Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/MIeet1e7DT9bA8N1LH3mxLU2k9U.roa
File: MIeet1e7DT9bA8N1LH3mxLU2k9U.roa (raw, json)
Hash identifier: JwjB6Uz+9NQUtVOOPnSvEe4yalT1sKO69EwatUNZ9v8=
Subject key identifier: 30:87:9E:B7:57:BB:0D:3F:5B:03:C3:75:2C:7D:E6:C4:B5:36:93:D5
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01856DCACCE835DDEDD35B6B3AC2785B5D3F
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/MIeet1e7DT9bA8N1LH3mxLU2k9U.roa
Signing time: Sun 01 Jan 2023 14:44:45 +0000
ROA not before: Sun 01 Jan 2023 14:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 31.133.84.0/22 maxlen: 22
176.103.228.0/22 maxlen: 22
31.133.92.0/22 maxlen: 22
176.103.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:cc:e8:35:dd:ed:d3:5b:6b:3a:c2:78:5b:5d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jan 1 14:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30879eb757bb0d3f5b03c3752c7de6c4b53693d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:15:54:16:be:f1:68:37:fe:83:9e:40:cd:
62:9e:a9:aa:02:65:ee:0e:0a:04:4b:13:a8:fc:78:
d5:6a:7d:fb:2e:24:78:ed:f9:d4:e3:b5:ae:1e:7b:
b5:fa:b5:f4:10:73:0a:c8:86:64:9a:8e:07:76:f3:
01:a6:63:43:4c:0c:b6:e1:57:38:2f:4d:38:51:99:
e4:d5:08:36:40:84:6e:ca:60:ac:85:cd:ce:63:80:
04:f8:ba:23:f9:ac:00:a8:1e:cc:5e:86:7e:94:e0:
d0:f9:7b:4c:5e:1f:c8:b7:77:61:75:0a:e4:63:4b:
d1:d6:cb:9b:03:4c:7c:54:ac:09:1c:c3:d5:92:52:
43:4e:ed:76:87:55:0b:93:10:dc:a4:2a:07:a1:b9:
49:f5:eb:d8:b6:50:1b:0f:2a:1a:f1:19:78:64:8b:
c4:b1:e9:7a:66:ba:b2:01:3f:ed:bb:67:08:d1:08:
96:17:68:dc:cf:ac:35:09:6c:01:ef:6e:10:bb:69:
ea:c4:1a:6e:74:70:9b:00:76:d9:01:69:e3:85:d0:
6a:4a:4e:23:64:fc:5c:52:32:dd:cd:05:e7:dd:6a:
1d:25:02:8f:1a:e6:27:40:bf:a4:f3:1a:ce:f0:e0:
e6:ee:76:8d:da:62:19:f6:5f:76:00:38:d5:9e:94:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:87:9E:B7:57:BB:0D:3F:5B:03:C3:75:2C:7D:E6:C4:B5:36:93:D5
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/MIeet1e7DT9bA8N1LH3mxLU2k9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.84.0/22
31.133.92.0/22
176.103.228.0/22
176.103.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:91:10:1a:64:a2:3f:56:6c:ec:e1:47:d4:b5:88:e1:fa:ad:
a5:0e:1e:14:02:9f:7c:3f:fd:0b:81:5a:85:59:9e:d8:33:49:
66:d1:72:b6:36:1c:eb:ec:d8:15:2b:7a:9c:3b:13:99:90:43:
7f:25:2f:6c:f6:e5:2f:4d:6e:57:a5:6e:0b:02:23:d4:73:ae:
53:8f:d4:8d:3d:bf:ea:64:f9:8e:04:1e:71:36:12:a5:c9:b1:
ad:db:45:58:1c:76:79:4a:87:df:01:73:20:4a:21:4b:f2:5a:
b9:4e:7f:64:67:eb:d3:c9:f1:53:27:99:bc:80:e4:5d:dd:03:
6b:b9:0a:11:3c:45:3c:2e:31:f3:f3:7d:3b:c1:cb:76:13:bc:
a3:28:33:0d:02:b7:38:5e:09:9a:4c:b1:cd:b4:8e:fb:8f:b8:
97:b6:de:24:41:fd:74:1d:5e:4f:85:f1:ee:b3:e7:48:d0:e2:
da:7a:56:9a:0e:6d:28:04:3e:a9:fa:79:01:ee:3f:f5:cd:c2:
3e:82:7e:d9:30:1b:0e:23:b7:2c:83:1b:0f:fd:a5:e9:7d:97:
7e:7a:c9:ae:1a:11:29:ac:83:bc:e8:46:90:36:1c:52:d6:8c:
f2:bd:f7:54:b1:9c:d1:a6:a6:08:14:03:cd:80:10:68:ee:5b:
77:36:2b:3f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVtyszoNd3t01trOsJ4W10/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz
ODllZDQwHhcNMjMwMTAxMTQ0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDg3OWViNzU3YmIwZDNmNWIwM2MzNzUyYzdkZTZjNGI1MzY5M2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSAVVBa+8Wg3/oOeQM1inqmqAmXu
DgoESxOo/HjVan37LiR47fnU47WuHnu1+rX0EHMKyIZkmo4HdvMBpmNDTAy24Vc4
L004UZnk1Qg2QIRuymCshc3OY4AE+Loj+awAqB7MXoZ+lODQ+XtMXh/It3dhdQrk
Y0vR1subA0x8VKwJHMPVklJDTu12h1ULkxDcpCoHoblJ9evYtlAbDyoa8Rl4ZIvE
sel6ZrqyAT/tu2cI0QiWF2jcz6w1CWwB724Qu2nqxBpudHCbAHbZAWnjhdBqSk4j
ZPxcUjLdzQXn3WodJQKPGuYnQL+k8xrO8ODm7naN2mIZ9l92ADjVnpTp1QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDCHnrdXuw0/WwPDdSx95sS1NpPVMB8GA1UdIwQY
MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt
MDgxY2IyYjE3YWI1LzEvTUllZXQxZTdEVDliQThOMUxIM214TFUyazlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1
LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCH4VUAwQC
H4VcAwQCsGfkAwQCsGfsMA0GCSqGSIb3DQEBCwUAA4IBAQBKkRAaZKI/Vmzs4UfU
tYjh+q2lDh4UAp98P/0LgVqFWZ7YM0lm0XK2Nhzr7NgVK3qcOxOZkEN/JS9s9uUv
TW5XpW4LAiPUc65Tj9SNPb/qZPmOBB5xNhKlybGt20VYHHZ5SoffAXMgSiFL8lq5
Tn9kZ+vTyfFTJ5m8gORd3QNruQoRPEU8LjHz8307wct2E7yjKDMNArc4XgmaTLHN
tI77j7iXtt4kQf10HV5PhfHus+dI0OLaelaaDm0oBD6p+nkB7j/1zcI+gn7ZMBsO
I7csgxsP/aXpfZd+esmuGhEprIO86EaQNhxS1ozyvfdUsZzRpqYIFAPNgBBo7lt3
Nis/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:45 2023 by rpki-client on console-ams.rpki-client.org