Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/zRcPw-erpN1Z76CaLasROpfBhiw.roa
File: zRcPw-erpN1Z76CaLasROpfBhiw.roa (raw, json)
Hash identifier: 6lBJfsH6sWKlhLX0XisBF9pbWQkkuwKYdf0yg6fwqIk=
Subject key identifier: CD:17:0F:C3:E7:AB:A4:DD:59:EF:A0:9A:2D:AB:11:3A:97:C1:86:2C
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 01864130E4A1D81DC5D8196B2A1DFA246448
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/zRcPw-erpN1Z76CaLasROpfBhiw.roa
Signing time: Sat 11 Feb 2023 15:56:08 +0000
ROA not before: Sat 11 Feb 2023 15:56:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 31.14.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:41:30:e4:a1:d8:1d:c5:d8:19:6b:2a:1d:fa:24:64:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Feb 11 15:56:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd170fc3e7aba4dd59efa09a2dab113a97c1862c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:cb:9f:72:ac:2d:3d:4e:a4:c7:60:d4:46:
60:95:8d:e1:ac:71:84:95:c3:9d:cc:94:72:20:41:
b7:24:91:83:4d:55:dc:c1:37:e5:14:8b:62:54:91:
88:22:76:19:77:e6:51:9f:8e:da:24:02:80:a4:30:
5e:41:38:09:6d:5a:68:1b:b6:84:2b:1f:66:a3:c5:
d1:07:3a:df:f3:ba:14:bb:e9:00:f1:5d:3e:8d:fb:
08:40:d3:5a:49:01:a9:5f:88:91:17:02:33:8a:b8:
b3:25:b2:54:2c:dd:d6:db:24:2b:89:b8:a0:4b:7e:
f1:95:a8:b9:17:41:fb:23:14:23:b6:37:03:cb:ea:
79:34:2c:77:14:69:89:fd:30:fd:a0:7a:c9:bb:86:
54:f1:10:7c:a2:d3:dd:ee:15:df:a5:d7:91:28:dd:
ee:a1:dd:4c:eb:ca:a9:79:67:8b:da:8b:7e:56:0f:
2d:3f:cf:2d:11:9e:ad:4f:15:b4:e3:00:96:52:da:
42:26:d5:a8:fc:7e:4f:92:71:ab:d0:f9:cb:b8:34:
8a:61:bb:e9:77:80:dc:87:06:29:fd:93:b6:07:e9:
f1:cb:b7:a0:66:6e:19:5f:a0:e7:85:1b:21:f1:e4:
2b:54:71:50:58:3d:44:9b:a6:4f:02:c1:08:18:ed:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:17:0F:C3:E7:AB:A4:DD:59:EF:A0:9A:2D:AB:11:3A:97:C1:86:2C
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/zRcPw-erpN1Z76CaLasROpfBhiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.37.0/24
Signature Algorithm: sha256WithRSAEncryption
66:46:bb:9c:c8:1b:20:b1:28:82:5c:29:8d:b4:b0:21:96:3b:
56:c8:f3:51:ea:e8:25:dc:92:c3:9f:f0:33:e9:25:45:04:6d:
8a:39:66:dc:25:69:f6:67:c8:c9:1d:c2:80:8c:da:8c:6f:2c:
e2:ae:26:3f:4b:94:3e:a1:50:33:4e:3a:de:3d:62:c3:0c:2d:
ed:ef:3d:f5:78:19:5b:4d:cb:bd:d9:bc:e3:f3:86:67:37:c7:
91:6c:3c:62:7b:be:54:48:1f:01:bd:73:3a:e3:dd:85:85:12:
1f:e3:11:f6:9b:ba:8a:18:c5:10:69:83:74:d8:c1:1f:f0:11:
2c:6d:18:d7:61:66:87:b1:ed:25:09:15:a3:c3:b5:05:7e:02:
c5:a1:6f:65:1e:78:0c:30:55:77:e9:1b:12:1d:1e:2d:d6:e3:
be:72:78:8a:f5:47:ee:7c:ef:2d:95:07:82:3e:89:14:c2:d7:
01:5c:9b:b0:2e:97:b7:5d:16:72:4a:c4:6c:da:e4:40:d5:80:
5e:f0:23:24:e9:d2:f0:ba:f0:86:39:67:da:47:f2:d8:6f:d6:
ed:ca:97:ca:87:99:c8:cd:5c:94:cf:63:df:6a:0f:30:31:92:
b4:e1:6a:98:e7:bf:89:4c:db:4b:5a:8f:b9:3d:cc:bc:8c:e0:
bc:d7:97:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZBMOSh2B3F2BlrKh36JGRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjMwMjExMTU1NjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDE3MGZjM2U3YWJhNGRkNTllZmEwOWEyZGFiMTEzYTk3YzE4NjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh/Ln3KsLT1OpMdg1EZglY3hrHGE
lcOdzJRyIEG3JJGDTVXcwTflFItiVJGIInYZd+ZRn47aJAKApDBeQTgJbVpoG7aE
Kx9mo8XRBzrf87oUu+kA8V0+jfsIQNNaSQGpX4iRFwIzirizJbJULN3W2yQribig
S37xlai5F0H7IxQjtjcDy+p5NCx3FGmJ/TD9oHrJu4ZU8RB8otPd7hXfpdeRKN3u
od1M68qpeWeL2ot+Vg8tP88tEZ6tTxW04wCWUtpCJtWo/H5PknGr0PnLuDSKYbvp
d4DchwYp/ZO2B+nxy7egZm4ZX6DnhRsh8eQrVHFQWD1Em6ZPAsEIGO2vqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM0XD8Pnq6TdWe+gmi2rETqXwYYsMB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvelJjUHctZXJwTjFaNzZDYUxhc1JPcGZCaGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHw4lMA0G
CSqGSIb3DQEBCwUAA4IBAQBmRrucyBsgsSiCXCmNtLAhljtWyPNR6ugl3JLDn/Az
6SVFBG2KOWbcJWn2Z8jJHcKAjNqMbyziriY/S5Q+oVAzTjrePWLDDC3t7z31eBlb
Tcu92bzj84ZnN8eRbDxie75USB8BvXM6492FhRIf4xH2m7qKGMUQaYN02MEf8BEs
bRjXYWaHse0lCRWjw7UFfgLFoW9lHngMMFV36RsSHR4t1uO+cniK9UfufO8tlQeC
PokUwtcBXJuwLpe3XRZySsRs2uRA1YBe8CMk6dLwuvCGOWfaR/LYb9btypfKh5nI
zVyUz2Pfag8wMZK04WqY57+JTNtLWo+5Pcy8jOC815cJ
-----END CERTIFICATE-----
Generated at Wed Sep 13 10:50:12 2023 by rpki-client on console-fra.rpki-client.org