Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/DcrO2QnbyGAncnZhxbQE6uW_REA.roa
File: DcrO2QnbyGAncnZhxbQE6uW_REA.roa (raw, json)
Hash identifier: olZwRytyl0MYj/rFrl5v1HcF+mKlcLit3NBNtwz0ous=
Subject key identifier: 0D:CA:CE:D9:09:DB:C8:60:27:72:76:61:C5:B4:04:EA:E5:BF:44:40
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 018CC80148F5F9E7C4EB4CE13885F69736CD
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/DcrO2QnbyGAncnZhxbQE6uW_REA.roa
Signing time: Tue 02 Jan 2024 02:29:36 +0000
ROA not before: Tue 02 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197768
IP address blocks: 31.133.104.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:48:f5:f9:e7:c4:eb:4c:e1:38:85:f6:97:36:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: Jan 2 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dcaced909dbc86027727661c5b404eae5bf4440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1e:3c:93:36:a4:13:e8:e8:ab:2d:6b:e7:3d:
02:58:4e:21:90:2b:e8:bf:d1:a1:7b:9a:b8:a6:ef:
21:d0:89:77:38:7e:4c:fe:bf:bc:1e:e4:75:35:32:
4a:11:63:89:55:e2:84:b2:11:e1:58:5a:3e:8d:e5:
ec:07:b4:ad:2a:0e:b7:68:09:6c:9f:36:7e:4f:0e:
85:89:3c:9a:3e:f2:80:20:cc:29:31:11:d6:e4:33:
41:f2:06:42:e7:e8:51:bc:c9:1f:a9:35:f3:3e:21:
ca:20:d4:a8:6d:f2:97:40:56:c4:1f:46:79:49:25:
13:e3:fb:46:a4:95:e1:11:f6:74:4e:65:5e:38:60:
12:af:02:07:86:56:ad:be:b5:40:8a:26:8c:0d:11:
d6:04:7d:f1:09:a5:27:24:8d:12:b4:17:f3:f4:0b:
30:b2:dc:14:a3:c5:8e:e5:aa:4b:c4:60:8a:46:b2:
43:74:23:e2:c4:10:53:72:22:84:cd:2b:3f:d7:de:
56:8e:e5:5f:5d:6a:9e:5b:69:87:8b:73:86:ea:29:
5f:b3:d5:b7:76:17:9f:0d:35:03:50:43:06:f4:de:
21:90:b9:cb:08:27:fb:ab:d1:50:f7:7b:ea:a1:80:
6b:a8:30:14:44:01:c1:9a:da:a6:d8:32:3c:02:36:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CA:CE:D9:09:DB:C8:60:27:72:76:61:C5:B4:04:EA:E5:BF:44:40
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/DcrO2QnbyGAncnZhxbQE6uW_REA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.104.0/21
Signature Algorithm: sha256WithRSAEncryption
d6:37:8d:e2:d5:b1:d1:f9:79:87:ef:53:b9:b7:1b:6b:e0:35:
91:2d:12:6b:43:75:57:21:2a:65:ff:0d:a7:31:fc:66:db:a3:
fd:a6:06:b4:d4:08:ac:6b:d9:19:24:ae:80:dd:fa:e6:1c:c8:
57:e7:54:4c:3c:ec:7b:11:4c:c1:ec:91:2c:e4:38:b3:38:e7:
ba:aa:72:ea:a8:6e:c1:86:7c:5c:72:5f:5c:f4:1f:a6:ca:06:
1d:18:df:1d:4c:0b:bb:02:21:ec:ca:a0:db:51:eb:1e:81:af:
1d:f7:b2:2a:62:50:b0:41:0e:3a:ca:5c:44:6a:f0:f0:10:98:
fa:14:b7:aa:7d:65:61:43:bc:58:8c:76:5a:be:e9:c5:85:9c:
71:cf:cf:34:75:22:38:84:27:60:25:4a:dd:fe:6a:1e:6c:32:
d7:d2:1c:2a:20:39:90:29:1d:fc:27:e1:f8:c0:32:db:4c:63:
fc:75:c0:5d:32:e4:bb:80:6c:e2:8c:ee:93:06:30:56:82:bc:
06:f5:c8:12:86:d4:59:c0:94:37:2d:5d:07:5d:5e:b4:c0:ab:
9d:1a:dc:56:88:c8:0b:97:9b:ba:4c:95:ef:c6:99:06:c4:a2:
07:d8:72:8a:d5:29:57:57:a5:fd:14:69:cf:01:26:04:e9:a6:
cc:5f:c5:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAUj1+efE60zhOIX2lzbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOWI1Nzg4OTYwYmQxNzkwNTY4NDhlYzk1NmZkNjExZDRj
ZjgwOTQwHhcNMjQwMTAyMDIyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGNhY2VkOTA5ZGJjODYwMjc3Mjc2NjFjNWI0MDRlYWU1YmY0NDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx48kzakE+joqy1r5z0CWE4hkCvo
v9Ghe5q4pu8h0Il3OH5M/r+8HuR1NTJKEWOJVeKEshHhWFo+jeXsB7StKg63aAls
nzZ+Tw6FiTyaPvKAIMwpMRHW5DNB8gZC5+hRvMkfqTXzPiHKINSobfKXQFbEH0Z5
SSUT4/tGpJXhEfZ0TmVeOGASrwIHhlatvrVAiiaMDRHWBH3xCaUnJI0StBfz9Asw
stwUo8WO5apLxGCKRrJDdCPixBBTciKEzSs/195WjuVfXWqeW2mHi3OG6ilfs9W3
dhefDTUDUEMG9N4hkLnLCCf7q9FQ93vqoYBrqDAURAHBmtqm2DI8AjZ6vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA3KztkJ28hgJ3J2YcW0BOrlv0RAMB8GA1UdIwQY
MBaAFJCbV4iWC9F5BWhI7JVv1hHUz4CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82YzBlMjUtODFhNS00OTAwLWI2Yjct
ZGY0YzlmMzRkYzViLzEvRGNyTzJRbmJ5R0FuY25aaHhiUUU2dVdfUkVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82YzBlMjUtODFhNS00OTAwLWI2YjctZGY0YzlmMzRkYzVi
LzEva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4VoMA0G
CSqGSIb3DQEBCwUAA4IBAQDWN43i1bHR+XmH71O5txtr4DWRLRJrQ3VXISpl/w2n
Mfxm26P9pga01Aisa9kZJK6A3frmHMhX51RMPOx7EUzB7JEs5DizOOe6qnLqqG7B
hnxccl9c9B+mygYdGN8dTAu7AiHsyqDbUesega8d97IqYlCwQQ46ylxEavDwEJj6
FLeqfWVhQ7xYjHZavunFhZxxz880dSI4hCdgJUrd/moebDLX0hwqIDmQKR38J+H4
wDLbTGP8dcBdMuS7gGzijO6TBjBWgrwG9cgShtRZwJQ3LV0HXV60wKudGtxWiMgL
l5u6TJXvxpkGxKIH2HKK1SlXV6X9FGnPASYE6abMX8V0
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:51 2025 by rpki-client