Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/axAZwd9jPOV92DwkTh3VUXC47tA.roa
File: axAZwd9jPOV92DwkTh3VUXC47tA.roa (raw, json)
Hash identifier: kpCTZDTuZf5LW8aztS9adtlchiArPGAj2yCWvGnF2MA=
Subject key identifier: 6B:10:19:C1:DF:63:3C:E5:7D:D8:3C:24:4E:1D:D5:51:70:B8:EE:D0
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018CC801B292A64A09C7F5CB73F799DBF49B
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/axAZwd9jPOV92DwkTh3VUXC47tA.roa
Signing time: Tue 02 Jan 2024 02:30:03 +0000
ROA not before: Tue 02 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216033
IP address blocks: 31.40.160.0/23 maxlen: 23
31.40.150.0/24 maxlen: 24
31.40.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 11:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b2:92:a6:4a:09:c7:f5:cb:73:f7:99:db:f4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b1019c1df633ce57dd83c244e1dd55170b8eed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:61:3b:36:fd:c2:b3:c3:39:c1:cc:e5:6b:
63:57:19:cb:dc:34:68:eb:a6:8c:51:a3:f8:d0:b7:
9b:da:b1:b1:ff:a1:6e:73:e7:96:52:72:c6:c3:67:
0a:1a:24:4c:7c:6a:ef:9f:85:c3:1f:9c:dc:ed:ce:
b8:81:b8:38:f1:7f:95:07:f0:65:fa:e9:a2:64:c2:
c2:5c:8a:fc:82:a1:f2:77:54:51:06:ba:54:ef:ff:
4d:6b:42:90:23:b2:9b:92:fa:37:9a:43:0a:2e:89:
8e:c4:25:51:cb:d7:8f:5a:fc:db:e5:d9:2f:70:0e:
af:38:a8:12:e2:32:2c:57:04:9d:cf:92:4c:c8:af:
eb:e6:dd:00:cd:1f:d9:a1:54:94:7a:d1:fd:eb:cf:
f2:b3:1f:21:32:ee:17:51:1a:33:01:59:dd:c0:7e:
5d:4d:f7:7a:8d:34:49:db:51:45:54:15:dc:74:e7:
14:0d:32:68:a0:0b:17:dd:d4:1a:28:ea:05:92:60:
d0:b7:4a:1d:fe:2a:fb:19:1e:42:6a:62:55:1c:f1:
85:72:dd:2b:7d:76:bf:2a:12:4f:da:ea:43:fc:0f:
f0:76:2d:ca:1c:03:ef:ba:bd:c9:27:3e:e7:90:9c:
29:2c:7f:66:d2:39:81:30:a1:5f:55:4a:cf:93:83:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:10:19:C1:DF:63:3C:E5:7D:D8:3C:24:4E:1D:D5:51:70:B8:EE:D0
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/axAZwd9jPOV92DwkTh3VUXC47tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.150.0/24
31.40.154.0/24
31.40.160.0/23
Signature Algorithm: sha256WithRSAEncryption
34:08:77:94:77:df:6b:7b:e1:df:38:a7:07:52:dc:5b:d7:d2:
15:1a:7f:a7:43:39:2c:d6:ca:0b:05:73:9f:27:97:3e:c5:81:
83:11:a0:a1:a3:c5:b8:36:41:f7:9c:0b:a5:ae:37:a9:0a:28:
f6:42:ed:25:29:c4:d2:cc:6b:10:23:b5:6f:f5:cc:50:7a:05:
77:68:78:f0:19:68:4b:65:43:f0:f4:80:08:0d:57:89:c9:e3:
0f:2e:68:42:ec:a2:8a:05:85:11:fe:6f:a8:3c:64:42:0d:77:
09:cf:17:3e:66:a4:a6:cd:1f:07:c5:30:b7:df:c7:29:88:37:
bc:08:87:af:f3:14:4f:50:c7:ec:72:5e:5e:f4:04:b1:ad:58:
3e:d1:19:27:3b:b9:4f:61:d0:15:39:9a:7d:90:ef:02:bc:81:
62:8b:03:fd:43:97:f4:bf:bc:9d:85:43:89:1e:65:aa:ef:eb:
b1:3d:88:dc:c4:df:f5:f7:7c:fc:5a:d3:00:0d:43:5d:b4:56:
e7:2b:6b:4e:3e:38:d7:82:72:35:1b:9b:ac:fb:8b:e9:bb:54:
a7:34:3b:6b:be:8d:ba:59:3d:ed:c8:74:e0:7d:a4:62:ee:bb:
14:50:d3:7f:5e:87:f3:9f:c1:c0:36:ed:61:d2:91:11:6a:ed:
35:06:56:17
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzIAbKSpkoJx/XLc/eZ2/SbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl
ZTY2ZDcwHhcNMjQwMTAyMDIzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjEwMTljMWRmNjMzY2U1N2RkODNjMjQ0ZTFkZDU1MTcwYjhlZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRBhOzb9wrPDOcHM5WtjVxnL3DRo
66aMUaP40Leb2rGx/6Fuc+eWUnLGw2cKGiRMfGrvn4XDH5zc7c64gbg48X+VB/Bl
+umiZMLCXIr8gqHyd1RRBrpU7/9Na0KQI7Kbkvo3mkMKLomOxCVRy9ePWvzb5dkv
cA6vOKgS4jIsVwSdz5JMyK/r5t0AzR/ZoVSUetH968/ysx8hMu4XURozAVndwH5d
Tfd6jTRJ21FFVBXcdOcUDTJooAsX3dQaKOoFkmDQt0od/ir7GR5CamJVHPGFct0r
fXa/KhJP2upD/A/wdi3KHAPvur3JJz7nkJwpLH9m0jmBMKFfVUrPk4O2SwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGsQGcHfYzzlfdg8JE4d1VFwuO7QMB8GA1UdIwQY
MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt
NGEzNGMxYmJhYjJiLzEvYXhBWndkOWpQT1Y5MkR3a1RoM1ZVWEM0N3RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi
LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHyiWAwQA
HyiaAwQBHyigMA0GCSqGSIb3DQEBCwUAA4IBAQA0CHeUd99re+HfOKcHUtxb19IV
Gn+nQzks1soLBXOfJ5c+xYGDEaCho8W4NkH3nAulrjepCij2Qu0lKcTSzGsQI7Vv
9cxQegV3aHjwGWhLZUPw9IAIDVeJyeMPLmhC7KKKBYUR/m+oPGRCDXcJzxc+ZqSm
zR8HxTC338cpiDe8CIev8xRPUMfscl5e9ASxrVg+0RknO7lPYdAVOZp9kO8CvIFi
iwP9Q5f0v7ydhUOJHmWq7+uxPYjcxN/193z8WtMADUNdtFbnK2tOPjjXgnI1G5us
+4vpu1SnNDtrvo26WT3tyHTgfaRi7rsUUNN/Xofzn8HANu1h0pERau01BlYX
-----END CERTIFICATE-----
Generated at Thu Feb 29 14:02:45 2024 by rpki-client on console-ams.rpki-client.org