Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/70epols_znRrjowctmzyaq9vV1Q.roa
File: 70epols_znRrjowctmzyaq9vV1Q.roa (raw, json)
Hash identifier: RMBqiis3hI6HSyX1hlleyeUW9U5Gn3HvEgvVD70EjyE=
Subject key identifier: EF:47:A9:A2:5B:3F:CE:74:6B:8E:8C:1C:B6:6C:F2:6A:AF:6F:57:54
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018CC801AFCC13644BDB11846485BFD9B483
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/70epols_znRrjowctmzyaq9vV1Q.roa
Signing time: Tue 02 Jan 2024 02:30:02 +0000
ROA not before: Tue 02 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59823
IP address blocks: 31.40.129.0/24 maxlen: 24
31.40.128.0/23 maxlen: 23
31.40.128.0/24 maxlen: 24
31.40.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 11:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:af:cc:13:64:4b:db:11:84:64:85:bf:d9:b4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef47a9a25b3fce746b8e8c1cb66cf26aaf6f5754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:86:db:5f:eb:b9:9e:4b:11:e2:c9:93:dd:
f5:59:da:96:3c:7a:24:d8:fc:37:bb:85:c3:bb:bd:
1a:e3:18:db:2a:d0:f0:32:f3:b9:20:0a:ed:d2:00:
94:6d:a9:a8:26:be:9d:bf:f2:2e:37:8e:00:d9:51:
6b:db:95:2e:17:eb:05:c2:cb:16:0e:ca:1c:23:31:
96:2a:62:b0:11:00:c7:e5:24:5e:1e:3a:76:d5:6d:
9b:8d:ea:77:c3:0d:76:d2:8d:c2:21:bc:79:8f:d8:
1a:a2:a9:bf:d5:d8:d3:88:98:86:db:3c:ba:be:d3:
3b:c1:52:95:13:4a:3e:cc:80:53:82:ac:5b:11:8a:
4f:1d:2e:de:c3:a4:39:e9:b8:1b:df:47:1d:a4:db:
0a:86:20:88:10:3a:da:9a:a5:2d:12:6a:a6:46:31:
03:b0:43:47:d0:8f:19:0a:e3:41:91:d6:3f:21:a7:
97:5f:51:47:ee:93:72:2a:eb:a2:06:f7:d6:36:aa:
b8:30:85:ef:8d:7c:39:67:62:d9:32:0a:c8:2a:10:
8b:6e:ee:e5:9b:a8:4a:67:02:15:fc:81:ca:8f:7b:
9f:d3:d8:bf:f8:c6:b4:1c:84:5a:2d:f7:f2:9a:17:
ca:a9:77:fc:73:e5:2a:ff:e9:89:6c:21:7b:aa:29:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:A9:A2:5B:3F:CE:74:6B:8E:8C:1C:B6:6C:F2:6A:AF:6F:57:54
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/70epols_znRrjowctmzyaq9vV1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.128.0/23
31.40.152.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d5:ce:81:1b:5a:52:18:16:17:8a:60:0c:bc:33:9c:6a:9a:
ce:89:3b:76:60:4b:c8:e0:8a:3d:52:93:2d:ba:5c:a7:9c:0d:
57:43:86:5d:3f:52:59:72:8c:d3:5e:ed:91:3d:e4:a1:37:b3:
42:4f:24:f6:3d:6b:09:73:05:cf:15:72:ca:35:17:6f:40:31:
c7:45:3a:a6:2f:59:fc:09:b0:18:bc:2c:28:eb:1b:65:e8:c8:
cd:a1:72:f5:98:65:0e:0b:6a:12:1c:71:cd:32:72:da:33:be:
cf:d3:fb:eb:fc:07:2a:78:41:28:ad:bc:b7:29:35:16:93:08:
6e:74:f5:f1:be:5d:29:c3:e4:8a:dd:cc:70:90:b2:9e:5b:b2:
e1:eb:06:3e:9d:18:24:23:a9:d8:fa:bb:61:0e:5a:8e:0b:7d:
79:5b:02:94:08:44:cd:db:95:18:cf:eb:3f:21:d6:16:f3:22:
08:8a:55:2a:73:c5:6c:c0:6b:47:bf:9a:1e:27:fc:a7:83:34:
a7:ad:b3:e5:ff:28:ef:6d:4a:f0:78:e0:34:1e:f6:a9:59:01:
91:8b:1b:e1:15:c4:59:2e:4a:f6:88:17:09:6c:ab:0d:98:d2:
35:db:8f:f0:ce:00:50:f1:ff:df:c8:ba:27:0e:6c:8f:de:41:
7a:b0:a1:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIAa/ME2RL2xGEZIW/2bSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl
ZTY2ZDcwHhcNMjQwMTAyMDIzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjQ3YTlhMjViM2ZjZTc0NmI4ZThjMWNiNjZjZjI2YWFmNmY1NzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurSG21/ruZ5LEeLJk931WdqWPHok
2Pw3u4XDu70a4xjbKtDwMvO5IArt0gCUbamoJr6dv/IuN44A2VFr25UuF+sFwssW
DsocIzGWKmKwEQDH5SReHjp21W2bjep3ww120o3CIbx5j9gaoqm/1djTiJiG2zy6
vtM7wVKVE0o+zIBTgqxbEYpPHS7ew6Q56bgb30cdpNsKhiCIEDramqUtEmqmRjED
sENH0I8ZCuNBkdY/IaeXX1FH7pNyKuuiBvfWNqq4MIXvjXw5Z2LZMgrIKhCLbu7l
m6hKZwIV/IHKj3uf09i/+Ma0HIRaLffymhfKqXf8c+Uq/+mJbCF7qikHtwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO9HqaJbP850a46MHLZs8mqvb1dUMB8GA1UdIwQY
MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt
NGEzNGMxYmJhYjJiLzEvNzBlcG9sc196blJyam93Y3RtenlhcTl2VjFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi
LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBHyiAAwQA
HyiYMA0GCSqGSIb3DQEBCwUAA4IBAQBN1c6BG1pSGBYXimAMvDOcaprOiTt2YEvI
4Io9UpMtulynnA1XQ4ZdP1JZcozTXu2RPeShN7NCTyT2PWsJcwXPFXLKNRdvQDHH
RTqmL1n8CbAYvCwo6xtl6MjNoXL1mGUOC2oSHHHNMnLaM77P0/vr/AcqeEEorby3
KTUWkwhudPXxvl0pw+SK3cxwkLKeW7Lh6wY+nRgkI6nY+rthDlqOC315WwKUCETN
25UYz+s/IdYW8yIIilUqc8VswGtHv5oeJ/yngzSnrbPl/yjvbUrweOA0HvapWQGR
ixvhFcRZLkr2iBcJbKsNmNI124/wzgBQ8f/fyLonDmyP3kF6sKGo
-----END CERTIFICATE-----
Generated at Thu Feb 29 14:06:39 2024 by rpki-client on console-fra.rpki-client.org