Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/SilReBehWQH3c5R_b7wgT2-IFEI.roa
File: SilReBehWQH3c5R_b7wgT2-IFEI.roa (raw, json)
Hash identifier: LcY6fZrkmwBGvuzYzpvYZ29FE1ygQlKS4lFNrWDf9tQ=
Subject key identifier: 4A:29:51:78:17:A1:59:01:F7:73:94:7F:6F:BC:20:4F:6F:88:14:42
Certificate issuer: /CN=5bdc41674d65d2af9174b1abace0b371362b4851
Certificate serial: 018639E27721228B4A1ABA5797752D8FD420
Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/SilReBehWQH3c5R_b7wgT2-IFEI.roa
Signing time: Fri 10 Feb 2023 05:53:08 +0000
ROA not before: Fri 10 Feb 2023 05:53:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56476
IP address blocks: 31.42.192.0/24 maxlen: 24
31.42.192.0/19 maxlen: 19
31.42.194.0/24 maxlen: 24
31.42.195.0/24 maxlen: 24
31.42.193.0/24 maxlen: 24
31.42.198.0/24 maxlen: 24
31.42.199.0/24 maxlen: 24
31.42.196.0/24 maxlen: 24
31.42.197.0/24 maxlen: 24
31.42.201.0/24 maxlen: 24
31.42.202.0/24 maxlen: 24
31.42.200.0/24 maxlen: 24
31.42.205.0/24 maxlen: 24
31.42.206.0/24 maxlen: 24
31.42.203.0/24 maxlen: 24
31.42.204.0/24 maxlen: 24
31.42.208.0/24 maxlen: 24
31.42.209.0/24 maxlen: 24
31.42.207.0/24 maxlen: 24
31.42.212.0/24 maxlen: 24
31.42.213.0/24 maxlen: 24
31.42.210.0/24 maxlen: 24
31.42.211.0/24 maxlen: 24
31.42.215.0/24 maxlen: 24
31.42.216.0/24 maxlen: 24
31.42.214.0/24 maxlen: 24
31.42.219.0/24 maxlen: 24
31.42.217.0/24 maxlen: 24
31.42.218.0/24 maxlen: 24
31.42.222.0/24 maxlen: 24
31.42.223.0/24 maxlen: 24
31.42.220.0/24 maxlen: 24
31.42.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:39:e2:77:21:22:8b:4a:1a:ba:57:97:75:2d:8f:d4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851
Validity
Not Before: Feb 10 05:53:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a29517817a15901f773947f6fbc204f6f881442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:10:0e:49:a2:c4:8b:a2:30:e7:ea:69:0c:7f:
0a:f0:b2:ff:37:b9:eb:14:aa:38:a3:ed:33:cd:22:
3a:32:5e:77:8d:ea:12:0d:8d:7f:02:c3:e6:62:c3:
4e:a9:78:f1:c9:25:d1:13:23:dd:6f:0e:1d:79:ac:
78:aa:bf:1b:45:b3:1a:fa:a0:1b:c5:d6:5b:08:e4:
0c:df:e2:ba:2f:31:96:d1:0d:4a:1b:c4:55:f0:58:
08:17:41:78:71:e6:ce:f1:fe:5f:19:aa:dd:00:ed:
89:60:9e:53:4d:64:95:39:f6:7d:3f:56:f4:99:c8:
58:4c:ee:2b:84:17:ac:1a:ed:a5:2d:e7:6d:68:a7:
2a:30:2c:fe:ca:74:6e:71:ae:1e:b2:15:0f:21:b6:
fa:7b:15:02:df:8a:f7:7a:4a:30:22:1a:07:58:6f:
a4:9e:ae:bf:b5:79:70:76:c0:89:72:8c:b8:65:e3:
72:a1:df:10:6f:d0:50:02:10:4e:33:27:87:f5:47:
57:21:3f:46:3b:96:91:99:67:ba:62:af:dc:80:c3:
2d:e6:26:1a:a1:00:31:4f:9d:a8:ed:ec:52:40:d0:
db:f3:18:eb:4c:d0:5b:de:23:e2:9a:50:97:b7:d7:
