Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/6q5SKYo1Bw0J9L-JiZajdFhia7s.roa
File: 6q5SKYo1Bw0J9L-JiZajdFhia7s.roa (raw, json)
Hash identifier: eoHHcmQ+Wh5nLXqa5XYAp0e/hLAWIGS9ljfJifud+pY=
Subject key identifier: EA:AE:52:29:8A:35:07:0D:09:F4:BF:89:89:96:A3:74:58:62:6B:BB
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0190A0B8F5D7FC13E2DAEA2FF5E81011271B
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/6q5SKYo1Bw0J9L-JiZajdFhia7s.roa
Signing time: Thu 11 Jul 2024 07:36:34 +0000
ROA not before: Thu 11 Jul 2024 07:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 31.133.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jul 2024 10:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a0:b8:f5:d7:fc:13:e2:da:ea:2f:f5:e8:10:11:27:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jul 11 07:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaae52298a35070d09f4bf898996a37458626bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:f0:50:86:f4:03:b4:30:1f:ab:be:8f:5c:
2f:d8:87:67:7d:29:8c:d7:39:43:40:fd:17:30:ce:
c3:7c:8a:b3:cc:80:e7:0e:04:45:f8:7a:e2:e9:6d:
7d:41:ad:ea:ec:ae:a7:59:71:c6:19:1c:8b:0f:62:
d9:2a:d8:e8:a2:65:50:ba:f3:06:93:a1:9d:67:45:
ad:83:9e:47:a1:22:f2:d2:ee:f4:27:30:2e:3b:de:
64:71:8c:5a:2a:6d:c5:cd:89:e7:ac:c1:09:7a:ad:
08:a1:2e:9c:cf:90:27:14:63:85:40:43:9b:3e:21:
19:ae:fc:2b:bf:99:a2:07:fe:21:51:79:eb:e6:7f:
26:10:12:b9:ab:b7:ce:c1:00:43:0e:bd:65:8f:41:
5b:40:f0:31:38:29:03:26:bc:33:dc:e3:14:fa:84:
d4:3a:84:25:da:34:86:35:d6:02:70:dc:22:4d:18:
99:47:09:99:af:4d:88:7e:56:b7:a8:ff:39:a0:0d:
7e:51:8e:9d:41:90:d3:6b:a6:61:81:28:eb:4e:79:
6d:e9:6c:d9:bb:09:e6:f6:77:b8:a6:af:93:00:28:
3c:40:d1:57:54:3c:83:39:9b:02:96:d6:f7:7c:95:
9d:38:70:ff:47:62:8a:2b:9a:92:6e:90:f1:b7:d2:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AE:52:29:8A:35:07:0D:09:F4:BF:89:89:96:A3:74:58:62:6B:BB
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/6q5SKYo1Bw0J9L-JiZajdFhia7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.88.0/22
Signature Algorithm: sha256WithRSAEncryption
14:2b:1e:21:cb:15:bb:a3:19:60:39:ec:1f:90:97:26:9a:a5:
57:3f:5c:b6:d8:fe:a7:30:cc:22:ec:9b:24:6c:90:c1:41:7d:
41:76:b6:d4:17:67:b5:62:4d:e6:fb:a2:49:49:2a:b6:b5:10:
92:7d:b1:d0:c8:fd:70:a7:1e:79:b0:0a:c7:84:0c:4e:e7:6c:
10:df:1e:43:0f:61:77:2c:60:f2:3a:38:ba:12:e7:29:77:e5:
85:de:6c:d1:d3:a5:a3:8c:a0:a2:22:75:dc:e8:68:fe:79:bb:
d3:22:f1:fe:a9:87:f3:ac:81:ed:ca:ca:c6:ba:e3:05:9a:e2:
93:f7:9f:07:d3:93:59:3c:cb:8c:46:5d:60:4a:f0:e2:d8:18:
72:24:9e:ca:93:85:97:86:11:0a:72:2f:54:e1:9f:01:bd:6e:
06:23:8a:e1:4c:28:73:63:ff:88:a8:9b:1e:1a:dd:d2:5b:8f:
3e:b5:2b:be:d3:50:b6:0a:e3:79:27:39:65:e1:fa:24:c8:cd:
48:f2:e7:16:0a:a5:48:96:69:cd:76:f5:34:f4:56:2d:7d:74:
bf:ab:ce:7f:51:20:8b:67:fd:81:b4:78:bb:4a:08:2a:b3:f3:
08:0d:51:0e:48:65:9e:dd:ea:43:cb:4b:f8:8e:b2:98:20:94:
72:94:ef:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCguPXX/BPi2uov9egQEScbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz
ODllZDQwHhcNMjQwNzExMDczNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWFlNTIyOThhMzUwNzBkMDlmNGJmODk4OTk2YTM3NDU4NjI2YmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4XwUIb0A7QwH6u+j1wv2IdnfSmM
1zlDQP0XMM7DfIqzzIDnDgRF+Hri6W19Qa3q7K6nWXHGGRyLD2LZKtjoomVQuvMG
k6GdZ0Wtg55HoSLy0u70JzAuO95kcYxaKm3FzYnnrMEJeq0IoS6cz5AnFGOFQEOb
PiEZrvwrv5miB/4hUXnr5n8mEBK5q7fOwQBDDr1lj0FbQPAxOCkDJrwz3OMU+oTU
OoQl2jSGNdYCcNwiTRiZRwmZr02Ifla3qP85oA1+UY6dQZDTa6ZhgSjrTnlt6WzZ
uwnm9ne4pq+TACg8QNFXVDyDOZsCltb3fJWdOHD/R2KKK5qSbpDxt9JwaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOquUimKNQcNCfS/iYmWo3RYYmu7MB8GA1UdIwQY
MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt
MDgxY2IyYjE3YWI1LzEvNnE1U0tZbzFCdzBKOUwtSmlaYWpkRmhpYTdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1
LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH4VYMA0G
CSqGSIb3DQEBCwUAA4IBAQAUKx4hyxW7oxlgOewfkJcmmqVXP1y22P6nMMwi7Jsk
bJDBQX1BdrbUF2e1Yk3m+6JJSSq2tRCSfbHQyP1wpx55sArHhAxO52wQ3x5DD2F3
LGDyOji6Eucpd+WF3mzR06WjjKCiInXc6Gj+ebvTIvH+qYfzrIHtysrGuuMFmuKT
958H05NZPMuMRl1gSvDi2BhyJJ7Kk4WXhhEKci9U4Z8BvW4GI4rhTChzY/+IqJse
Gt3SW48+tSu+01C2CuN5Jzll4fokyM1I8ucWCqVIlmnNdvU09FYtfXS/q85/USCL
Z/2BtHi7Sggqs/MIDVEOSGWe3epDy0v4jrKYIJRylO+K
-----END CERTIFICATE-----
Generated at Sat Jul 13 12:47:21 2024 by rpki-client on console-fra.rpki-client.org