Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/31XTTrHf3IKMLt1C_GnXJvDcTCM.roa
File: 31XTTrHf3IKMLt1C_GnXJvDcTCM.roa (raw, json)
Hash identifier: /gaRfN7PZx78o70wjDk/QKkMPCP4CsvHRI3zhORmGBM=
Subject key identifier: DF:55:D3:4E:B1:DF:DC:82:8C:2E:DD:42:FC:69:D7:26:F0:DC:4C:23
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AEF6B480CC2AF96AD5B42EF1F9257942D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/31XTTrHf3IKMLt1C_GnXJvDcTCM.roa
Signing time: Mon 02 Oct 2023 08:04:59 +0000
ROA not before: Mon 02 Oct 2023 08:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 89.37.193.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 14:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:6b:48:0c:c2:af:96:ad:5b:42:ef:1f:92:57:94:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 2 08:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df55d34eb1dfdc828c2edd42fc69d726f0dc4c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:25:95:7e:72:f3:3d:02:eb:e9:91:eb:f8:
a0:a3:74:34:af:6c:1e:13:58:cf:31:e8:e7:17:f8:
ab:7a:4a:69:2f:f9:98:3d:4a:3b:59:8b:0c:e0:2e:
c4:90:55:f8:6f:1b:cc:a1:6d:f3:33:a6:dd:62:eb:
e3:6d:62:9d:e9:67:ff:a7:6f:d5:cc:15:7e:a5:98:
91:27:28:d2:a0:74:2c:83:d9:82:b9:35:57:8e:4e:
3e:54:4e:72:08:55:c1:1a:9e:38:0c:0c:57:24:97:
5c:d9:09:a5:35:c2:2c:89:37:fc:a1:c9:2c:af:bb:
d3:90:f4:42:07:99:fd:ec:d6:69:cc:84:f1:06:27:
e9:b9:42:cb:d6:4f:bc:7a:7a:e4:6d:91:5d:63:28:
b2:be:9d:20:45:3f:8f:a5:ae:80:64:68:5f:81:c9:
31:a3:0e:d1:9b:a3:9f:24:ba:d3:08:0e:b7:87:b2:
f3:4c:c2:12:6a:37:aa:fb:95:fb:2a:86:8a:59:55:
bc:6e:1b:d0:51:d2:3c:bc:6c:86:6c:c4:56:5e:4e:
b8:f9:90:9d:76:e2:20:89:f6:46:95:ba:2b:e3:52:
ad:ac:77:f8:68:41:0b:87:8e:37:75:10:cc:a4:dd:
84:48:4f:4e:9f:ef:f4:62:4c:1d:5d:51:79:eb:92:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:55:D3:4E:B1:DF:DC:82:8C:2E:DD:42:FC:69:D7:26:F0:DC:4C:23
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/31XTTrHf3IKMLt1C_GnXJvDcTCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.129.0/24
89.37.193.0/24
94.177.51.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ac:46:ac:09:22:a3:84:08:b7:5a:f4:d7:60:cb:08:d8:a3:
5e:7d:91:cc:98:8c:83:58:29:9b:18:aa:54:05:9a:3f:7a:90:
61:18:a7:fd:ce:06:7a:ce:b0:56:85:8e:81:7d:55:9f:e8:60:
10:50:db:15:62:94:86:eb:85:6c:41:8c:b4:87:d2:d6:d9:fa:
8e:25:88:f8:de:2d:38:9e:c6:39:14:a2:15:95:04:1e:8f:b1:
dd:5f:6e:b6:26:7a:f9:6b:53:01:86:89:fc:9c:72:7b:25:11:
ae:5d:c7:9a:84:a8:e4:6e:79:96:4b:2b:cb:d2:3d:3a:e1:3d:
f5:9a:75:11:1f:86:c1:fd:39:30:c0:0e:41:33:76:c8:c9:df:
55:1e:db:28:31:65:40:4b:07:f0:df:dc:82:e6:74:82:5e:aa:
81:a1:1b:73:ce:13:cd:0f:86:e0:d0:9e:42:a9:aa:2d:66:d1:
98:cc:e3:ae:00:7b:f8:47:b8:ce:5b:9d:3e:58:f4:b5:da:96:
40:5b:bf:7a:17:43:22:2e:02:b6:0c:17:6c:17:a3:52:ba:b2:
9d:e8:71:e1:67:f0:72:0c:c8:7f:c5:43:63:18:c5:85:11:e0:
c9:75:3d:e3:c7:68:75:6f:7d:80:30:06:31:eb:92:41:95:55:
64:c5:08:e1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYrva0gMwq+WrVtC7x+SV5QtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMxMDAyMDgwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjU1ZDM0ZWIxZGZkYzgyOGMyZWRkNDJmYzY5ZDcyNmYwZGM0YzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpsllX5y8z0C6+mR6/igo3Q0r2we
E1jPMejnF/irekppL/mYPUo7WYsM4C7EkFX4bxvMoW3zM6bdYuvjbWKd6Wf/p2/V
zBV+pZiRJyjSoHQsg9mCuTVXjk4+VE5yCFXBGp44DAxXJJdc2QmlNcIsiTf8ocks
r7vTkPRCB5n97NZpzITxBifpuULL1k+8enrkbZFdYyiyvp0gRT+Ppa6AZGhfgckx
ow7Rm6OfJLrTCA63h7LzTMISajeq+5X7KoaKWVW8bhvQUdI8vGyGbMRWXk64+ZCd
duIgifZGlbor41KtrHf4aEELh443dRDMpN2ESE9On+/0YkwdXVF565I7zQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFN9V006x39yCjC7dQvxp1ybw3EwjMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvMzFYVFRySGYzSUtNTHQxQ19HblhKdkRjVENNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSOBAwQA
WSXBAwQAXrEzMA0GCSqGSIb3DQEBCwUAA4IBAQB3rEasCSKjhAi3WvTXYMsI2KNe
fZHMmIyDWCmbGKpUBZo/epBhGKf9zgZ6zrBWhY6BfVWf6GAQUNsVYpSG64VsQYy0
h9LW2fqOJYj43i04nsY5FKIVlQQej7HdX262Jnr5a1MBhon8nHJ7JRGuXceahKjk
bnmWSyvL0j064T31mnURH4bB/TkwwA5BM3bIyd9VHtsoMWVASwfw39yC5nSCXqqB
oRtzzhPND4bg0J5CqaotZtGYzOOuAHv4R7jOW50+WPS12pZAW796F0MiLgK2DBds
F6NSurKd6HHhZ/ByDMh/xUNjGMWFEeDJdT3jx2h1b32AMAYx65JBlVVkxQjh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org