d0:9c:64:53:32:da:f0:62:4c:16:51:d5:fa:48:a6:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:29:51:78:17:A1:59:01:F7:73:94:7F:6F:BC:20:4F:6F:88:14:42
X509v3 Authority Key Identifier:
keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/SilReBehWQH3c5R_b7wgT2-IFEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:43:c3:b0:6b:1b:ac:c9:f8:43:8b:e2:66:c3:3a:27:a3:c9:
bd:0e:32:63:a5:3f:72:99:06:23:59:80:11:60:6a:22:a6:8c:
fb:54:d1:6a:5c:51:68:ba:95:7a:05:6f:1d:bb:34:e1:06:63:
cf:c2:9f:62:f9:5c:9b:38:73:51:a9:6d:56:71:9a:1d:26:fb:
2d:e4:5a:d2:53:d3:1c:45:4f:12:93:9b:85:2b:cb:1f:34:f9:
f7:63:aa:d0:f8:94:73:86:7e:06:de:c0:15:3b:23:13:df:be:
c7:12:d7:df:eb:47:3d:e6:56:12:0b:44:d7:98:dd:9b:29:b5:
5f:17:16:05:07:eb:bb:a8:bf:2f:01:27:45:57:65:b2:41:4b:
bb:24:19:c1:92:b9:b4:6d:9d:bf:cc:65:7a:a4:80:22:42:83:
ef:98:35:04:b5:32:14:41:c1:dd:e1:6d:32:c5:ab:1a:d4:ed:
bc:ea:fb:6b:90:3a:b4:10:f3:bb:92:b6:02:a2:a7:bb:e5:f7:
95:72:e8:fa:84:01:7b:03:ba:57:87:92:a0:7a:77:40:f4:ac:
d5:07:7c:52:b6:11:7a:4d:26:9b:1b:9d:2d:02:3d:a9:22:8a:
ca:76:e7:83:63:d8:47:16:e1:8d:30:7f:76:9e:8b:03:a6:0c:
9a:58:f2:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYY54nchIotKGrpXl3Utj9QgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZGM0MTY3NGQ2NWQyYWY5MTc0YjFhYmFjZTBiMzcxMzYy
YjQ4NTEwHhcNMjMwMjEwMDU1MzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTI5NTE3ODE3YTE1OTAxZjc3Mzk0N2Y2ZmJjMjA0ZjZmODgxNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRAOSaLEi6Iw5+ppDH8K8LL/N7nr
FKo4o+0zzSI6Ml53jeoSDY1/AsPmYsNOqXjxySXREyPdbw4deax4qr8bRbMa+qAb
xdZbCOQM3+K6LzGW0Q1KG8RV8FgIF0F4cebO8f5fGardAO2JYJ5TTWSVOfZ9P1b0
mchYTO4rhBesGu2lLedtaKcqMCz+ynRuca4eshUPIbb6exUC34r3ekowIhoHWG+k
nq6/tXlwdsCJcoy4ZeNyod8Qb9BQAhBOMyeH9UdXIT9GO5aRmWe6Yq/cgMMt5iYa
oQAxT52o7exSQNDb8xjrTNBb3iPimlCXt9fQnGRTMtrwYkwWUdX6SKanYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEopUXgXoVkB93OUf2+8IE9viBRCMB8GA1UdIwQY
MBaAFFvcQWdNZdKvkXSxq6zgs3E2K0hRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWIt
OWY2N2ZmNmFmZDUwLzEvU2lsUmVCZWhXUUgzYzVSX2I3d2dUMi1JRkVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWItOWY2N2ZmNmFmZDUw
LzEvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFHyrAMA0G
CSqGSIb3DQEBCwUAA4IBAQChQ8OwaxusyfhDi+Jmwzono8m9DjJjpT9ymQYjWYAR
YGoipoz7VNFqXFFoupV6BW8duzThBmPPwp9i+VybOHNRqW1WcZodJvst5FrSU9Mc
RU8Sk5uFK8sfNPn3Y6rQ+JRzhn4G3sAVOyMT377HEtff60c95lYSC0TXmN2bKbVf
FxYFB+u7qL8vASdFV2WyQUu7JBnBkrm0bZ2/zGV6pIAiQoPvmDUEtTIUQcHd4W0y
xasa1O286vtrkDq0EPO7krYCoqe75feVcuj6hAF7A7pXh5KgendA9KzVB3xSthF6
TSabG50tAj2pIorKdueDY9hHFuGNMH92nosDpgyaWPKH
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:12 2024 by rpki-client on console-ams.rpki-client.org