Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UAaO6qhEnniFGSa03JVDIfQmOiM.roa
File: UAaO6qhEnniFGSa03JVDIfQmOiM.roa (raw, json)
Hash identifier: SZrHchgrdfvIs5Y6em6cGcqOEhM8Ipfl1evWVeiPfik=
Subject key identifier: 50:06:8E:EA:A8:44:9E:78:85:19:26:B4:DC:95:43:21:F4:26:3A:23
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018D198BD7F711D47DB5D7738AC388927671
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UAaO6qhEnniFGSa03JVDIfQmOiM.roa
Signing time: Wed 17 Jan 2024 22:30:11 +0000
ROA not before: Wed 17 Jan 2024 22:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 31.210.37.0/24 maxlen: 24
31.210.38.0/24 maxlen: 24
31.210.39.0/24 maxlen: 24
78.135.75.0/24 maxlen: 24
78.135.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 08:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:19:8b:d7:f7:11:d4:7d:b5:d7:73:8a:c3:88:92:76:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 17 22:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50068eeaa8449e78851926b4dc954321f4263a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:39:ba:fd:7e:66:45:c8:53:85:88:df:02:ae:
01:b1:d2:aa:2e:de:86:bb:53:87:93:31:82:27:81:
e6:34:1d:4a:9c:21:b0:1c:c0:5f:ea:5a:fe:d1:e8:
d1:b6:d3:a5:d7:be:e6:48:2d:b8:11:69:7c:b9:1b:
a2:e2:da:d6:48:27:d2:33:02:a3:5b:d7:2f:3b:76:
ea:3c:b1:76:df:63:d7:ac:3d:c9:3e:f5:7b:d5:d3:
f9:f3:9e:8c:2b:dd:98:bf:64:b6:44:5a:13:64:06:
ae:74:23:3f:5b:06:da:0b:58:67:7a:c2:49:10:96:
46:52:42:12:0d:45:0c:27:d9:79:42:ad:61:6d:49:
ee:e6:93:a5:e5:c9:86:e4:fa:4d:1b:6a:a6:0c:fd:
0f:16:48:af:99:20:46:13:5a:7d:89:54:85:ef:34:
2b:70:f9:1e:a8:32:ce:32:1c:be:75:ba:36:41:02:
6c:28:ea:23:e9:df:18:4e:12:ba:cf:a2:b0:e0:03:
65:26:ac:cf:67:4e:4c:ab:f1:d7:a4:d0:5b:08:19:
2e:24:c9:56:8e:66:84:ce:c4:91:cb:39:00:36:2c:
a5:28:7e:1c:8a:a3:0f:aa:b7:4e:a0:2d:01:5b:6b:
df:8d:78:d7:55:ec:5c:0a:23:01:cf:98:e9:c7:fb:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:8E:EA:A8:44:9E:78:85:19:26:B4:DC:95:43:21:F4:26:3A:23
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UAaO6qhEnniFGSa03JVDIfQmOiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.37.0-31.210.39.255
78.135.75.0-78.135.76.255
Signature Algorithm: sha256WithRSAEncryption
77:a2:9a:fb:07:fe:3c:cb:c3:39:52:df:89:74:5b:92:39:64:
12:47:37:be:ce:56:ee:0c:7b:32:24:f0:b4:a5:01:ea:22:fc:
99:e1:9f:4a:f1:2d:d0:33:9e:20:80:50:7d:a5:fa:cb:1a:01:
33:34:f6:be:a9:bc:5e:98:70:7d:7b:18:54:62:41:ad:10:3e:
12:1e:39:53:72:98:d2:1d:54:3c:bb:64:68:c9:85:51:0e:62:
da:21:cd:5d:ac:37:84:88:84:6c:3a:9a:0f:82:d9:a6:d3:95:
ab:9b:7c:11:7e:ea:37:21:ea:8e:95:2e:bd:6e:f5:fc:65:9a:
65:5d:23:73:e8:78:4d:c5:3c:62:ca:6f:f3:9c:a6:8b:03:07:
23:03:3f:8e:b3:e5:9e:19:21:f5:41:6d:83:99:67:3b:93:c1:
3c:37:3a:fe:ac:75:d7:3d:c7:00:6a:74:70:21:51:c5:51:cc:
00:7c:28:66:6d:fb:36:75:8e:b0:2e:1c:62:60:87:cf:6d:64:
df:ed:86:36:65:7d:6f:79:1c:27:d6:ec:0d:0b:45:a2:83:33:
b1:92:2d:6a:81:34:de:08:26:80:da:e9:f4:1e:cf:d3:8e:2a:
80:6a:14:35:e1:20:ad:83:ac:59:2e:f7:31:6c:1d:b7:4c:44:
de:e3:3e:27
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAY0Zi9f3EdR9tddzisOIknZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwMTE3MjIzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDA2OGVlYWE4NDQ5ZTc4ODUxOTI2YjRkYzk1NDMyMWY0MjYzYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDm6/X5mRchThYjfAq4BsdKqLt6G
u1OHkzGCJ4HmNB1KnCGwHMBf6lr+0ejRttOl177mSC24EWl8uRui4trWSCfSMwKj
W9cvO3bqPLF232PXrD3JPvV71dP5856MK92Yv2S2RFoTZAaudCM/WwbaC1hnesJJ
EJZGUkISDUUMJ9l5Qq1hbUnu5pOl5cmG5PpNG2qmDP0PFkivmSBGE1p9iVSF7zQr
cPkeqDLOMhy+dbo2QQJsKOoj6d8YThK6z6Kw4ANlJqzPZ05Mq/HXpNBbCBkuJMlW
jmaEzsSRyzkANiylKH4ciqMPqrdOoC0BW2vfjXjXVexcCiMBz5jpx/tr/QIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFFAGjuqoRJ54hRkmtNyVQyH0JjojMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvVUFhTzZxaEVubmlGR1NhMDNKVkRJZlFtT2lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAAf0iUD
BAMf0iAwDAMEAE6HSwMEAE6HTDANBgkqhkiG9w0BAQsFAAOCAQEAd6Ka+wf+PMvD
OVLfiXRbkjlkEkc3vs5W7gx7MiTwtKUB6iL8meGfSvEt0DOeIIBQfaX6yxoBMzT2
vqm8XphwfXsYVGJBrRA+Eh45U3KY0h1UPLtkaMmFUQ5i2iHNXaw3hIiEbDqaD4LZ
ptOVq5t8EX7qNyHqjpUuvW71/GWaZV0jc+h4TcU8Yspv85ymiwMHIwM/jrPlnhkh
9UFtg5lnO5PBPDc6/qx11z3HAGp0cCFRxVHMAHwoZm37NnWOsC4cYmCHz21k3+2G
NmV9b3kcJ9bsDQtFooMzsZItaoE03ggmgNrp9B7P044qgGoUNeEgrYOsWS73MWwd
t0xE3uM+Jw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org