6d:1d:25:d6:9d:97:01:e1:bb:5a:fd:
18:71:13:73:95:51:2b:53:37:63:14:3f:92:40:c1:
62:fa:75:31:c7:fc:8d:95:45:5a:15:93:ad:c0:ef:
82:57:a4:c4:d4:2d:7f:a8:ea:c8:ff:13:5c:cd:4b:
7f:d4:12:95:a0:d8:5f:3a:24:cd:d8:53:ec:af:42:
42:da:90:aa:8b:37:6d:84:8a:af:7f:10:87:db:13:
69:60:f5:73:27:b4:d5:f2:1c:53:12:e0:9e:65:31:
d5:4e:c5:ac:e4:7e:b5:7f:1d:b3:2b:e0:d6:a9:be:
35:9f:7e:ff:d5:27:90:a0:fc:e0:0e:43:e2:84:4a:
79:88:1d:4f:e1:39:93:1e:7e:00:c8:6d:2d:db:93:
c9:73:56:cf:91:57:53:26:a1:d7:b0:19:cc:43:cc:
90:0e:7e:ea:c5:bd:7c:b0:9e:45:c4:4c:47:be:04:
20:9f:f1:64:8a:e6:b0:43:03:15:28:f2:82:96:95:
46:97:b2:e2:78:b5:8f:81:55:b0:f9:0f:34:fb:91:
de:a7:9c:50:8d:a7:45:81:81:38:ed:47:ba:5b:e7:
de:3c:05:90:e7:64:67:83:e4:55:15:88:8c:50:f8:
43:e2:6b:e5:74:0c:ff:fb:72:cb:a4:73:6b:d7:bb:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F4:B2:D0:0B:A0:90:54:7D:CD:F0:97:11:B3:B9:D1:ED:76:56:36
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/9vSy0AugkFR9zfCXEbO50e12VjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.170.0/23
31.186.174.0/23
IPv6:
2a02:40c0:1000::/48
Signature Algorithm: sha256WithRSAEncryption
66:39:5b:c9:c0:d5:7c:d9:b1:4b:44:47:90:d3:a8:fc:a6:6f:
e5:3c:ff:46:9a:fc:07:dc:8e:1c:79:1a:b5:38:44:54:6a:6c:
09:29:72:64:35:7b:c7:c8:51:c4:1a:ac:bd:55:30:35:66:2e:
4e:6f:33:bc:6e:67:f8:b7:89:d7:67:0e:c8:3c:48:56:b3:bd:
a6:d5:b5:b4:55:47:2d:b6:fd:70:e6:ed:0a:6f:eb:ed:ba:58:
33:86:57:f4:6e:1f:0b:17:4f:52:3e:e6:c9:81:49:ee:82:41:
f4:8e:cb:c2:28:2c:76:c3:c7:76:23:36:05:84:da:4d:a2:23:
c5:92:a9:61:5c:11:50:cd:9b:45:6a:f8:f5:f8:56:3d:47:4a:
44:84:a1:55:43:15:d1:82:0d:64:c6:47:0b:d5:4f:52:0e:73:
34:81:84:b5:58:50:69:06:24:8d:1c:31:68:e5:c9:c2:12:a2:
7d:bb:29:81:22:8b:28:1b:a2:41:de:e9:44:f3:bd:5f:29:45:
82:bd:e6:10:9c:55:de:bb:4c:29:9c:d5:fb:c6:69:46:bf:4d:
8c:c7:9a:ed:fd:43:8d:bb:49:c8:0c:de:5c:0f:73:27:1e:f1:
d5:ab:ef:5c:9d:01:76:58:aa:ec:d2:86:32:b0:1c:96:76:d4:
13:08:e0:b7
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVv1SeQm6aa1DMvnt8ZNKreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDlmZmZjZDgxYTY2YmM5OGI2MjlkNGMwNTc5MjQ3NjQ1
ZjBmZTQwHhcNMjMwMTAyMDAxNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmY0YjJkMDBiYTA5MDU0N2RjZGYwOTcxMWIzYjlkMWVkNzY1NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku/obR0l1p2XAeG7Wv0YcRNzlVEr
UzdjFD+SQMFi+nUxx/yNlUVaFZOtwO+CV6TE1C1/qOrI/xNczUt/1BKVoNhfOiTN
2FPsr0JC2pCqizdthIqvfxCH2xNpYPVzJ7TV8hxTEuCeZTHVTsWs5H61fx2zK+DW
qb41n37/1SeQoPzgDkPihEp5iB1P4TmTHn4AyG0t25PJc1bPkVdTJqHXsBnMQ8yQ
Dn7qxb18sJ5FxExHvgQgn/FkiuawQwMVKPKClpVGl7LieLWPgVWw+Q80+5Hep5xQ
jadFgYE47Ue6W+fePAWQ52Rng+RVFYiMUPhD4mvldAz/+3LLpHNr17veWQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFPb0stALoJBUfc3wlxGzudHtdlY2MB8GA1UdIwQY
MBaAFCkJ//zYGma8mLYp1MBXkkdkXw/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2Qt
ZjJhZTdiYzdlY2M1LzEvOXZTeTBBdWdrRlI5emZDWEViTzUwZTEyVmpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2QtZjJhZTdiYzdlY2M1
LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBH7qqAwQB
H7quMA8EAgACMAkDBwAqAkDAEAAwDQYJKoZIhvcNAQELBQADggEBAGY5W8nA1XzZ
sUtER5DTqPymb+U8/0aa/Afcjhx5GrU4RFRqbAkpcmQ1e8fIUcQarL1VMDVmLk5v
M7xuZ/i3iddnDsg8SFazvabVtbRVRy22/XDm7Qpv6+26WDOGV/RuHwsXT1I+5smB
Se6CQfSOy8IoLHbDx3YjNgWE2k2iI8WSqWFcEVDNm0Vq+PX4Vj1HSkSEoVVDFdGC
DWTGRwvVT1IOczSBhLVYUGkGJI0cMWjlycISon27KYEiiygbokHe6UTzvV8pRYK9
5hCcVd67TCmc1fvGaUa/TYzHmu39Q427ScgM3lwPcyce8dWr71ydAXZYquzShjKw
HJZ21BMI4Lc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:11 2024 by rpki-client on console-ams.rpki-client.org