Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/9mU_IqLAnO4lZ-yPcAa9ErmZx2g.roa
File: 9mU_IqLAnO4lZ-yPcAa9ErmZx2g.roa (raw, json)
Hash identifier: ROJg52OOpt8m+OwHtWPD5efOL+nnmsqoiRin3WyDfVQ=
Subject key identifier: F6:65:3F:22:A2:C0:9C:EE:25:67:EC:8F:70:06:BD:12:B9:99:C7:68
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019145B12C932D192A0EA09C3BF948A531CA
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/9mU_IqLAnO4lZ-yPcAa9ErmZx2g.roa
Signing time: Mon 12 Aug 2024 08:25:24 +0000
ROA not before: Mon 12 Aug 2024 08:25:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
31.210.54.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 18:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:b1:2c:93:2d:19:2a:0e:a0:9c:3b:f9:48:a5:31:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 12 08:25:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6653f22a2c09cee2567ec8f7006bd12b999c768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:50:32:06:f9:95:9d:69:0b:cf:61:3d:7c:
94:cd:91:a0:aa:8a:14:73:14:f6:b1:a2:46:a2:9d:
eb:85:f1:d9:66:01:73:72:6b:b7:0e:70:c6:e6:c2:
7d:ae:59:cb:11:ff:82:41:f2:61:58:7f:18:54:cd:
c9:49:8f:f7:6d:da:da:a3:07:98:13:c8:84:5c:20:
2c:ea:b4:a4:5a:67:4f:08:c6:be:a8:69:93:b2:29:
17:98:c8:1c:41:16:01:ae:b4:f1:79:5f:61:da:f4:
13:5b:38:05:e3:84:65:11:6e:bb:a4:1c:a4:cc:a2:
2d:85:53:9b:02:d3:6d:b0:2e:25:9a:d9:73:b1:2b:
82:10:a7:87:2a:08:5e:75:62:a0:01:7e:44:c9:29:
1d:f8:6a:3c:c4:f0:cb:00:7f:3b:de:a9:af:c2:32:
32:2c:8d:a9:0e:13:01:f4:80:b4:49:7d:53:60:b2:
d6:7c:05:2b:df:e5:17:31:d5:f2:72:60:71:60:54:
43:a0:ad:54:02:ca:64:e1:c0:c2:e8:97:0c:9d:74:
00:5a:d1:90:56:3d:c4:6c:b0:d3:96:ab:a0:b0:45:
4f:aa:d4:30:db:73:83:f0:c4:e0:96:70:4d:b4:3c:
3a:44:4d:7b:ff:1a:ce:c7:ce:a9:c8:55:b0:8f:23:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:65:3F:22:A2:C0:9C:EE:25:67:EC:8F:70:06:BD:12:B9:99:C7:68
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/9mU_IqLAnO4lZ-yPcAa9ErmZx2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.50.0/23
31.210.53.0-31.210.54.255
78.135.78.0/24
188.132.170.0/24
188.132.215.0/24
188.132.227.0-188.132.228.255
212.68.36.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:27:3d:17:b4:3f:42:69:8c:01:4b:86:af:ea:9f:2b:88:94:
ee:17:fa:91:9f:27:e8:0d:0d:5d:93:3e:c9:74:ee:b5:9b:29:
cc:d1:31:00:b1:84:5e:20:e1:2b:ea:b0:21:9f:6d:70:0d:fd:
01:6b:5e:d6:11:d0:15:16:30:1c:1b:6b:00:51:3b:bb:95:51:
b2:40:b5:f6:9b:d2:82:32:6f:fa:da:23:d0:b3:4e:aa:a8:84:
14:cb:5d:6b:d3:5d:8a:0d:e3:78:01:d8:13:34:8c:69:78:ea:
53:ca:4e:fb:54:43:46:fd:17:10:36:4a:c7:73:27:99:5d:06:
39:60:25:bd:16:ab:83:d7:48:99:67:57:3d:cf:4f:41:66:25:
ef:f1:57:91:4e:09:ae:22:4d:f9:54:5d:c6:1f:48:f3:7f:56:
51:9b:68:a2:ec:05:65:55:b7:cc:61:a0:e9:f3:d9:d6:4a:f0:
da:47:b8:bc:88:99:2e:7a:aa:e4:0b:ae:29:d4:5f:f8:e1:07:
76:68:0f:64:15:43:6b:d6:02:68:b3:44:15:56:d1:82:b9:62:
36:3d:80:19:88:7b:e8:fe:e8:c9:c1:f7:dc:ea:69:f2:dc:0e:
78:e5:fd:ce:c4:e0:55:42:17:12:f9:5a:b2:61:f1:9d:8a:7e:
ba:86:3b:30
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZFFsSyTLRkqDqCcO/lIpTHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwODEyMDgyNTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjY1M2YyMmEyYzA5Y2VlMjU2N2VjOGY3MDA2YmQxMmI5OTljNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjBQMgb5lZ1pC89hPXyUzZGgqooU
cxT2saJGop3rhfHZZgFzcmu3DnDG5sJ9rlnLEf+CQfJhWH8YVM3JSY/3bdraoweY
E8iEXCAs6rSkWmdPCMa+qGmTsikXmMgcQRYBrrTxeV9h2vQTWzgF44RlEW67pByk
zKIthVObAtNtsC4lmtlzsSuCEKeHKghedWKgAX5EySkd+Go8xPDLAH873qmvwjIy
LI2pDhMB9IC0SX1TYLLWfAUr3+UXMdXycmBxYFRDoK1UAspk4cDC6JcMnXQAWtGQ
Vj3EbLDTlqugsEVPqtQw23OD8MTglnBNtDw6RE17/xrOx86pyFWwjyPqmQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFPZlPyKiwJzuJWfsj3AGvRK5mcdoMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvOW1VX0lxTEFuTzRsWi15UGNBYTlFcm1aeDJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQBH9IyMAwD
BAAf0jUDBAAf0jYDBABOh04DBAC8hKoDBAC8hNcwDAMEALyE4wMEALyE5AMEANRE
JAMEANREMTANBgkqhkiG9w0BAQsFAAOCAQEAWyc9F7Q/QmmMAUuGr+qfK4iU7hf6
kZ8n6A0NXZM+yXTutZspzNExALGEXiDhK+qwIZ9tcA39AWte1hHQFRYwHBtrAFE7
u5VRskC19pvSgjJv+toj0LNOqqiEFMtda9Ndig3jeAHYEzSMaXjqU8pO+1RDRv0X
EDZKx3MnmV0GOWAlvRarg9dImWdXPc9PQWYl7/FXkU4JriJN+VRdxh9I839WUZto
ouwFZVW3zGGg6fPZ1krw2ke4vIiZLnqq5AuuKdRf+OEHdmgPZBVDa9YCaLNEFVbR
grliNj2AGYh76P7oycH33Opp8twOeOX9zsTgVUIXEvlasmHxnYp+uoY7MA==
-----END CERTIFICATE-----
Generated at Fri Oct 11 20:05:57 2024 by rpki-client on console-fra.rpki-client.org