Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/vvIappv_VDgKjsMIfF6TfcXj1gg.roa
File: vvIappv_VDgKjsMIfF6TfcXj1gg.roa (raw, json)
Hash identifier: BJOTOciXASsNkxwlOB6GXLb2rC0cM+ckqCrF5LnfJVU=
Subject key identifier: BE:F2:1A:A6:9B:FF:54:38:0A:8E:C3:08:7C:5E:93:7D:C5:E3:D6:08
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0192136EE972159B3A13FA127E870200FDB8
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/vvIappv_VDgKjsMIfF6TfcXj1gg.roa
Signing time: Sat 21 Sep 2024 07:14:48 +0000
ROA not before: Sat 21 Sep 2024 07:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19844
IP address blocks: 31.40.193.0/24 maxlen: 24
45.141.13.0/24 maxlen: 24
83.136.48.0/24 maxlen: 24
93.177.111.0/24 maxlen: 24
185.240.86.0/24 maxlen: 24
194.62.164.0/24 maxlen: 24
194.62.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 20:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:13:6e:e9:72:15:9b:3a:13:fa:12:7e:87:02:00:fd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 21 07:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bef21aa69bff54380a8ec3087c5e937dc5e3d608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:bb:8e:ff:57:8a:a8:67:99:98:c9:b1:c6:
a5:c6:4c:a9:15:4b:61:80:62:80:93:5b:6b:34:fa:
33:ce:87:82:75:d3:71:51:86:a1:f8:c8:a9:c3:b9:
d7:6a:fc:03:a3:01:c3:dd:bf:f5:1a:e1:05:0e:6b:
a8:1e:c3:57:60:3b:8c:d4:45:37:00:c2:d2:d1:0e:
81:1a:30:f7:4d:b3:07:53:8f:f1:88:d6:8d:8a:95:
8c:c4:5b:23:15:90:1b:21:73:d7:71:d2:15:61:0e:
cc:7f:0b:a1:62:d0:a6:62:c8:a5:c8:52:63:7e:42:
0c:5f:ba:fd:d8:e7:dd:77:39:8a:fa:8c:8a:5a:64:
d5:d3:ec:9d:d2:77:5a:c6:e2:86:bc:55:45:7f:e6:
d6:b1:4c:5b:2c:6e:4b:ba:c1:68:ee:5a:50:c8:20:
02:b2:75:31:c3:48:4b:7c:89:d7:3f:9d:69:73:14:
bc:e1:f8:4a:51:da:90:c0:7c:3b:0d:57:18:4c:fc:
ca:2c:5e:f0:42:d4:bc:a8:23:a8:54:c6:bd:86:29:
47:13:7e:3a:75:15:b7:22:6d:24:5b:ac:b4:64:30:
49:6e:e2:2e:13:d9:d6:67:d6:42:8b:0c:41:a7:3a:
0c:9e:b4:b9:38:19:0e:59:e1:42:cb:86:5a:b9:42:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F2:1A:A6:9B:FF:54:38:0A:8E:C3:08:7C:5E:93:7D:C5:E3:D6:08
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/vvIappv_VDgKjsMIfF6TfcXj1gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.193.0/24
45.141.13.0/24
83.136.48.0/24
93.177.111.0/24
185.240.86.0/24
194.62.164.0/24
194.62.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c3:15:aa:10:e9:f8:78:38:52:bd:ed:af:bc:a2:89:a6:6d:
2c:50:48:a7:37:fd:3b:54:b7:bb:2e:42:39:de:73:1e:6a:e7:
3b:bb:71:3e:5f:b5:27:f4:80:ae:c7:10:4e:9f:2f:89:0d:33:
60:9f:31:e5:b6:65:ec:5a:20:a3:28:c1:5c:c6:2f:77:69:64:
6b:27:42:56:e4:42:e1:08:1b:bf:81:22:3c:48:9e:3b:a5:93:
3a:1d:e0:d9:d8:1e:a9:e6:93:f3:89:72:dc:7b:6f:34:ce:c0:
29:f1:3f:a3:ca:4e:d7:fb:f8:ed:cb:16:a5:a2:f3:52:e3:1f:
84:8c:30:24:49:e0:dd:5c:cf:69:91:a6:83:eb:17:07:e2:18:
eb:84:92:33:7d:d8:0e:ba:69:44:25:25:05:c7:02:13:ac:c0:
e9:7b:9d:a8:d4:4f:94:d3:0c:c8:b4:75:60:f1:2a:9f:81:75:
e7:c7:47:f0:fb:2f:4f:f8:f6:c0:1a:c4:ad:cc:e3:7b:d4:06:
76:09:f5:17:14:de:73:ba:28:80:60:a6:1c:8d:b3:01:39:02:
c3:f8:f7:72:23:2e:71:bb:92:9b:31:c4:ed:5f:90:13:41:93:
c2:5a:8c:b4:56:41:f1:dd:1c:e8:fb:ef:25:c4:d4:07:75:65:
ee:21:d6:98
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZITbulyFZs6E/oSfocCAP24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjQwOTIxMDcxNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWYyMWFhNjliZmY1NDM4MGE4ZWMzMDg3YzVlOTM3ZGM1ZTNkNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxK7jv9XiqhnmZjJscalxkypFUth
gGKAk1trNPozzoeCddNxUYah+Mipw7nXavwDowHD3b/1GuEFDmuoHsNXYDuM1EU3
AMLS0Q6BGjD3TbMHU4/xiNaNipWMxFsjFZAbIXPXcdIVYQ7MfwuhYtCmYsilyFJj
fkIMX7r92OfddzmK+oyKWmTV0+yd0ndaxuKGvFVFf+bWsUxbLG5LusFo7lpQyCAC
snUxw0hLfInXP51pcxS84fhKUdqQwHw7DVcYTPzKLF7wQtS8qCOoVMa9hilHE346
dRW3Im0kW6y0ZDBJbuIuE9nWZ9ZCiwxBpzoMnrS5OBkOWeFCy4ZauUL6bwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFL7yGqab/1Q4Co7DCHxek33F49YIMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvdnZJYXBwdl9WRGdLanNNSWZGNlRmY1hqMWdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAHyjBAwQA
LY0NAwQAU4gwAwQAXbFvAwQAufBWAwQAwj6kAwQAwj6nMA0GCSqGSIb3DQEBCwUA
A4IBAQCiwxWqEOn4eDhSve2vvKKJpm0sUEinN/07VLe7LkI53nMeauc7u3E+X7Un
9ICuxxBOny+JDTNgnzHltmXsWiCjKMFcxi93aWRrJ0JW5ELhCBu/gSI8SJ47pZM6
HeDZ2B6p5pPziXLce280zsAp8T+jyk7X+/jtyxalovNS4x+EjDAkSeDdXM9pkaaD
6xcH4hjrhJIzfdgOumlEJSUFxwITrMDpe52o1E+U0wzItHVg8SqfgXXnx0fw+y9P
+PbAGsStzON71AZ2CfUXFN5zuiiAYKYcjbMBOQLD+PdyIy5xu5KbMcTtX5ATQZPC
Woy0VkHx3Rzo++8lxNQHdWXuIdaY
-----END CERTIFICATE-----
Generated at Sat Oct 5 23:39:19 2024 by rpki-client on console-ams.rpki-client.org