Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/Fqwuo0kT-OJxQEtsUAInXEr75ao.roa
File: Fqwuo0kT-OJxQEtsUAInXEr75ao.roa (raw, json)
Hash identifier: r+ea+e0sy1X4A3cygqvAMr8qemMTo1xTyjkV5s2aR78=
Subject key identifier: 16:AC:2E:A3:49:13:F8:E2:71:40:4B:6C:50:02:27:5C:4A:FB:E5:AA
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 01856EAFAC3C1E87735AD1D7C12C617A6C4D
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/Fqwuo0kT-OJxQEtsUAInXEr75ao.roa
Signing time: Sun 01 Jan 2023 18:54:44 +0000
ROA not before: Sun 01 Jan 2023 18:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.31.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:ac:3c:1e:87:73:5a:d1:d7:c1:2c:61:7a:6c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Jan 1 18:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16ac2ea34913f8e271404b6c5002275c4afbe5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:9a:62:03:5d:45:f7:c7:f0:4f:e0:24:53:
1c:1a:87:79:80:0a:8b:68:47:92:cb:07:f2:07:e0:
99:ec:e1:5e:c2:43:07:cc:9f:c2:57:0d:a2:f2:3e:
17:2e:9a:fb:1c:0c:ac:3e:eb:e8:5f:df:1e:97:17:
e9:3e:c1:4e:30:8c:f0:46:a1:4e:d6:2f:d7:bb:75:
6a:11:ba:dd:59:4c:09:c5:95:10:b6:15:c8:d0:c2:
8b:41:30:e2:e5:c6:03:89:65:68:0a:e3:4f:f7:51:
bc:67:d8:6c:3a:14:ab:07:bb:dd:96:db:30:cb:59:
08:c3:3c:ba:31:48:98:15:f6:cd:2a:cf:02:3c:f8:
dc:17:f5:4f:0d:f0:c1:8d:4e:5a:d8:fb:a1:61:48:
00:2e:38:05:13:8d:33:a6:88:46:79:17:0f:74:8a:
fe:2f:64:3f:a3:1e:66:9a:9b:83:6a:60:0e:f8:00:
6d:c9:7e:3b:7f:bb:79:5b:05:23:be:de:32:72:aa:
b7:4a:fd:b0:05:8d:a9:08:86:ad:73:54:36:2f:df:
b0:3f:b6:53:3e:c8:a4:2c:8e:1f:e5:1e:57:13:a0:
0d:d5:1e:0f:c8:f2:03:03:d0:49:ef:70:c3:95:5a:
7c:9b:09:47:b5:f6:7f:dd:a6:3d:f3:41:2b:33:70:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AC:2E:A3:49:13:F8:E2:71:40:4B:6C:50:02:27:5C:4A:FB:E5:AA
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/Fqwuo0kT-OJxQEtsUAInXEr75ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.111.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1a:c7:20:37:97:3e:08:2e:f2:c1:1f:b9:ae:0e:9e:88:9e:
ea:e0:08:07:67:97:e3:a3:3a:29:e3:dc:38:ad:b1:af:7b:0d:
8d:70:58:b1:d8:c0:78:54:bc:54:b5:17:8b:99:ba:16:34:74:
c0:04:61:f7:53:88:60:cb:3f:b9:1b:6f:5a:42:d5:ec:64:57:
e9:39:40:c3:5f:16:76:01:a6:29:96:08:cd:f4:1e:9e:3b:43:
36:93:83:10:29:48:07:9b:4d:28:2c:9e:20:8d:05:dd:2d:82:
7e:a6:62:e9:9b:18:3b:ef:0f:5b:cc:8b:0e:1c:5f:27:e5:49:
83:ce:d7:5d:c2:8f:0d:04:2c:c2:4a:98:15:65:16:02:c7:35:
be:12:c5:0f:e7:2f:a1:67:90:bc:95:5e:f3:4c:d6:cf:db:0e:
0f:58:cd:97:12:fc:58:2a:09:74:d8:70:37:ec:76:cb:a6:dc:
86:85:b6:90:d7:7d:bb:c7:50:ea:07:3f:9b:8f:ca:c5:64:10:
57:f5:89:b9:78:1a:42:50:a1:85:87:e1:49:5d:e6:67:fe:5e:
c6:32:f9:fe:83:20:ac:e6:7e:9b:47:ef:dd:19:61:b1:92:d1:
23:48:99:c2:14:83:2a:d4:9e:5a:df:01:a1:86:98:f1:73:84:
86:60:7d:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVur6w8HodzWtHXwSxhemxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OGFkNTQ2ZjFhMGVmOGNmNzVjOTJhNzQ4YmQ1Yzg2MzYy
ZTIwOWIwHhcNMjMwMTAxMTg1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmFjMmVhMzQ5MTNmOGUyNzE0MDRiNmM1MDAyMjc1YzRhZmJlNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxyaYgNdRffH8E/gJFMcGod5gAqL
aEeSywfyB+CZ7OFewkMHzJ/CVw2i8j4XLpr7HAysPuvoX98elxfpPsFOMIzwRqFO
1i/Xu3VqEbrdWUwJxZUQthXI0MKLQTDi5cYDiWVoCuNP91G8Z9hsOhSrB7vdltsw
y1kIwzy6MUiYFfbNKs8CPPjcF/VPDfDBjU5a2PuhYUgALjgFE40zpohGeRcPdIr+
L2Q/ox5mmpuDamAO+ABtyX47f7t5WwUjvt4ycqq3Sv2wBY2pCIatc1Q2L9+wP7ZT
PsikLI4f5R5XE6AN1R4PyPIDA9BJ73DDlVp8mwlHtfZ/3aY980ErM3Ds2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBasLqNJE/jicUBLbFACJ1xK++WqMB8GA1UdIwQY
MBaAFKiK1UbxoO+M91ySp0i9XIY2LiCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDBhOGMtNmEyZC00MzRiLTk2ZjEt
MThlYjc3OWE2NDk3LzEvRnF3dW8wa1QtT0p4UUV0c1VBSW5YRXI3NWFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MDBhOGMtNmEyZC00MzRiLTk2ZjEtMThlYjc3OWE2NDk3
LzEvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR9vMA0G
CSqGSIb3DQEBCwUAA4IBAQBBGscgN5c+CC7ywR+5rg6eiJ7q4AgHZ5fjozop49w4
rbGvew2NcFix2MB4VLxUtReLmboWNHTABGH3U4hgyz+5G29aQtXsZFfpOUDDXxZ2
AaYplgjN9B6eO0M2k4MQKUgHm00oLJ4gjQXdLYJ+pmLpmxg77w9bzIsOHF8n5UmD
ztddwo8NBCzCSpgVZRYCxzW+EsUP5y+hZ5C8lV7zTNbP2w4PWM2XEvxYKgl02HA3
7HbLptyGhbaQ1327x1DqBz+bj8rFZBBX9Ym5eBpCUKGFh+FJXeZn/l7GMvn+gyCs
5n6bR+/dGWGxktEjSJnCFIMq1J5a3wGhhpjxc4SGYH0c
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:20 2024 by rpki-client on console-ams.rpki-client.org