Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/iLC6lw_oyGHEhOu9zM548d3i1Tw.roa
File: iLC6lw_oyGHEhOu9zM548d3i1Tw.roa (raw, json)
Hash identifier: 7OQ2nYQYw5tjdZfIHfDU3NZ8XvUdk1hfR52LQDEcfkE=
Subject key identifier: 88:B0:BA:97:0F:E8:C8:61:C4:84:EB:BD:CC:CE:78:F1:DD:E2:D5:3C
Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial: 018798EC67B025E6A81B87CFA04835AF6A38
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/iLC6lw_oyGHEhOu9zM548d3i1Tw.roa
Signing time: Wed 19 Apr 2023 09:50:42 +0000
ROA not before: Wed 19 Apr 2023 09:50:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15497
IP address blocks: 62.149.15.0/24 maxlen: 24
31.28.164.0/22 maxlen: 22
31.28.160.0/22 maxlen: 22
31.28.169.0/24 maxlen: 24
31.28.172.0/22 maxlen: 22
31.28.168.0/22 maxlen: 22
31.28.176.0/22 maxlen: 22
62.149.31.0/24 maxlen: 24
31.28.184.0/22 maxlen: 22
31.28.180.0/22 maxlen: 22
31.28.191.0/24 maxlen: 24
31.28.188.0/24 maxlen: 24
62.149.2.0/24 maxlen: 24
62.149.0.0/19 maxlen: 19
62.149.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:ec:67:b0:25:e6:a8:1b:87:cf:a0:48:35:af:6a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Validity
Not Before: Apr 19 09:50:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88b0ba970fe8c861c484ebbdccce78f1dde2d53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d2:f5:2a:c7:f6:ca:0f:68:9a:95:90:60:fd:
60:96:01:51:70:f3:1d:d8:9e:26:6d:f9:c9:36:ea:
d6:07:bc:50:14:bc:57:3f:3e:bf:18:cc:c2:2e:28:
ae:01:3b:54:94:7d:74:72:7e:c7:53:f4:66:04:ec:
f4:ff:98:10:37:98:aa:73:b9:d1:55:a8:f5:af:d7:
03:a7:01:b6:42:03:f4:7c:b8:60:85:e8:d6:10:ec:
58:a2:08:a6:87:20:1f:2a:98:0c:14:23:9f:8e:5d:
c8:11:cd:20:8f:d1:01:d7:28:f8:9c:ab:65:dc:f2:
93:07:ba:d6:8b:de:d1:3a:30:83:fc:df:87:aa:f4:
c8:27:8b:0f:ca:63:23:04:c9:93:71:d3:e4:09:8f:
10:91:d7:a1:e0:74:9c:39:ee:ee:74:93:ae:7c:d0:
25:ca:dc:2f:59:fa:21:24:2d:f4:bf:c2:57:1e:52:
e4:83:ba:f8:ad:2c:a1:3c:e7:52:4e:04:e4:fe:d8:
24:cd:64:39:c8:d7:69:85:a4:a8:a3:64:78:99:59:
ac:ea:e5:86:7e:0e:f6:19:f5:d2:12:32:21:3e:de:
bf:2f:b9:44:84:f7:b4:06:6f:44:8b:9b:f6:1d:b7:
a3:00:10:92:7e:7b:e2:4e:c5:54:5e:33:8a:64:2c:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B0:BA:97:0F:E8:C8:61:C4:84:EB:BD:CC:CE:78:F1:DD:E2:D5:3C
X509v3 Authority Key Identifier:
keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/iLC6lw_oyGHEhOu9zM548d3i1Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.160.0-31.28.188.255
31.28.191.0/24
62.149.0.0/19
Signature Algorithm: sha256WithRSAEncryption
34:c2:2a:39:2c:08:8a:4c:52:d8:67:92:5b:6f:3f:18:6d:a9:
