Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0TxSAacF6QWCjZ4XB4DbjIM9AmY.roa
File: 0TxSAacF6QWCjZ4XB4DbjIM9AmY.roa (raw, json)
Hash identifier: Hf8E4SdETyF5yf8pSbuz5NQrqgM+GNtswxj8JKzwrU4=
Subject key identifier: D1:3C:52:01:A7:05:E9:05:82:8D:9E:17:07:80:DB:8C:83:3D:02:66
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018DABD027D8D42A348166CCEB1A8F8C3DFB
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0TxSAacF6QWCjZ4XB4DbjIM9AmY.roa
Signing time: Thu 15 Feb 2024 08:09:22 +0000
ROA not before: Thu 15 Feb 2024 08:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 31.210.37.0/24 maxlen: 24
31.210.38.0/24 maxlen: 24
31.210.39.0/24 maxlen: 24
77.92.147.0/24 maxlen: 24
78.135.75.0/24 maxlen: 24
78.135.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 12:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ab:d0:27:d8:d4:2a:34:81:66:cc:eb:1a:8f:8c:3d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 15 08:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d13c5201a705e905828d9e170780db8c833d0266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:4a:da:ba:34:c6:61:24:14:e4:bf:e7:00:
43:4a:72:2b:d6:67:9e:4e:be:34:25:f7:b7:e7:78:
b1:e1:1d:39:84:3e:3c:57:d8:7b:d5:95:34:57:db:
de:ab:c5:fd:78:b0:10:fb:7f:19:af:4b:87:46:0a:
3a:8e:84:ef:ea:73:48:1b:e0:29:84:5a:3a:c8:ca:
76:03:5a:2f:42:9c:d1:5f:23:db:42:22:df:a1:a6:
06:95:5d:c0:13:71:05:ce:4c:55:6e:a7:6b:c6:c7:
ff:15:1b:98:7a:0f:7b:5c:6e:f7:22:22:76:c2:19:
ac:b3:47:84:06:ec:c1:bd:ee:fd:cf:f9:da:dc:c4:
41:b1:fa:69:d8:35:fe:4d:00:ea:4c:55:cd:e5:6c:
ab:7b:8f:0e:3c:5f:d5:64:06:35:1a:e1:60:50:cd:
2b:03:25:69:b9:af:e4:84:55:2b:4b:48:42:c8:a8:
bf:22:2c:cf:91:2d:84:fb:1f:93:69:00:dd:59:37:
4a:41:74:19:ef:7c:ac:c8:1b:01:89:94:8b:08:f0:
73:03:32:37:a6:2f:3a:f1:7a:2c:87:40:72:98:ae:
91:27:54:89:ce:96:27:91:82:98:0d:31:fa:0d:f6:
63:d2:cb:9e:33:56:2b:31:16:4f:85:38:49:eb:3b:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3C:52:01:A7:05:E9:05:82:8D:9E:17:07:80:DB:8C:83:3D:02:66
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0TxSAacF6QWCjZ4XB4DbjIM9AmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.37.0-31.210.39.255
77.92.147.0/24
78.135.75.0-78.135.76.255
Signature Algorithm: sha256WithRSAEncryption
22:79:99:76:33:c9:32:96:48:be:74:7f:d7:7f:fd:26:a8:f6:
47:e7:29:5d:4c:9b:b3:db:39:d6:ce:1c:d8:d8:d8:76:64:e3:
45:a3:ef:6c:ae:34:43:78:3e:6d:12:3b:29:24:55:c6:71:25:
62:e1:d7:f8:c0:63:1f:f3:98:2e:80:7d:e3:5f:ec:fa:2d:38:
74:77:3a:41:eb:64:a0:0a:0b:d2:a1:ff:94:82:d5:82:e1:64:
ce:8d:de:d4:5e:db:cc:3b:b1:6e:4b:a5:6d:07:e8:de:09:83:
3f:8f:2a:98:7e:b7:01:98:1c:de:57:0d:0f:1c:b9:91:60:84:
64:96:b7:a7:4b:24:7d:85:50:f5:b1:9d:73:df:91:58:5b:3d:
ec:f8:cb:2a:fb:7c:15:6a:ab:e7:b3:d0:05:ec:fd:b8:1e:11:
97:58:6b:fd:34:a4:9e:ba:64:6b:cb:08:f9:e2:b1:d5:09:29:
47:9d:c0:45:99:2b:25:a5:6d:51:6c:0e:c6:9b:86:74:9d:18:
14:03:60:25:1c:65:0b:78:1a:31:56:31:4d:c8:26:cc:43:4d:
b3:7a:72:78:a7:f2:81:00:f3:c7:d8:7c:5d:ac:6d:2a:e4:2d:
b4:4e:7b:2c:ba:9d:97:c7:d6:24:00:bd:ef:3a:71:b4:61:d5:
fa:5d:84:08
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY2r0CfY1Co0gWbM6xqPjD37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwMjE1MDgwOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTNjNTIwMWE3MDVlOTA1ODI4ZDllMTcwNzgwZGI4YzgzM2QwMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwdK2ro0xmEkFOS/5wBDSnIr1mee
Tr40Jfe353ix4R05hD48V9h71ZU0V9veq8X9eLAQ+38Zr0uHRgo6joTv6nNIG+Ap
hFo6yMp2A1ovQpzRXyPbQiLfoaYGlV3AE3EFzkxVbqdrxsf/FRuYeg97XG73IiJ2
whmss0eEBuzBve79z/na3MRBsfpp2DX+TQDqTFXN5Wyre48OPF/VZAY1GuFgUM0r
AyVpua/khFUrS0hCyKi/IizPkS2E+x+TaQDdWTdKQXQZ73ysyBsBiZSLCPBzAzI3
pi868Xosh0BymK6RJ1SJzpYnkYKYDTH6DfZj0sueM1YrMRZPhThJ6zuB4wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNE8UgGnBekFgo2eFweA24yDPQJmMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvMFR4U0FhY0Y2UVdDalo0WEI0RGJqSU05QW1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAAf0iUD
BAMf0iADBABNXJMwDAMEAE6HSwMEAE6HTDANBgkqhkiG9w0BAQsFAAOCAQEAInmZ
djPJMpZIvnR/13/9Jqj2R+cpXUybs9s51s4c2NjYdmTjRaPvbK40Q3g+bRI7KSRV
xnElYuHX+MBjH/OYLoB941/s+i04dHc6QetkoAoL0qH/lILVguFkzo3e1F7bzDux
bkulbQfo3gmDP48qmH63AZgc3lcNDxy5kWCEZJa3p0skfYVQ9bGdc9+RWFs97PjL
Kvt8FWqr57PQBez9uB4Rl1hr/TSknrpka8sI+eKx1QkpR53ARZkrJaVtUWwOxpuG
dJ0YFANgJRxlC3gaMVYxTcgmzENNs3pyeKfygQDzx9h8XaxtKuQttE57LLqdl8fW
JAC97zpxtGHV+l2ECA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org