Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/5CmD64sai_agtNL6fvpOMrcTSfc.roa
File: 5CmD64sai_agtNL6fvpOMrcTSfc.roa (raw, json)
Hash identifier: YBiTpF8YKmVhPL4YgyKcO/97OEfu0gQetRfo055XpxY=
Subject key identifier: E4:29:83:EB:8B:1A:8B:F6:A0:B4:D2:FA:7E:FA:4E:32:B7:13:49:F7
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 018A3B62343835372F9EBE89978BBFED7B56
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/5CmD64sai_agtNL6fvpOMrcTSfc.roa
Signing time: Mon 28 Aug 2023 09:03:26 +0000
ROA not before: Mon 28 Aug 2023 09:03:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60183
IP address blocks: 31.184.130.0/23 maxlen: 24
31.184.132.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:62:34:38:35:37:2f:9e:be:89:97:8b:bf:ed:7b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Aug 28 09:03:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e42983eb8b1a8bf6a0b4d2fa7efa4e32b71349f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:a0:e7:51:6c:3b:23:8d:0b:0d:07:5f:fb:
a6:d3:33:b5:a1:27:94:9f:fc:28:c9:45:65:f5:25:
78:d4:f6:3a:a1:5d:b8:ce:7d:cd:50:99:04:e1:26:
d7:17:5f:f2:ec:7c:9b:6d:1a:6f:aa:11:75:61:5c:
e0:0e:a7:12:d8:b8:c0:c6:fc:67:04:60:db:f6:8a:
aa:b0:82:ab:70:18:a1:df:4d:c7:5c:2e:f4:58:11:
49:c9:69:b5:98:c4:ba:1a:db:b3:38:55:07:e8:97:
67:f5:61:bf:bf:f0:72:3a:d2:4d:b8:f4:c3:5e:f0:
d9:df:93:5a:94:d1:57:e2:0a:9e:80:99:51:65:5a:
c7:8a:b0:85:35:0f:60:76:b9:7e:46:43:c6:cb:c1:
78:2b:15:ea:9f:c6:70:b1:44:77:27:f1:55:13:72:
86:d8:a9:83:b5:3d:1a:9f:55:53:d1:e8:ec:79:18:
eb:50:9c:6d:cc:b5:e6:aa:f0:aa:78:9f:ae:40:5d:
85:b3:b5:c1:03:3e:6a:c7:3e:d7:11:7e:a0:86:46:
e9:74:55:3b:71:0b:1c:73:14:cd:e9:f3:4b:0a:cd:
83:5e:1d:5f:b4:3c:4e:0f:be:89:f9:2a:dc:bf:53:
a9:ab:78:16:88:ae:b9:16:73:7a:9a:12:c2:0e:87:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:29:83:EB:8B:1A:8B:F6:A0:B4:D2:FA:7E:FA:4E:32:B7:13:49:F7
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/5CmD64sai_agtNL6fvpOMrcTSfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.130.0-31.184.133.255
Signature Algorithm: sha256WithRSAEncryption
31:49:0d:80:2d:c4:41:32:ff:e3:b1:2a:2e:a5:e3:a9:47:48:
e0:eb:fb:f0:f4:d9:65:e2:f8:f8:00:5a:f7:6a:24:62:bb:2b:
b2:11:fd:20:1e:79:09:1d:90:8c:1d:3e:8a:4e:f2:1a:15:e2:
45:84:f4:85:3f:00:12:c1:25:c1:b7:a3:79:a6:9f:0f:a3:86:
18:80:25:d5:f0:11:91:95:f6:72:f8:f8:72:69:b7:c6:05:ad:
25:5d:a6:46:31:81:d9:c3:c8:d1:ed:1d:2b:1f:7f:29:5b:e7:
6b:47:1a:6a:8f:87:00:de:81:b2:bd:c7:f9:0b:d3:9c:25:83:
fd:1f:c7:a8:61:d4:00:b4:38:f3:01:57:2f:b8:b1:a5:06:9f:
2e:24:1a:9f:47:9c:94:29:87:32:17:fe:4e:82:06:70:fc:f6:
57:a3:33:ee:f6:ad:3d:d0:11:41:c1:bc:5a:3d:81:b2:33:95:
72:0c:f8:61:65:09:ac:c4:06:9e:60:5a:c0:8c:8b:7f:48:c5:
22:8f:f9:d4:74:74:fc:9f:a4:bb:df:2a:31:fc:c2:0f:25:ac:
ae:b4:b3:af:93:2d:d9:da:c0:fa:87:ce:97:3b:9f:3f:75:ab:
f8:5f:d2:4d:c6:27:b4:77:71:af:ea:9f:ce:d8:39:b3:8f:1d:
f7:ef:a4:07
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYo7YjQ4NTcvnr6Jl4u/7XtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk
YmQ3MjUwHhcNMjMwODI4MDkwMzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDI5ODNlYjhiMWE4YmY2YTBiNGQyZmE3ZWZhNGUzMmI3MTM0OWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15ag51FsOyONCw0HX/um0zO1oSeU
n/woyUVl9SV41PY6oV24zn3NUJkE4SbXF1/y7HybbRpvqhF1YVzgDqcS2LjAxvxn
BGDb9oqqsIKrcBih303HXC70WBFJyWm1mMS6GtuzOFUH6Jdn9WG/v/ByOtJNuPTD
XvDZ35NalNFX4gqegJlRZVrHirCFNQ9gdrl+RkPGy8F4KxXqn8ZwsUR3J/FVE3KG
2KmDtT0an1VT0ejseRjrUJxtzLXmqvCqeJ+uQF2Fs7XBAz5qxz7XEX6ghkbpdFU7
cQsccxTN6fNLCs2DXh1ftDxOD76J+Srcv1Opq3gWiK65FnN6mhLCDof3xQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOQpg+uLGov2oLTS+n76TjK3E0n3MB8GA1UdIwQY
MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et
NmJhMGEwY2UwMWVkLzEvNUNtRDY0c2FpX2FndE5MNmZ2cE9NcmNUU2ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk
LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEfuIID
BAEfuIQwDQYJKoZIhvcNAQELBQADggEBADFJDYAtxEEy/+OxKi6l46lHSODr+/D0
2WXi+PgAWvdqJGK7K7IR/SAeeQkdkIwdPopO8hoV4kWE9IU/ABLBJcG3o3mmnw+j
hhiAJdXwEZGV9nL4+HJpt8YFrSVdpkYxgdnDyNHtHSsffylb52tHGmqPhwDegbK9
x/kL05wlg/0fx6hh1AC0OPMBVy+4saUGny4kGp9HnJQphzIX/k6CBnD89lejM+72
rT3QEUHBvFo9gbIzlXIM+GFlCazEBp5gWsCMi39IxSKP+dR0dPyfpLvfKjH8wg8l
rK60s6+TLdnawPqHzpc7nz91q/hf0k3GJ7R3ca/qn87YObOPHffvpAc=
-----END CERTIFICATE-----
Generated at Tue Oct 31 08:51:11 2023 by rpki-client on console-ams.rpki-client.org