Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/vzD1vaohZG_gtPpNl-e7DvzeeQk.roa
File: vzD1vaohZG_gtPpNl-e7DvzeeQk.roa (raw, json)
Hash identifier: 9u7Z4/ZvYWB0uv/OvKBOet3jvFSsILkwrXC9C8KEMj8=
Subject key identifier: BF:30:F5:BD:AA:21:64:6F:E0:B4:FA:4D:97:E7:BB:0E:FC:DE:79:09
Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial: 018CC5DC3AA72B5086C91A67EE9BD99152D4
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/vzD1vaohZG_gtPpNl-e7DvzeeQk.roa
Signing time: Mon 01 Jan 2024 16:29:53 +0000
ROA not before: Mon 01 Jan 2024 16:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13237
IP address blocks: 31.204.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:3a:a7:2b:50:86:c9:1a:67:ee:9b:d9:91:52:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Validity
Not Before: Jan 1 16:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf30f5bdaa21646fe0b4fa4d97e7bb0efcde7909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:08:64:7a:0b:44:95:a2:e6:6e:b0:11:81:
cc:86:1f:67:fb:48:59:b0:b3:52:4c:0d:95:2f:5d:
ca:bb:a6:87:ab:74:f2:28:dc:e5:9b:3d:73:07:21:
40:4b:21:fe:53:dd:d7:d3:3e:28:cf:c2:7b:05:31:
12:57:1b:0d:17:54:d7:84:d3:03:04:6b:c8:39:a2:
5e:a0:c2:94:fc:48:81:5d:a8:ba:6a:14:17:8b:6c:
b0:d1:7d:08:4e:77:17:e1:a7:ed:fa:48:4d:af:d3:
eb:7d:92:99:4e:73:84:1f:70:da:74:ac:e3:9e:1f:
68:a4:7a:82:07:9e:50:21:ff:b9:89:6c:ed:9a:e7:
c9:54:b1:5d:7a:95:01:a7:de:1e:78:c1:31:fa:04:
2a:82:8a:16:df:de:9c:3c:46:cd:8e:94:49:e9:e1:
55:b2:ad:33:bd:91:b3:1e:47:1e:b5:c8:19:15:ed:
f7:61:b8:02:f2:60:e1:0e:25:3a:9d:b7:02:d7:27:
8d:9b:a2:d8:9d:26:f8:f8:94:57:5f:fc:da:e6:0f:
14:70:59:7c:91:5f:06:8f:ed:2c:95:1c:81:74:b8:
d9:1b:92:8f:1e:40:24:2a:97:b1:27:c3:1a:7a:cd:
27:6d:66:ba:90:da:aa:da:cd:35:c3:b1:49:c7:c7:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:30:F5:BD:AA:21:64:6F:E0:B4:FA:4D:97:E7:BB:0E:FC:DE:79:09
X509v3 Authority Key Identifier:
keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/vzD1vaohZG_gtPpNl-e7DvzeeQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:54:04:56:fd:a5:2d:fa:71:43:aa:14:aa:f4:f2:30:30:9e:
aa:58:b8:dc:34:d8:fb:66:bc:c5:24:a6:82:b5:61:c4:21:b8:
30:22:88:56:da:23:ce:57:bd:81:c8:6d:ed:2b:0a:8d:4f:df:
e0:94:3e:38:91:e7:da:ab:15:a6:41:94:1b:ac:2e:85:83:2b:
51:96:0c:77:e1:e3:a3:5e:8c:5c:4a:c6:fd:a7:7c:b6:e0:3a:
cf:71:b4:c2:70:20:7e:12:8e:4f:0a:8b:28:15:f8:5e:fb:5c:
ba:65:20:88:dc:25:96:90:bd:e6:b6:2e:70:99:bc:9f:ce:1a:
92:91:76:ae:ce:65:79:3c:69:e3:a6:fd:fc:a5:57:70:b1:0c:
21:47:5f:33:1b:89:23:47:31:48:b1:69:05:59:15:9b:e8:18:
38:7a:ee:3c:58:c8:77:a8:ea:8b:d4:44:5e:cc:b5:2f:af:9d:
12:6f:46:4c:48:12:0e:0f:33:55:4f:3c:71:37:49:29:b8:e3:
2e:4d:cc:2a:0b:87:c9:ae:e8:1f:e8:54:b1:31:ad:65:4a:07:
93:3a:66:2a:a2:b3:3b:87:63:3f:af:df:78:aa:ff:1f:1c:36:
2c:e0:61:2d:09:4d:6e:0e:8e:ab:30:51:7d:45:ef:c8:11:a0:
da:4b:51:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3DqnK1CGyRpn7pvZkVLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ODhlZjM3M2Y4ZjAwZTAxYzI1Y2Y5MjRiNGYyZThlYzZh
MjE5ZDEwHhcNMjQwMTAxMTYyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjMwZjViZGFhMjE2NDZmZTBiNGZhNGQ5N2U3YmIwZWZjZGU3OTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpUIZHoLRJWi5m6wEYHMhh9n+0hZ
sLNSTA2VL13Ku6aHq3TyKNzlmz1zByFASyH+U93X0z4oz8J7BTESVxsNF1TXhNMD
BGvIOaJeoMKU/EiBXai6ahQXi2yw0X0ITncX4aft+khNr9PrfZKZTnOEH3DadKzj
nh9opHqCB55QIf+5iWztmufJVLFdepUBp94eeMEx+gQqgooW396cPEbNjpRJ6eFV
sq0zvZGzHkcetcgZFe33YbgC8mDhDiU6nbcC1yeNm6LYnSb4+JRXX/za5g8UcFl8
kV8Gj+0slRyBdLjZG5KPHkAkKpexJ8Maes0nbWa6kNqq2s01w7FJx8c2ZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL8w9b2qIWRv4LT6TZfnuw783nkJMB8GA1UdIwQY
MBaAFCaI7zc/jwDgHCXPkktPLo7GohnRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNmYzMzktODQ1NS00ZGI0LWE2NTAt
N2Y3OGEzYmFhN2MxLzEvdnpEMXZhb2haR19ndFBwTmwtZTdEdnplZVFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNmYzMzktODQ1NS00ZGI0LWE2NTAtN2Y3OGEzYmFhN2Mx
LzEvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH8x8MA0G
CSqGSIb3DQEBCwUAA4IBAQArVARW/aUt+nFDqhSq9PIwMJ6qWLjcNNj7ZrzFJKaC
tWHEIbgwIohW2iPOV72ByG3tKwqNT9/glD44kefaqxWmQZQbrC6FgytRlgx34eOj
XoxcSsb9p3y24DrPcbTCcCB+Eo5PCosoFfhe+1y6ZSCI3CWWkL3mti5wmbyfzhqS
kXauzmV5PGnjpv38pVdwsQwhR18zG4kjRzFIsWkFWRWb6Bg4eu48WMh3qOqL1ERe
zLUvr50Sb0ZMSBIODzNVTzxxN0kpuOMuTcwqC4fJrugf6FSxMa1lSgeTOmYqorM7
h2M/r994qv8fHDYs4GEtCU1uDo6rMFF9Re/IEaDaS1F9
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:37 2025 by rpki-client