6c:ae:39:54:d2:06:9f:d0:d0:7d:89:0a:d7:ff:ec:a0:79:b7:
3b:ae:79:ed:62:55:7d:e1:89:a9:44:53:c6:39:01:aa:f6:f4:
0e:8d:b4:f4:71:aa:8a:8d:2c:69:98:53:e4:a1:41:d6:bc:62:
cf:a7:54:aa:b7:77:68:97:81:81:ab:4b:89:50:64:7c:37:10:
14:01:c8:ea:54:b1:1a:59:f3:e4:11:8b:3e:23:c6:c6:a5:d9:
c4:26:0e:71:6f:68:e1:7d:7e:61:69:f9:9b:29:2a:24:e2:a3:
c6:f7:c6:cb:93:b9:2a:1f:24:b9:25:be:aa:d5:84:5e:da:8f:
d8:a8:2a:54:27:78:8c:1d:c0:c2:ac:b1:dd:90:ff:3d:38:1e:
9e:30:06:8a:05:22:3e:82:58:13:d6:84:10:57:c5:f7:44:52:
c8:b5:84:41:41:c4:73:15:cb:27:cc:88:bf:fa:89:e6:14:7c:
9c:3b:05:2b:53:28:de:af:e1:19:7e:43:7c:77:15:c5:08:f3:
9e:2b:43:02:07:55:5a:f0:f7:fa:29:e4:1b:01:fd:f6:26:e6:
e5:cd:00:5a:4e:c5:be:df:50:cf:42:2f:5b:b9:1f:e4:f2:2c:
ae:61:c2:06
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYeY7GewJeaoG4fPoEg1r2o4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjhlYjM2NmZjNmM4YTA5YmZiMTQwZjE1MDVmOWVjNjc1
ZDQyZTQwHhcNMjMwNDE5MDk1MDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGIwYmE5NzBmZThjODYxYzQ4NGViYmRjY2NlNzhmMWRkZTJkNTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9L1Ksf2yg9ompWQYP1glgFRcPMd
2J4mbfnJNurWB7xQFLxXPz6/GMzCLiiuATtUlH10cn7HU/RmBOz0/5gQN5iqc7nR
Vaj1r9cDpwG2QgP0fLhghejWEOxYogimhyAfKpgMFCOfjl3IEc0gj9EB1yj4nKtl
3PKTB7rWi97ROjCD/N+HqvTIJ4sPymMjBMmTcdPkCY8Qkdeh4HScOe7udJOufNAl
ytwvWfohJC30v8JXHlLkg7r4rSyhPOdSTgTk/tgkzWQ5yNdphaSoo2R4mVms6uWG
fg72GfXSEjIhPt6/L7lEhPe0Bm9Ei5v2HbejABCSfnviTsVUXjOKZCxM3QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFIiwupcP6MhhxITrvczOePHd4tU8MB8GA1UdIwQY
MBaAFGn46zZvxsigm/sUDxUF+exnXULkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZqck5tX0d5S0NiLXhRUEZRWDU3R2RkUXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZGFkOGMtOWVkMy00ZjAxLWIxMDct
NzQ4NmMwNTgyZjJhLzEvaUxDNmx3X295R0hFaE91OXpNNTQ4ZDNpMVR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mZGFkOGMtOWVkMy00ZjAxLWIxMDctNzQ4NmMwNTgyZjJh
LzEvYWZqck5tX0d5S0NiLXhRUEZRWDU3R2RkUXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAUfHKAD
BAAfHLwDBAAfHL8DBAU+lQAwDQYJKoZIhvcNAQELBQADggEBADTCKjksCIpMUthn
kltvPxhtqWyuOVTSBp/Q0H2JCtf/7KB5tzuuee1iVX3hialEU8Y5Aar29A6NtPRx
qoqNLGmYU+ShQda8Ys+nVKq3d2iXgYGrS4lQZHw3EBQByOpUsRpZ8+QRiz4jxsal
2cQmDnFvaOF9fmFp+ZspKiTio8b3xsuTuSofJLklvqrVhF7aj9ioKlQneIwdwMKs
sd2Q/z04Hp4wBooFIj6CWBPWhBBXxfdEUsi1hEFBxHMVyyfMiL/6ieYUfJw7BStT
KN6v4Rl+Q3x3FcUI854rQwIHVVrw9/op5BsB/fYm5uXNAFpOxb7fUM9CL1u5H+Ty
LK5hwgY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:43 2023 by rpki-client on console-fra.rpki-client.org