Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/xqzu5xbLcKyNRcPdRN8JICkJVtE.roa
File: xqzu5xbLcKyNRcPdRN8JICkJVtE.roa (raw, json)
Hash identifier: dBb0glnHrd5NfqnpAutDsgBTHgjkABXc0Y4cR7z85OE=
Subject key identifier: C6:AC:EE:E7:16:CB:70:AC:8D:45:C3:DD:44:DF:09:20:29:09:56:D1
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019039A776390B3A9BA5588BFAF73BB8C763
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/xqzu5xbLcKyNRcPdRN8JICkJVtE.roa
Signing time: Fri 21 Jun 2024 07:16:34 +0000
ROA not before: Fri 21 Jun 2024 07:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 31.133.80.0/22 maxlen: 24
31.133.80.0/24 maxlen: 24
31.133.81.0/24 maxlen: 24
31.133.82.0/24 maxlen: 24
31.133.83.0/24 maxlen: 24
31.133.84.0/22 maxlen: 22
31.133.88.0/22 maxlen: 24
31.133.89.0/24 maxlen: 24
31.133.90.0/24 maxlen: 24
31.133.91.0/24 maxlen: 24
176.103.224.0/22 maxlen: 22
176.103.232.0/22 maxlen: 22
176.103.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 29 Jun 2024 10:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:a7:76:39:0b:3a:9b:a5:58:8b:fa:f7:3b:b8:c7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jun 21 07:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6aceee716cb70ac8d45c3dd44df0920290956d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:82:6c:2f:f8:cf:00:78:1a:68:e2:95:42:
2c:75:07:e9:56:91:8d:bd:69:d0:0a:58:b8:3e:46:
93:d4:58:13:eb:53:ab:87:3a:89:23:79:fd:58:fd:
ad:c5:dd:5d:0c:90:7e:6e:15:62:70:d4:dd:68:2a:
01:4b:d4:8a:7e:5c:ef:5c:63:e0:53:fb:b1:be:9e:
65:a0:88:b7:f3:28:3b:ef:0d:8c:79:23:6a:e1:18:
07:1a:46:67:5b:84:8d:6e:64:48:b7:59:9e:fa:c9:
8a:72:b2:84:19:f8:1a:3f:98:81:3b:41:a9:f0:99:
8e:da:ad:8e:73:02:29:4c:15:fb:1a:89:de:de:d0:
a5:fd:6e:e9:b3:36:8a:0c:8e:99:69:9c:59:5a:52:
4a:c6:f3:cd:1d:d4:6b:36:48:81:f3:97:e0:5d:05:
e9:5b:eb:0e:f9:d3:f5:c2:92:5b:e8:d4:cd:bd:ad:
92:5c:97:49:73:36:cf:f1:45:84:88:da:d8:e0:13:
a2:c4:bc:2a:8a:80:5d:15:6d:4b:f2:06:b5:ed:9a:
98:ec:9d:7d:9d:79:ab:70:21:00:60:67:ca:32:79:
47:6e:80:62:3f:db:16:cb:01:bd:d2:56:fb:8d:5b:
8a:56:59:db:14:b8:94:ef:96:89:39:3e:6d:82:86:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AC:EE:E7:16:CB:70:AC:8D:45:C3:DD:44:DF:09:20:29:09:56:D1
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/xqzu5xbLcKyNRcPdRN8JICkJVtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0-31.133.91.255
176.103.224.0/22
176.103.232.0/21
Signature Algorithm: sha256WithRSAEncryption
96:40:6e:67:99:b9:f1:96:dd:4a:64:78:4d:33:9d:7c:bd:7f:
84:56:af:b8:1c:4f:b4:a5:d7:97:b4:01:01:c7:f3:37:3f:70:
83:57:96:c9:24:28:d5:88:85:6d:45:71:06:9e:aa:3e:23:2d:
cd:45:5a:65:df:3d:a3:cf:2a:f2:13:c3:55:41:14:83:8d:f0:
df:98:44:95:10:5d:16:85:fe:2f:06:0a:f4:d1:92:9e:c6:e8:
3e:c0:98:4c:02:ab:18:84:19:25:0b:62:d0:e8:08:70:ff:f3:
d9:2f:aa:e8:ed:60:85:74:0d:82:0e:91:7b:c7:0e:bb:ee:ae:
57:ea:40:00:c7:5c:05:06:bd:a1:90:1a:93:8c:da:7f:01:2b:
90:49:e5:12:cd:ec:3c:e8:ff:b9:e2:54:b0:c7:30:85:fa:40:
ee:62:20:03:8c:3e:2b:40:1f:16:07:f9:b3:bb:85:a1:9a:63:
7b:e2:65:9f:f2:9a:63:48:9c:58:3d:f5:4a:5c:c5:de:54:09:
88:6a:82:84:06:8d:27:b1:cf:20:e3:a6:84:ef:b2:f4:63:d6:
a1:40:90:70:e7:62:36:bd:1d:bb:46:03:ac:9b:d5:ff:77:62:
9c:b5:7c:be:48:70:9e:44:7f:62:7d:ab:cd:85:e5:51:51:d1:
62:3c:5e:7e
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZA5p3Y5CzqbpViL+vc7uMdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz
ODllZDQwHhcNMjQwNjIxMDcxNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmFjZWVlNzE2Y2I3MGFjOGQ0NWMzZGQ0NGRmMDkyMDI5MDk1NmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVWCbC/4zwB4GmjilUIsdQfpVpGN
vWnQCli4PkaT1FgT61OrhzqJI3n9WP2txd1dDJB+bhVicNTdaCoBS9SKflzvXGPg
U/uxvp5loIi38yg77w2MeSNq4RgHGkZnW4SNbmRIt1me+smKcrKEGfgaP5iBO0Gp
8JmO2q2OcwIpTBX7Gone3tCl/W7pszaKDI6ZaZxZWlJKxvPNHdRrNkiB85fgXQXp
W+sO+dP1wpJb6NTNva2SXJdJczbP8UWEiNrY4BOixLwqioBdFW1L8ga17ZqY7J19
nXmrcCEAYGfKMnlHboBiP9sWywG90lb7jVuKVlnbFLiU75aJOT5tgoY89wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMas7ucWy3CsjUXD3UTfCSApCVbRMB8GA1UdIwQY
MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt
MDgxY2IyYjE3YWI1LzEveHF6dTV4YkxjS3lOUmNQZFJOOEpJQ2tKVnRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1
LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAQfhVAD
BAIfhVgDBAKwZ+ADBAOwZ+gwDQYJKoZIhvcNAQELBQADggEBAJZAbmeZufGW3Upk
eE0znXy9f4RWr7gcT7Sl15e0AQHH8zc/cINXlskkKNWIhW1FcQaeqj4jLc1FWmXf
PaPPKvITw1VBFION8N+YRJUQXRaF/i8GCvTRkp7G6D7AmEwCqxiEGSULYtDoCHD/
89kvqujtYIV0DYIOkXvHDrvurlfqQADHXAUGvaGQGpOM2n8BK5BJ5RLN7Dzo/7ni
VLDHMIX6QO5iIAOMPitAHxYH+bO7haGaY3viZZ/ymmNInFg99Upcxd5UCYhqgoQG
jSexzyDjpoTvsvRj1qFAkHDnYja9HbtGA6yb1f93Ypy1fL5IcJ5Ef2J9q82F5VFR
0WI8Xn4=
-----END CERTIFICATE-----
Generated at Sat Jun 29 15:00:46 2024 by rpki-client on console-fra.rpki-client.org