Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/deMrUS1QDJlNOa2dYx-Fwlc-v0E.roa
File: deMrUS1QDJlNOa2dYx-Fwlc-v0E.roa (raw, json)
Hash identifier: 6T3wc1XboDr6VIbdwKEoUs7X20tCMSfib8muDzJS/Cc=
Subject key identifier: 75:E3:2B:51:2D:50:0C:99:4D:39:AD:9D:63:1F:85:C2:57:3E:BF:41
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0185700296B89807A765F66C7B2043881B3D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/deMrUS1QDJlNOa2dYx-Fwlc-v0E.roa
Signing time: Mon 02 Jan 2023 01:04:55 +0000
ROA not before: Mon 02 Jan 2023 01:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207709
IP address blocks: 31.210.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 23:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:96:b8:98:07:a7:65:f6:6c:7b:20:43:88:1b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75e32b512d500c994d39ad9d631f85c2573ebf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:2d:83:9e:d9:26:73:3a:ba:1e:bd:0a:07:
d0:76:8f:3b:d4:67:36:f1:b6:1b:38:95:e1:ea:f1:
d3:78:f9:96:9d:dc:a6:1f:7d:8d:df:b4:26:ed:80:
7e:82:ff:3e:31:95:53:c8:dc:fb:9d:45:5d:60:e5:
be:cb:92:43:77:ed:db:01:5f:8e:ac:a7:45:00:d3:
ac:9c:c8:ed:f8:ec:dd:b5:85:7c:df:0f:ea:06:c2:
0a:6c:bd:f6:f4:6a:e5:f4:a8:68:dd:9f:c4:0a:d6:
43:cb:b8:bd:c9:79:d8:1d:1c:68:b8:e5:3d:a9:c9:
d3:8b:47:48:14:39:62:de:5f:84:09:eb:d1:c1:b5:
91:aa:34:59:a4:21:f3:41:63:0f:3d:f5:7a:44:a4:
e1:67:6e:37:85:5c:ee:7c:62:4f:fd:8b:87:70:93:
e9:75:0c:04:b5:58:a8:8f:7b:a8:1d:42:1b:87:70:
35:47:25:b0:d5:a3:61:26:04:c4:34:54:14:a9:88:
c2:cc:3e:3c:f1:62:9a:02:98:03:2b:93:62:e8:fc:
f2:51:d1:8c:47:7e:57:a3:28:49:3b:b9:0b:1b:89:
ab:34:94:db:f6:6a:57:56:36:e2:18:2d:9a:6c:8b:
35:89:13:db:3a:a8:a3:cf:16:5f:d8:46:0a:60:d8:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E3:2B:51:2D:50:0C:99:4D:39:AD:9D:63:1F:85:C2:57:3E:BF:41
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/deMrUS1QDJlNOa2dYx-Fwlc-v0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.54.0/24
Signature Algorithm: sha256WithRSAEncryption
70:96:9b:ff:43:8e:a3:cb:2f:d5:f5:73:8b:70:2d:cc:3f:dd:
f3:26:bd:da:bc:dc:d3:ce:af:f6:89:e2:6d:67:1e:a9:9f:b6:
bf:d1:d5:bd:30:a2:ba:e7:32:e9:a3:bf:a1:0d:2e:6e:2d:ef:
c4:bf:64:5c:13:d1:1c:60:8c:4e:70:dd:90:fc:23:e0:47:f8:
cc:f7:88:e2:be:39:f1:8e:e7:22:27:a8:a4:a2:43:78:77:e2:
fc:a9:8d:22:d6:2b:7a:04:04:d0:89:64:df:00:27:95:3b:cb:
58:46:3d:6a:cf:1f:1d:89:53:2e:4b:5c:37:6d:7c:59:22:cc:
5a:97:2b:75:9b:e9:c8:d3:ff:86:24:38:13:97:ca:4f:15:9a:
95:98:c2:3f:0b:42:fe:69:a8:87:b1:36:7e:85:06:91:e1:9f:
7a:8b:89:de:a1:71:a5:36:18:0d:8f:15:ab:88:fd:8f:83:c7:
eb:d8:fc:b9:78:c8:e0:31:7a:b2:d2:ab:43:16:b4:6d:fb:e6:
5e:77:09:28:80:7c:73:d3:81:fe:b5:85:4c:9b:91:f2:7d:47:
94:05:ba:7d:52:a3:44:35:99:2d:80:10:75:4d:e8:7e:09:15:
71:0e:8d:e0:e9:38:54:6f:dd:8a:30:c0:e8:12:4f:fb:f7:95:
94:8d:43:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwApa4mAenZfZseyBDiBs9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwMTAyMDEwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWUzMmI1MTJkNTAwYzk5NGQzOWFkOWQ2MzFmODVjMjU3M2ViZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjUtg57ZJnM6uh69CgfQdo871Gc2
8bYbOJXh6vHTePmWndymH32N37Qm7YB+gv8+MZVTyNz7nUVdYOW+y5JDd+3bAV+O
rKdFANOsnMjt+OzdtYV83w/qBsIKbL329Grl9Kho3Z/ECtZDy7i9yXnYHRxouOU9
qcnTi0dIFDli3l+ECevRwbWRqjRZpCHzQWMPPfV6RKThZ243hVzufGJP/YuHcJPp
dQwEtVioj3uoHUIbh3A1RyWw1aNhJgTENFQUqYjCzD488WKaApgDK5Ni6PzyUdGM
R35XoyhJO7kLG4mrNJTb9mpXVjbiGC2abIs1iRPbOqijzxZf2EYKYNjyzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHXjK1EtUAyZTTmtnWMfhcJXPr9BMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvZGVNclVTMVFESmxOT2EyZFl4LUZ3bGMtdjBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9I2MA0G
CSqGSIb3DQEBCwUAA4IBAQBwlpv/Q46jyy/V9XOLcC3MP93zJr3avNzTzq/2ieJt
Zx6pn7a/0dW9MKK65zLpo7+hDS5uLe/Ev2RcE9EcYIxOcN2Q/CPgR/jM94jivjnx
juciJ6ikokN4d+L8qY0i1it6BATQiWTfACeVO8tYRj1qzx8diVMuS1w3bXxZIsxa
lyt1m+nI0/+GJDgTl8pPFZqVmMI/C0L+aaiHsTZ+hQaR4Z96i4neoXGlNhgNjxWr
iP2Pg8fr2Py5eMjgMXqy0qtDFrRt++ZedwkogHxz04H+tYVMm5HyfUeUBbp9UqNE
NZktgBB1Teh+CRVxDo3g6ThUb92KMMDoEk/795WUjUPv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org