Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/EgvaR2lprXwKx8d0etvDedp4wAQ.roa
File: EgvaR2lprXwKx8d0etvDedp4wAQ.roa (raw, json)
Hash identifier: 1SLN9nP/Gnr7zT8QwAhurT85hvhpX3xBuuP5XS39ovE=
Subject key identifier: 12:0B:DA:47:69:69:AD:7C:0A:C7:C7:74:7A:DB:C3:79:DA:78:C0:04
Certificate issuer: /CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
Certificate serial: 018ADA66398873CF62ECE596B073F869F3E0
Authority key identifier: F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/EgvaR2lprXwKx8d0etvDedp4wAQ.roa
Signing time: Thu 28 Sep 2023 06:07:27 +0000
ROA not before: Thu 28 Sep 2023 06:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216302
IP address blocks: 31.24.248.0/24 maxlen: 24
2a12:48c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 28 Sep 2023 07:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:66:39:88:73:cf:62:ec:e5:96:b0:73:f8:69:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
Validity
Not Before: Sep 28 06:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=120bda476969ad7c0ac7c7747adbc379da78c004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:c7:f5:b9:17:99:0d:e6:e8:ea:ff:0a:a3:
9d:8d:36:17:57:68:88:57:55:9e:04:e5:5d:a6:27:
1d:bb:0c:98:38:55:bd:0b:9b:60:f2:6e:ab:48:e6:
9c:a6:88:5c:bb:93:6d:9e:db:e1:9d:70:32:3f:dc:
01:39:28:a0:ae:81:12:0a:6e:19:6f:75:db:ac:65:
0a:95:2c:03:6b:95:42:2a:6c:ea:2e:8e:60:3a:3c:
5c:c3:3d:a5:f5:50:29:93:48:4c:02:f8:b9:d2:b6:
81:fa:56:bf:17:5a:ec:7c:21:0b:d9:c6:78:bb:6d:
c4:8c:b4:1c:9a:b2:12:d0:7a:69:dc:bb:52:5e:2b:
a7:0a:2a:9c:61:ca:08:9c:98:4f:99:96:98:b6:11:
e0:0b:35:e3:ed:99:3a:44:54:8e:11:82:a7:6a:22:
2c:ec:43:04:1a:58:d7:49:65:23:39:e2:5e:a9:f7:
74:53:30:b3:34:bd:cb:a3:21:b2:c6:82:e4:17:ab:
f1:ab:6b:b2:32:d9:a9:64:75:92:66:c9:82:db:75:
a2:d1:61:ad:1d:66:0a:e4:3d:8a:10:74:56:0f:c4:
10:8a:56:3a:1b:e4:04:42:d5:06:f6:6d:7c:c7:7d:
a9:9c:61:7d:e6:ec:c1:5e:c2:d4:f4:4b:f2:27:62:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:DA:47:69:69:AD:7C:0A:C7:C7:74:7A:DB:C3:79:DA:78:C0:04
X509v3 Authority Key Identifier:
keyid:F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/EgvaR2lprXwKx8d0etvDedp4wAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.248.0/24
IPv6:
2a12:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:96:c2:57:8d:ed:27:79:e9:4a:86:4a:29:53:01:b9:fe:71:
3f:f1:3b:d9:a2:17:90:0a:20:ae:72:24:59:54:14:f0:00:86:
f6:e2:d7:71:8f:45:56:72:31:9a:91:ee:15:dd:06:bb:5d:04:
db:82:84:84:cc:61:0f:e1:1f:3e:88:ed:64:a7:ba:50:f8:af:
4a:fe:f1:8e:dd:a7:be:aa:d7:f3:80:e3:ae:f2:1c:35:f4:af:
75:d8:e2:73:43:9b:ec:6d:1a:a5:7e:1f:11:e6:58:02:90:6b:
53:5b:ac:56:32:a5:de:ff:ab:fd:02:1f:a6:62:0f:64:aa:21:
78:5d:d7:64:b9:fb:e4:69:1e:ac:43:6e:3e:8e:7d:91:17:46:
42:b8:24:15:1f:b0:b1:f2:3e:cb:bb:c4:f1:ee:13:1c:47:c7:
13:be:d8:0f:44:bd:71:37:5c:05:82:b7:53:e7:e5:25:32:e0:
4b:80:b9:c7:df:a2:a3:86:ad:6d:82:02:f6:64:37:5c:3b:f6:
b7:f5:d9:68:31:f6:09:1c:67:bc:50:f8:91:2e:1b:1b:93:c1:
c4:d6:2f:50:95:f6:e0:03:62:ba:be:0a:c9:ef:b4:22:4d:5e:
62:33:36:59:e4:65:34:ce:32:78:29:71:04:aa:68:45:14:36:
ef:a6:54:ab
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYraZjmIc89i7OWWsHP4afPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTRjOTkxYjUyYzMwNmZmNDUxMDYwMTFhNGU5NTJkODY4
MGQyYjYwHhcNMjMwOTI4MDYwNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjBiZGE0NzY5NjlhZDdjMGFjN2M3NzQ3YWRiYzM3OWRhNzhjMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDTH9bkXmQ3m6Or/CqOdjTYXV2iI
V1WeBOVdpicduwyYOFW9C5tg8m6rSOacpohcu5NtntvhnXAyP9wBOSigroESCm4Z
b3XbrGUKlSwDa5VCKmzqLo5gOjxcwz2l9VApk0hMAvi50raB+la/F1rsfCEL2cZ4
u23EjLQcmrIS0Hpp3LtSXiunCiqcYcoInJhPmZaYthHgCzXj7Zk6RFSOEYKnaiIs
7EMEGljXSWUjOeJeqfd0UzCzNL3LoyGyxoLkF6vxq2uyMtmpZHWSZsmC23Wi0WGt
HWYK5D2KEHRWD8QQilY6G+QEQtUG9m18x32pnGF95uzBXsLU9EvyJ2LWywIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBIL2kdpaa18CsfHdHrbw3naeMAEMB8GA1UdIwQY
MBaAFPTkyZG1LDBv9FEGARpOlS2GgNK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9USmtiVXNNR18wVVFZQkdrNlZMWWFBMHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82Y2UxNTQtYzNjNi00NDYzLWE2YmQt
MDIxMDhjZWJiM2ZmLzEvRWd2YVIybHByWHdLeDhkMGV0dkRlZHA0d0FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82Y2UxNTQtYzNjNi00NDYzLWE2YmQtMDIxMDhjZWJiM2Zm
LzEvOU9USmtiVXNNR18wVVFZQkdrNlZMWWFBMHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAHxj4MA0E
AgACMAcDBQMqEkjAMA0GCSqGSIb3DQEBCwUAA4IBAQB1lsJXje0neelKhkopUwG5
/nE/8TvZoheQCiCuciRZVBTwAIb24tdxj0VWcjGake4V3Qa7XQTbgoSEzGEP4R8+
iO1kp7pQ+K9K/vGO3ae+qtfzgOOu8hw19K912OJzQ5vsbRqlfh8R5lgCkGtTW6xW
MqXe/6v9Ah+mYg9kqiF4XddkufvkaR6sQ24+jn2RF0ZCuCQVH7Cx8j7Lu8Tx7hMc
R8cTvtgPRL1xN1wFgrdT5+UlMuBLgLnH36Kjhq1tggL2ZDdcO/a39dloMfYJHGe8
UPiRLhsbk8HE1i9QlfbgA2K6vgrJ77QiTV5iMzZZ5GU0zjJ4KXEEqmhFFDbvplSr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:46 2024 by rpki-client on console-fra.rpki-client.org