Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/S2cPZ7UWopivNOvesNNMyAs3tK8.roa
File: S2cPZ7UWopivNOvesNNMyAs3tK8.roa (raw, json)
Hash identifier: FDqJ8uyt39qWrgq2fgUrmB2sB3M7I3ST9kFnNN8zmM0=
Subject key identifier: 4B:67:0F:67:B5:16:A2:98:AF:34:EB:DE:B0:D3:4C:C8:0B:37:B4:AF
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01921B16247623A7E647F5271EC020BADD0F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/S2cPZ7UWopivNOvesNNMyAs3tK8.roa
Signing time: Sun 22 Sep 2024 18:54:48 +0000
ROA not before: Sun 22 Sep 2024 18:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51540
IP address blocks: 31.210.39.0/24 maxlen: 24
78.135.84.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
78.135.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1b:16:24:76:23:a7:e6:47:f5:27:1e:c0:20:ba:dd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 22 18:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b670f67b516a298af34ebdeb0d34cc80b37b4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:16:18:ff:59:2e:22:cb:83:58:af:94:68:
e5:47:e8:40:64:be:62:c6:28:50:50:8f:62:1d:95:
41:2d:61:be:7d:85:65:0f:0e:ce:7d:37:23:92:c6:
61:69:ab:4f:38:fa:0d:cd:df:f6:1b:5f:c6:ce:ae:
bd:eb:09:5d:70:b8:c6:dd:1e:a1:ca:dc:21:ea:83:
66:8d:7b:4c:7f:d1:0c:96:db:29:bd:61:70:98:22:
89:6f:01:d6:ce:70:8e:b1:33:96:a0:35:4e:8c:b8:
a5:99:6f:5e:f3:a1:ac:4e:ff:68:01:1f:bc:db:fb:
0e:9a:cd:c1:e7:d5:97:3d:73:de:ae:c2:98:80:67:
fe:02:9f:44:0c:06:b8:67:b1:9a:54:f6:51:89:b4:
05:29:48:f2:39:43:4c:2b:b0:05:3f:be:f1:c0:98:
ea:d5:6b:f8:8c:f1:5a:d6:4b:48:95:d3:10:57:46:
a0:17:1c:83:96:b4:08:ec:07:4e:60:3b:a3:d4:49:
93:96:c3:d8:21:97:73:34:5c:53:18:8d:ee:4a:58:
c2:6f:f7:1d:83:63:82:39:fb:1d:25:eb:48:9d:74:
9c:41:15:eb:a9:dc:55:65:01:5f:7a:fe:5e:c4:25:
2c:c0:df:f8:1d:69:6e:c3:ee:f0:a8:d9:1c:94:bd:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:67:0F:67:B5:16:A2:98:AF:34:EB:DE:B0:D3:4C:C8:0B:37:B4:AF
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/S2cPZ7UWopivNOvesNNMyAs3tK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.39.0/24
78.135.84.0/24
78.135.98.0/23
Signature Algorithm: sha256WithRSAEncryption
13:f2:5b:d4:46:2a:b7:58:7d:c5:39:b4:12:f7:09:cf:c1:55:
08:a8:54:20:bb:38:d3:80:4f:3b:7b:37:6a:c7:b1:1c:85:9c:
28:7c:8d:eb:b9:45:cd:19:ec:bb:5a:7d:7a:01:d4:90:ef:14:
61:b5:31:13:ca:4c:e2:06:91:2d:7a:13:be:5a:4a:f9:73:82:
c5:cc:0d:06:84:75:1b:d5:66:57:56:56:3d:5b:b0:4d:82:c1:
11:3b:ee:b8:db:6c:48:37:0e:85:af:78:51:ad:8a:2e:57:9c:
1a:f2:f0:89:2b:7e:09:2e:ae:01:b8:36:45:cf:7c:49:e2:50:
dd:60:db:74:12:e0:bb:80:02:48:8a:6a:eb:50:75:ce:a0:78:
64:85:6d:85:44:5e:7f:69:13:64:2c:28:6a:d9:16:ae:45:22:
57:e4:8f:95:47:8a:06:1f:9f:cb:5d:98:d9:4c:3d:3b:eb:15:
23:2a:7c:b9:47:62:c0:c0:64:98:cb:33:b1:07:03:5c:d0:c5:
4f:4d:7a:1e:a1:b4:cd:2a:b4:a9:0a:c7:6a:9b:c2:6d:e6:66:
e7:b0:3f:b8:03:88:70:fc:60:c1:e3:04:f1:fb:98:25:ca:87:
4a:82:2e:1a:3d:b6:fc:41:dc:22:3e:06:c7:08:09:e5:69:05:
e9:fa:45:b4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZIbFiR2I6fmR/UnHsAgut0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwOTIyMTg1NDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjY3MGY2N2I1MTZhMjk4YWYzNGViZGViMGQzNGNjODBiMzdiNGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJQWGP9ZLiLLg1ivlGjlR+hAZL5i
xihQUI9iHZVBLWG+fYVlDw7OfTcjksZhaatPOPoNzd/2G1/Gzq696wldcLjG3R6h
ytwh6oNmjXtMf9EMltspvWFwmCKJbwHWznCOsTOWoDVOjLilmW9e86GsTv9oAR+8
2/sOms3B59WXPXPersKYgGf+Ap9EDAa4Z7GaVPZRibQFKUjyOUNMK7AFP77xwJjq
1Wv4jPFa1ktIldMQV0agFxyDlrQI7AdOYDuj1EmTlsPYIZdzNFxTGI3uSljCb/cd
g2OCOfsdJetInXScQRXrqdxVZQFfev5exCUswN/4HWluw+7wqNkclL0DPQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEtnD2e1FqKYrzTr3rDTTMgLN7SvMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvUzJjUFo3VVdvcGl2Tk92ZXNOTk15QXMzdEs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH9InAwQA
TodUAwQBTodiMA0GCSqGSIb3DQEBCwUAA4IBAQAT8lvURiq3WH3FObQS9wnPwVUI
qFQguzjTgE87ezdqx7EchZwofI3ruUXNGey7Wn16AdSQ7xRhtTETykziBpEtehO+
Wkr5c4LFzA0GhHUb1WZXVlY9W7BNgsERO+6422xINw6Fr3hRrYouV5wa8vCJK34J
Lq4BuDZFz3xJ4lDdYNt0EuC7gAJIimrrUHXOoHhkhW2FRF5/aRNkLChq2RauRSJX
5I+VR4oGH5/LXZjZTD076xUjKny5R2LAwGSYyzOxBwNc0MVPTXoeobTNKrSpCsdq
m8Jt5mbnsD+4A4hw/GDB4wTx+5glyodKgi4aPbb8QdwiPgbHCAnlaQXp+kW0
-----END CERTIFICATE-----
Generated at Thu Oct 10 18:39:27 2024 by rpki-client on console-ams.rpki-client.org