Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/WrKPwIjmuXhlTQtWAcyg4F1bqa0.roa
File: WrKPwIjmuXhlTQtWAcyg4F1bqa0.roa (raw, json)
Hash identifier: q7eWpb0cFvq5QpRx2VQ+z1nn/s2Qb9KG/piiixiVYeA=
Subject key identifier: 5A:B2:8F:C0:88:E6:B9:78:65:4D:0B:56:01:CC:A0:E0:5D:5B:A9:AD
Certificate issuer: /CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Certificate serial: 01856C1CA995C6F100D2D75ECE20B258E81C
Authority key identifier: 97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/WrKPwIjmuXhlTQtWAcyg4F1bqa0.roa
Signing time: Sun 01 Jan 2023 06:54:55 +0000
ROA not before: Sun 01 Jan 2023 06:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39153
IP address blocks: 31.24.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a9:95:c6:f1:00:d2:d7:5e:ce:20:b2:58:e8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Validity
Not Before: Jan 1 06:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ab28fc088e6b978654d0b5601cca0e05d5ba9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:c5:f6:3e:2f:ff:3f:10:c9:e7:15:52:53:
00:04:5b:c0:68:a1:ff:19:af:8a:6d:f4:df:3f:d5:
d9:cf:be:c2:7a:7a:e7:49:09:1c:cb:39:65:e8:41:
8b:58:ae:fc:8c:aa:7a:0a:f0:b5:84:3e:f9:ad:db:
8a:2b:4f:2b:26:fb:9f:72:81:c1:4f:37:32:d5:84:
74:58:c8:34:9a:10:03:12:81:be:b1:02:aa:22:e3:
ae:02:1b:0d:e9:40:c6:1f:bc:cf:54:9b:56:13:c7:
2c:a9:35:ff:9f:9a:04:4e:35:29:c6:f4:04:40:94:
3b:ec:45:52:bd:b0:b2:25:3e:6f:f9:91:ab:bd:a2:
92:cf:45:21:57:48:15:b6:6d:7b:cd:55:67:1c:0c:
f4:4b:51:10:9b:60:32:df:9d:41:29:51:ac:ea:a1:
3c:2a:63:81:d3:2c:65:f4:23:2d:76:be:30:c2:74:
09:e1:e0:41:52:63:75:ce:d4:f7:14:dd:40:9c:95:
d9:71:6a:3d:c4:5c:6d:be:68:29:f0:e9:eb:d9:e9:
65:41:32:47:38:f3:7d:11:6e:56:69:9e:a9:5c:f4:
53:9f:ae:83:43:58:c7:ba:ab:f4:8f:31:3d:91:5a:
08:6c:09:43:1c:cd:22:c1:95:20:98:85:80:d4:0d:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B2:8F:C0:88:E6:B9:78:65:4D:0B:56:01:CC:A0:E0:5D:5B:A9:AD
X509v3 Authority Key Identifier:
keyid:97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/WrKPwIjmuXhlTQtWAcyg4F1bqa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:07:76:b6:d4:f2:a8:ef:cd:ed:2b:13:09:ed:a7:af:77:91:
84:86:d6:89:98:88:63:08:04:4d:a4:73:be:36:76:df:ea:22:
65:bd:28:89:dd:4a:22:c3:aa:7c:e0:3a:40:be:b9:a3:1f:21:
11:34:c4:b7:f6:72:ea:bd:42:b0:78:67:47:93:7a:5d:57:1f:
29:77:a2:f5:7d:05:0e:9d:b9:fe:6b:08:88:f8:a2:be:a6:2e:
46:c4:da:98:f3:c7:41:a5:bd:4c:2f:1a:56:03:ee:9e:ed:f8:
44:17:46:68:0e:ae:25:60:40:f3:47:0b:a4:d0:31:a6:73:07:
8d:82:7e:f8:c8:a8:bb:9e:5c:76:94:07:b7:4e:49:e0:ee:e9:
4e:0c:e7:93:d0:20:ea:67:e3:43:48:6d:28:ec:94:97:e7:8a:
f2:3f:d0:e0:41:a2:28:e7:0f:20:53:96:c8:9a:ba:b1:90:52:
77:28:56:0b:66:d4:fc:69:2b:42:ea:8d:1a:51:9e:3b:fb:e2:
0c:a8:70:e5:27:b1:c9:09:d4:fa:24:99:00:86:18:aa:c3:e5:
61:de:30:2f:69:8f:e2:3b:7b:a9:28:40:0a:9a:0e:7c:4b:47:
3e:2a:63:6a:0f:79:08:79:fd:e2:dc:a5:ae:6b:02:57:6a:8a:
3c:24:29:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsHKmVxvEA0tdeziCyWOgcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWJmMTRhOGU1NGYxMmRkOGIyNDUzNTNkZjY4M2UxODJh
MDk2YzUwHhcNMjMwMTAxMDY1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWIyOGZjMDg4ZTZiOTc4NjU0ZDBiNTYwMWNjYTBlMDVkNWJhOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOnF9j4v/z8QyecVUlMABFvAaKH/
Ga+KbfTfP9XZz77CenrnSQkcyzll6EGLWK78jKp6CvC1hD75rduKK08rJvufcoHB
Tzcy1YR0WMg0mhADEoG+sQKqIuOuAhsN6UDGH7zPVJtWE8csqTX/n5oETjUpxvQE
QJQ77EVSvbCyJT5v+ZGrvaKSz0UhV0gVtm17zVVnHAz0S1EQm2Ay351BKVGs6qE8
KmOB0yxl9CMtdr4wwnQJ4eBBUmN1ztT3FN1AnJXZcWo9xFxtvmgp8Onr2ellQTJH
OPN9EW5WaZ6pXPRTn66DQ1jHuqv0jzE9kVoIbAlDHM0iwZUgmIWA1A1QIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqyj8CI5rl4ZU0LVgHMoOBdW6mtMB8GA1UdIwQY
MBaAFJfr8UqOVPEt2LJFNT32g+GCoJbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC12eFNvNVU4UzNZc2tVMVBmYUQ0WUtnbHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wOTJiMTEtMTYyMi00NTU2LThlNjUt
MjQwOWFhZDA4MWQyLzEvV3JLUHdJam11WGhsVFF0V0FjeWc0RjFicWEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8wOTJiMTEtMTYyMi00NTU2LThlNjUtMjQwOWFhZDA4MWQy
LzEvbC12eFNvNVU4UzNZc2tVMVBmYUQ0WUtnbHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxj/MA0G
CSqGSIb3DQEBCwUAA4IBAQBuB3a21PKo783tKxMJ7aevd5GEhtaJmIhjCARNpHO+
Nnbf6iJlvSiJ3Uoiw6p84DpAvrmjHyERNMS39nLqvUKweGdHk3pdVx8pd6L1fQUO
nbn+awiI+KK+pi5GxNqY88dBpb1MLxpWA+6e7fhEF0ZoDq4lYEDzRwuk0DGmcweN
gn74yKi7nlx2lAe3Tkng7ulODOeT0CDqZ+NDSG0o7JSX54ryP9DgQaIo5w8gU5bI
mrqxkFJ3KFYLZtT8aStC6o0aUZ47++IMqHDlJ7HJCdT6JJkAhhiqw+Vh3jAvaY/i
O3upKEAKmg58S0c+KmNqD3kIef3i3KWuawJXaoo8JCnd
-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:35 2024 by rpki-client on console-fra.rpki-client.org