Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/_sm-oaDgjYBGYcnIv-9WVAl3NFo.roa
File: _sm-oaDgjYBGYcnIv-9WVAl3NFo.roa (raw, json)
Hash identifier: f1n79c0gMxFrWT2nMwbNDAx3/qSAc9EnRyRs6cWgB+s=
Subject key identifier: FE:C9:BE:A1:A0:E0:8D:80:46:61:C9:C8:BF:EF:56:54:09:77:34:5A
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 01856F0B3AF47CA43F46FAF9C39D5D36DB50
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/_sm-oaDgjYBGYcnIv-9WVAl3NFo.roa
Signing time: Sun 01 Jan 2023 20:34:45 +0000
ROA not before: Sun 01 Jan 2023 20:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199095
IP address blocks: 31.31.128.0/19 maxlen: 24
2a11:bfc0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:3a:f4:7c:a4:3f:46:fa:f9:c3:9d:5d:36:db:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Jan 1 20:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fec9bea1a0e08d804661c9c8bfef56540977345a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:34:bb:55:c3:d0:e8:1c:af:55:60:02:f3:
ee:c5:94:6c:e6:2c:aa:a8:76:1c:9c:a6:ec:34:87:
38:ee:85:7e:16:59:a6:d0:a2:6d:7e:db:42:6d:b2:
e1:d3:4d:56:6f:34:cf:72:ee:9b:a6:f4:0b:0b:46:
d4:8e:0f:19:b7:f9:f8:0e:98:7b:7b:15:dd:23:59:
ce:bc:8c:a0:52:5f:25:92:28:cb:a3:6a:bd:c9:49:
c1:65:d8:64:7d:bc:23:5f:cd:05:ad:15:16:15:b5:
44:87:24:02:13:cc:75:50:18:36:3f:6e:e6:02:bd:
42:3a:50:26:99:f1:ac:e9:e4:e1:45:3a:3a:4a:ed:
77:07:63:4f:e4:0e:1f:f6:e2:d6:37:2a:31:37:19:
a9:b2:a5:ee:2a:3d:6f:07:dd:f5:4c:3d:f5:4a:c2:
76:a9:48:e3:90:86:c5:b8:a8:f6:17:67:f6:46:7c:
f1:4a:8f:74:56:fc:81:00:21:3f:39:f7:2e:1e:da:
05:bb:88:2c:e9:cf:37:ab:11:c2:53:35:96:a8:d7:
f6:d7:f4:a6:eb:75:d2:d4:5f:6f:3f:4f:48:cc:8c:
b8:d7:9b:05:ad:50:0e:1b:73:a3:30:58:e0:02:46:
41:30:74:07:d8:02:f6:e5:0a:a5:09:eb:36:35:2d:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C9:BE:A1:A0:E0:8D:80:46:61:C9:C8:BF:EF:56:54:09:77:34:5A
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/_sm-oaDgjYBGYcnIv-9WVAl3NFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.128.0/19
IPv6:
2a11:bfc0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:4c:f3:de:58:1e:8d:14:73:19:52:7a:57:ce:4e:ca:d5:96:
6e:fd:dd:e5:06:ea:8b:41:23:a8:65:6f:2c:d4:ff:46:11:a3:
b7:15:d2:ab:57:d9:a5:3c:aa:56:b7:12:5d:46:f7:7d:38:b3:
b6:cd:85:93:32:e1:ff:16:f1:f2:32:0e:15:c0:c7:f7:42:1c:
4e:91:0d:1c:8b:e9:ec:6b:87:23:57:73:0e:3b:f7:6e:e4:2c:
e3:f0:87:94:b6:6d:c2:1f:17:17:be:e9:d8:fb:77:3e:e0:f6:
e7:56:78:b4:06:b4:59:52:47:41:1c:74:fc:1d:03:05:22:d4:
ea:ec:ae:17:b7:44:20:4a:4b:14:0a:04:a2:b1:d8:21:f3:84:
ae:a0:a9:a3:a2:2e:1c:c6:24:9d:26:52:1b:89:42:27:aa:c6:
33:c1:c5:31:fd:a8:5d:20:a4:21:d4:84:4e:f9:a8:f9:db:9e:
1b:2b:52:6e:46:60:6a:d6:43:d5:c6:25:ee:c8:1c:3c:ec:ba:
ea:0d:cb:ec:7a:a6:37:23:ad:13:8b:d5:cb:79:9e:7a:3f:91:
0a:e5:8a:3e:74:ce:da:eb:84:12:99:12:f8:13:bc:cc:9d:b7:
0f:b1:eb:73:f0:20:c4:3a:f4:1f:e8:24:77:8f:47:51:04:15:
83:cd:bd:34
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvCzr0fKQ/Rvr5w51dNttQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjcxM2NmMjA1NTJkNmM1YzIzZjA5ZTdiMzc2Njk4NDZm
OWNhNTAwHhcNMjMwMTAxMjAzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWM5YmVhMWEwZTA4ZDgwNDY2MWM5YzhiZmVmNTY1NDA5NzczNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NA0u1XD0Ogcr1VgAvPuxZRs5iyq
qHYcnKbsNIc47oV+Flmm0KJtfttCbbLh001WbzTPcu6bpvQLC0bUjg8Zt/n4Dph7
exXdI1nOvIygUl8lkijLo2q9yUnBZdhkfbwjX80FrRUWFbVEhyQCE8x1UBg2P27m
Ar1COlAmmfGs6eThRTo6Su13B2NP5A4f9uLWNyoxNxmpsqXuKj1vB931TD31SsJ2
qUjjkIbFuKj2F2f2RnzxSo90VvyBACE/OfcuHtoFu4gs6c83qxHCUzWWqNf21/Sm
63XS1F9vP09IzIy415sFrVAOG3OjMFjgAkZBMHQH2AL25QqlCes2NS0vGwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFP7JvqGg4I2ARmHJyL/vVlQJdzRaMB8GA1UdIwQY
MBaAFLH3E88gVS1sXCPwnns3ZphG+cpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYt
Njk0ZDc4YjMyZDIwLzEvX3NtLW9hRGdqWUJHWWNuSXYtOVdWQWwzTkZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYtNjk0ZDc4YjMyZDIw
LzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFHx+AMA0E
AgACMAcDBQAqEb/AMA0GCSqGSIb3DQEBCwUAA4IBAQBqTPPeWB6NFHMZUnpXzk7K
1ZZu/d3lBuqLQSOoZW8s1P9GEaO3FdKrV9mlPKpWtxJdRvd9OLO2zYWTMuH/FvHy
Mg4VwMf3QhxOkQ0ci+nsa4cjV3MOO/du5Czj8IeUtm3CHxcXvunY+3c+4PbnVni0
BrRZUkdBHHT8HQMFItTq7K4Xt0QgSksUCgSisdgh84SuoKmjoi4cxiSdJlIbiUIn
qsYzwcUx/ahdIKQh1IRO+aj5254bK1JuRmBq1kPVxiXuyBw87LrqDcvseqY3I60T
i9XLeZ56P5EK5Yo+dM7a64QSmRL4E7zMnbcPsetz8CDEOvQf6CR3j0dRBBWDzb00
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:44 2024 by rpki-client on console-ams.rpki-client.org