Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ru3uShJUfoaCznlmH00ke6Z08ic.roa
File: ru3uShJUfoaCznlmH00ke6Z08ic.roa (raw, json)
Hash identifier: 3A1r6weNpP7dGxi24ebVYiR/jj1cZH/8uP0SP+AePcU=
Subject key identifier: AE:ED:EE:4A:12:54:7E:86:82:CE:79:66:1F:4D:24:7B:A6:74:F2:27
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095C47519EC856407AFB812BAF684E6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ru3uShJUfoaCznlmH00ke6Z08ic.roa
Signing time: Mon 02 Jan 2023 03:45:41 +0000
ROA not before: Mon 02 Jan 2023 03:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213187
IP address blocks: 31.148.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:c4:75:19:ec:85:64:07:af:b8:12:ba:f6:84:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeedee4a12547e8682ce79661f4d247ba674f227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:11:dc:ce:d5:cd:7d:37:9c:8b:f6:f2:59:f8:
d2:3c:aa:24:7f:fc:0f:ab:6e:b1:78:f7:b3:4a:c4:
85:5d:44:ed:7d:a0:9f:a0:9a:eb:5f:48:f0:69:05:
8f:05:3e:88:be:1b:f5:b7:d3:a9:d5:7c:91:3f:23:
34:06:63:2f:21:36:3e:fc:53:81:60:e1:5c:d2:b3:
8b:d8:f5:bb:c5:0c:05:30:99:52:8e:5f:b8:4b:6b:
c8:04:a9:91:28:cb:ee:d0:2d:8f:37:08:21:d1:2a:
16:4a:00:31:9b:e3:87:1a:03:a8:f3:0f:46:e8:b3:
4d:f6:89:4d:34:57:c9:d4:db:5d:c3:c4:05:dc:47:
fd:15:68:b6:26:82:dc:a8:d3:51:6e:af:7f:e6:ce:
fc:60:1f:6d:f0:b4:59:12:25:98:52:37:17:5a:ed:
55:f5:96:ad:bc:18:1b:b0:2f:87:36:1e:4f:67:db:
30:56:45:87:6a:5b:4f:70:b8:c8:02:f7:c7:91:5d:
e3:90:55:5e:b7:4c:11:d4:ae:d4:a1:14:48:51:4f:
bb:6a:0d:31:06:95:6c:e3:ef:b8:10:f0:cb:0e:15:
3d:1b:ec:9e:e6:a7:22:20:4a:e7:7c:70:1f:ec:89:
40:64:f7:5b:6a:3f:bf:f2:af:1c:ba:14:c9:92:16:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:EE:4A:12:54:7E:86:82:CE:79:66:1F:4D:24:7B:A6:74:F2:27
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ru3uShJUfoaCznlmH00ke6Z08ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.252.0/22
Signature Algorithm: sha256WithRSAEncryption
07:b3:05:57:ad:99:ef:d7:8b:91:6d:d0:af:12:d2:c2:47:b3:
86:2d:33:3e:e9:00:32:fb:6a:5a:00:ee:a3:93:04:98:86:3c:
3d:49:2d:14:c7:d0:f0:e9:63:f9:08:fc:9f:3d:59:62:a2:1c:
04:50:f1:2b:e4:ec:87:8d:ad:ca:15:43:c9:ba:e0:d5:31:0f:
dd:43:c1:b2:50:26:29:0e:51:b1:03:b6:08:2c:ff:49:ba:e7:
db:8d:42:73:dc:06:8f:a8:a5:cf:06:d7:e6:e6:a5:e7:e5:84:
c1:b3:55:ce:4a:b2:28:78:eb:f8:92:0b:19:d7:ee:d6:0a:e5:
dd:06:bf:c1:8b:dc:cb:8d:66:5e:a4:e0:55:02:2f:82:03:4e:
91:b5:eb:f9:96:f5:11:18:68:d9:3e:a3:a9:db:0f:98:83:22:
4d:5e:75:23:33:e2:b8:e7:e4:74:05:8d:63:31:d8:d7:59:92:
f4:90:69:39:02:f1:ad:f1:c2:7f:56:82:f8:30:0e:52:9b:1d:
6a:01:31:4f:9f:e0:68:0f:23:80:4e:15:35:09:cc:cd:5f:73:
27:17:0f:be:e7:9d:50:26:98:5c:15:01:2b:0a:ae:3d:6d:92:
11:94:b3:19:fe:dd:d8:58:96:d4:63:8d:09:7b:65:c4:51:e0:
da:29:9f:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlcR1GeyFZAevuBK69oTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWVkZWU0YTEyNTQ3ZTg2ODJjZTc5NjYxZjRkMjQ3YmE2NzRmMjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhHcztXNfTeci/byWfjSPKokf/wP
q26xePezSsSFXUTtfaCfoJrrX0jwaQWPBT6Ivhv1t9Op1XyRPyM0BmMvITY+/FOB
YOFc0rOL2PW7xQwFMJlSjl+4S2vIBKmRKMvu0C2PNwgh0SoWSgAxm+OHGgOo8w9G
6LNN9olNNFfJ1Ntdw8QF3Ef9FWi2JoLcqNNRbq9/5s78YB9t8LRZEiWYUjcXWu1V
9ZatvBgbsC+HNh5PZ9swVkWHaltPcLjIAvfHkV3jkFVet0wR1K7UoRRIUU+7ag0x
BpVs4++4EPDLDhU9G+ye5qciIErnfHAf7IlAZPdbaj+/8q8cuhTJkhYBnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK7t7koSVH6Ggs55Zh9NJHumdPInMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvcnUzdVNoSlVmb2FDem5sbUgwMGtlNlowOGljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH5T8MA0G
CSqGSIb3DQEBCwUAA4IBAQAHswVXrZnv14uRbdCvEtLCR7OGLTM+6QAy+2paAO6j
kwSYhjw9SS0Ux9Dw6WP5CPyfPVliohwEUPEr5OyHja3KFUPJuuDVMQ/dQ8GyUCYp
DlGxA7YILP9JuufbjUJz3AaPqKXPBtfm5qXn5YTBs1XOSrIoeOv4kgsZ1+7WCuXd
Br/Bi9zLjWZepOBVAi+CA06Rtev5lvURGGjZPqOp2w+YgyJNXnUjM+K45+R0BY1j
MdjXWZL0kGk5AvGt8cJ/VoL4MA5Smx1qATFPn+BoDyOAThU1CczNX3MnFw++551Q
JphcFQErCq49bZIRlLMZ/t3YWJbUY40Je2XEUeDaKZ85
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:52 2024 by rpki-client on console-ams.rpki-client.org