Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-vNrS0fX4xXT5MD6lShboNBz1Bs.roa
File: 1-vNrS0fX4xXT5MD6lShboNBz1Bs.roa (raw, json)
Hash identifier: TVn6nlg+d5tgLJoyaLC2xpX+wBSZlrjkBUI56+CgXIg=
Subject key identifier: FA:F3:6B:4B:47:D7:E3:15:D3:E4:C0:FA:95:28:5B:A0:D0:73:D4:1B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01927CF2FD5A1ADC54BCB29E0A6833032BCD
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-vNrS0fX4xXT5MD6lShboNBz1Bs.roa
Signing time: Fri 11 Oct 2024 18:59:12 +0000
ROA not before: Fri 11 Oct 2024 18:59:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.46.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
31.210.54.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
212.68.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 18:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7c:f2:fd:5a:1a:dc:54:bc:b2:9e:0a:68:33:03:2b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 11 18:59:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faf36b4b47d7e315d3e4c0fa95285ba0d073d41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:e2:05:ef:7d:8d:b9:c4:6f:72:18:fd:48:
03:eb:13:47:f3:7d:e5:e9:5a:93:d2:53:2b:5b:cc:
16:ff:98:e5:89:b7:83:87:ee:f8:2a:2c:91:ce:a4:
a7:dc:51:3d:af:d1:72:7a:27:e7:62:ee:22:ec:ef:
49:7c:fe:11:9e:4f:d2:99:86:1f:17:9c:5e:75:94:
d3:af:53:4f:de:17:9b:45:f5:c8:58:cb:9c:d9:2a:
16:86:c8:71:56:a5:a7:20:1c:2e:f6:99:b4:15:a7:
56:34:17:91:2b:02:3d:23:d1:e7:a8:47:19:5f:8d:
9c:8b:5e:5a:48:cb:de:f7:fd:84:68:58:67:4c:16:
98:57:58:15:a3:dc:21:a7:64:ac:c1:07:16:24:89:
e0:54:32:b2:01:8a:9d:55:ea:40:7b:e3:0b:4c:d6:
ca:ba:44:81:64:0f:a6:65:61:34:0f:dd:06:02:60:
fa:3e:b5:06:29:5a:3b:5d:20:9c:a4:aa:97:9f:bd:
1f:80:57:a9:b6:5e:83:89:29:aa:22:46:59:75:45:
81:e8:a3:3a:9b:cb:90:38:b7:a5:03:b6:cd:06:b2:
e3:24:8d:6b:8b:29:09:c2:19:f2:a7:ec:91:39:25:
ae:9c:c6:0b:36:c1:7a:da:ba:2a:73:db:3f:ea:0d:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F3:6B:4B:47:D7:E3:15:D3:E4:C0:FA:95:28:5B:A0:D0:73:D4:1B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-vNrS0fX4xXT5MD6lShboNBz1Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.46.0/24
31.210.50.0/23
31.210.53.0-31.210.54.255
77.92.148.0/24
78.135.78.0/24
188.132.170.0/24
188.132.215.0/24
188.132.227.0-188.132.228.255
212.68.36.0/24
212.68.49.0/24
212.68.56.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4d:62:6c:21:8d:30:03:3d:06:b9:83:cc:42:28:4b:3d:62:
e6:6c:6e:2a:a6:2d:3f:5a:35:23:d8:01:9c:73:f3:cb:67:85:
ec:e1:7e:83:6a:46:47:c9:45:2e:93:c9:45:98:46:fb:5e:dc:
ee:5b:e5:ba:cd:5b:f4:6d:ee:7d:be:60:ca:fa:a3:8a:35:fc:
37:c2:c3:30:13:a0:4b:a0:f3:52:dd:80:9b:e4:83:58:38:1f:
c0:e5:d7:9a:73:b4:64:b3:82:9d:12:d8:d8:6b:45:85:6b:03:
13:69:d2:2a:6f:3a:55:c4:7e:52:74:72:f9:ed:6a:2c:9c:5a:
85:c9:5a:29:78:2e:40:99:6c:09:34:ab:17:25:a4:8a:8e:05:
93:f9:3a:e9:9f:32:10:bf:23:0f:4d:b7:d4:bb:76:fd:39:58:
13:f9:f2:70:a0:ea:4c:b6:c9:f9:e5:0b:8c:b0:43:ac:de:07:
68:30:e4:99:a2:19:8c:92:ca:8d:b5:8e:66:20:d4:89:4c:6c:
c6:73:f5:f6:75:a4:77:a3:5f:3d:ea:8b:d3:8f:bd:50:20:07:
b8:23:b3:3e:d7:4f:33:95:e8:11:6a:ee:d6:f5:95:8e:3e:4f:
85:82:2c:03:77:a5:55:67:76:2e:08:fd:a4:12:96:3c:05:02:
11:a7:59:b2
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAZJ88v1aGtxUvLKeCmgzAyvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQxMDExMTg1OTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWYzNmI0YjQ3ZDdlMzE1ZDNlNGMwZmE5NTI4NWJhMGQwNzNkNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0HiBe99jbnEb3IY/UgD6xNH833l
6VqT0lMrW8wW/5jlibeDh+74KiyRzqSn3FE9r9FyeifnYu4i7O9JfP4Rnk/SmYYf
F5xedZTTr1NP3hebRfXIWMuc2SoWhshxVqWnIBwu9pm0FadWNBeRKwI9I9HnqEcZ
X42ci15aSMve9/2EaFhnTBaYV1gVo9whp2SswQcWJIngVDKyAYqdVepAe+MLTNbK
ukSBZA+mZWE0D90GAmD6PrUGKVo7XSCcpKqXn70fgFeptl6DiSmqIkZZdUWB6KM6
m8uQOLelA7bNBrLjJI1riykJwhnyp+yROSWunMYLNsF62roqc9s/6g3qKQIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFPrza0tH1+MV0+TA+pUoW6DQc9QbMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvMS12TnJTMGZYNHhYVDVNRDZsU2hib05CejFCcy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGQvMTU4NmZkLWZkMmMtNDFmOC04ZmU5LTRlMTk4ZjBhNjAx
My8xL3lkVjBSLU5DQzRVNGRiYjZRRGNxcmVNWkxLSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBrBggrBgEFBQcBBwEB/wRcMFowWAQCAAEwUgMEAB/SLgME
AR/SMjAMAwQAH9I1AwQAH9I2AwQATVyUAwQATodOAwQAvISqAwQAvITXMAwDBAC8
hOMDBAC8hOQDBADURCQDBADURDEDBADURDgwDQYJKoZIhvcNAQELBQADggEBABhN
YmwhjTADPQa5g8xCKEs9YuZsbiqmLT9aNSPYAZxz88tnhezhfoNqRkfJRS6TyUWY
Rvte3O5b5brNW/Rt7n2+YMr6o4o1/DfCwzAToEug81LdgJvkg1g4H8Dl15pztGSz
gp0S2NhrRYVrAxNp0ipvOlXEflJ0cvntaiycWoXJWil4LkCZbAk0qxclpIqOBZP5
OumfMhC/Iw9Nt9S7dv05WBP58nCg6ky2yfnlC4ywQ6zeB2gw5JmiGYySyo21jmYg
1IlMbMZz9fZ1pHejXz3qi9OPvVAgB7gjsz7XTzOV6BFq7tb1lY4+T4WCLAN3pVVn
di4I/aQSljwFAhGnWbI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:32 2024 by rpki-client on console-ams.rpki-client.org