Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/b1RS1kerzsylyCeau3ptL-A8oPI.roa
File: b1RS1kerzsylyCeau3ptL-A8oPI.roa (raw, json)
Hash identifier: 1pBNjZmd0hOmGkWqC84P7NFfAmNPBofCwxPysfNcZ+I=
Subject key identifier: 6F:54:52:D6:47:AB:CE:CC:A5:C8:27:9A:BB:7A:6D:2F:E0:3C:A0:F2
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018B708266F082BBCACBA52E28BDAB5B4D30
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/b1RS1kerzsylyCeau3ptL-A8oPI.roa
Signing time: Fri 27 Oct 2023 09:41:16 +0000
ROA not before: Fri 27 Oct 2023 09:41:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216146
IP address blocks: 31.210.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:82:66:f0:82:bb:ca:cb:a5:2e:28:bd:ab:5b:4d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Oct 27 09:41:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f5452d647abcecca5c8279abb7a6d2fe03ca0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:85:22:ea:a6:2e:88:f7:2b:1a:cc:b8:68:d8:
cf:ff:ee:10:7a:dd:b7:93:2d:96:a1:36:da:5d:1a:
01:58:18:8d:3c:bd:6d:9b:a9:95:da:6a:8d:5d:0a:
d9:c1:08:3b:8e:89:6b:e4:6a:b3:6a:d7:7f:78:e8:
bf:19:73:bf:eb:60:40:b7:ca:03:77:08:3c:ae:0a:
61:8e:2f:1d:dd:ce:d6:b3:78:0b:d9:63:77:14:d4:
93:6a:57:cd:2d:67:52:52:2c:36:bf:3d:60:b3:2e:
d3:31:77:0f:47:64:5a:b4:14:ec:1e:7f:64:16:f9:
fd:7a:b5:2c:9e:3b:00:e4:76:2a:b5:22:46:85:9a:
e0:ce:fa:86:60:7d:fb:ed:21:86:dd:2c:27:32:c0:
6f:97:ce:ff:fc:e4:e2:11:de:a9:4a:6b:0d:fd:6c:
ef:ec:c3:4b:c1:11:61:90:cb:cb:a7:8f:f8:52:a4:
23:b0:d2:b4:1b:b3:58:8f:9c:11:0e:09:86:71:31:
65:af:dd:92:66:3b:9c:cd:8c:5c:f5:4c:71:48:ca:
f9:ea:fd:e9:94:79:37:bb:77:af:6d:a5:48:db:4d:
c9:9b:7d:72:7c:17:80:82:88:2e:72:74:59:7f:1a:
66:9b:2e:0a:d3:5e:a3:d8:20:99:f6:bd:97:c3:ad:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:54:52:D6:47:AB:CE:CC:A5:C8:27:9A:BB:7A:6D:2F:E0:3C:A0:F2
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/b1RS1kerzsylyCeau3ptL-A8oPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.41.0/24
Signature Algorithm: sha256WithRSAEncryption
50:99:63:3e:36:63:db:f0:b8:26:09:11:bd:64:d9:5c:06:d3:
2f:f4:47:e1:a5:95:a2:d5:e3:5a:3f:21:70:fb:51:17:8a:18:
aa:08:9f:86:f4:e4:b8:5d:55:fd:c6:5c:9e:6e:7f:ba:b2:19:
ba:fb:7f:55:53:2e:ea:d4:03:db:17:a4:4e:14:a8:65:c3:b8:
0e:b2:66:b1:f1:f4:12:d9:ae:1c:8c:e8:ea:8d:b3:cb:33:99:
e9:9f:53:7d:94:a5:67:97:7f:a3:a7:d8:0a:f6:fa:8a:e9:07:
7c:7f:ed:4f:d2:ce:38:5e:1d:b1:95:6f:d0:c1:66:e1:c4:4f:
dd:66:f4:92:9a:6a:07:24:28:79:4c:0c:3b:ba:5a:b2:00:aa:
22:41:85:22:de:ab:18:f5:1d:e8:74:81:04:42:83:4f:27:f3:
a9:ed:8e:7e:4d:c7:8f:b5:8f:a5:1b:93:9e:6a:f7:32:69:97:
f9:67:da:40:89:73:78:c3:94:21:8c:eb:a9:53:e1:d5:32:37:
b8:39:6e:cb:d5:7e:ab:f7:3b:13:d7:e3:9c:0e:55:ea:7f:75:
76:40:36:50:a1:ea:18:36:65:6e:0e:7b:84:45:a4:04:cf:dd:
fe:1f:58:05:1b:3b:2a:d5:9d:71:1a:ab:c8:fa:05:24:1a:2c:
ba:9a:f9:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtwgmbwgrvKy6UuKL2rW00wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTJiOGU5MGQxNTdlYTAyMmY4ZTcwMDAyNGE5M2RjMzU2
YTUxNGQwHhcNMjMxMDI3MDk0MTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjU0NTJkNjQ3YWJjZWNjYTVjODI3OWFiYjdhNmQyZmUwM2NhMGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Ui6qYuiPcrGsy4aNjP/+4Qet23
ky2WoTbaXRoBWBiNPL1tm6mV2mqNXQrZwQg7jolr5Gqzatd/eOi/GXO/62BAt8oD
dwg8rgphji8d3c7Ws3gL2WN3FNSTalfNLWdSUiw2vz1gsy7TMXcPR2RatBTsHn9k
Fvn9erUsnjsA5HYqtSJGhZrgzvqGYH377SGG3SwnMsBvl87//OTiEd6pSmsN/Wzv
7MNLwRFhkMvLp4/4UqQjsNK0G7NYj5wRDgmGcTFlr92SZjuczYxc9UxxSMr56v3p
lHk3u3evbaVI203Jm31yfBeAgogucnRZfxpmmy4K016j2CCZ9r2Xw60ezwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG9UUtZHq87Mpcgnmrt6bS/gPKDyMB8GA1UdIwQY
MBaAFOSiuOkNFX6gIvjnAAJKk9w1alFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTct
ZGY0YTJlNzYwY2NiLzEvYjFSUzFrZXJ6c3lseUNlYXUzcHRMLUE4b1BJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTctZGY0YTJlNzYwY2Ni
LzEvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9IpMA0G
CSqGSIb3DQEBCwUAA4IBAQBQmWM+NmPb8LgmCRG9ZNlcBtMv9EfhpZWi1eNaPyFw
+1EXihiqCJ+G9OS4XVX9xlyebn+6shm6+39VUy7q1APbF6ROFKhlw7gOsmax8fQS
2a4cjOjqjbPLM5npn1N9lKVnl3+jp9gK9vqK6Qd8f+1P0s44Xh2xlW/QwWbhxE/d
ZvSSmmoHJCh5TAw7ulqyAKoiQYUi3qsY9R3odIEEQoNPJ/Op7Y5+TcePtY+lG5Oe
avcyaZf5Z9pAiXN4w5QhjOupU+HVMje4OW7L1X6r9zsT1+OcDlXqf3V2QDZQoeoY
NmVuDnuERaQEz93+H1gFGzsq1Z1xGqvI+gUkGiy6mvk1
-----END CERTIFICATE-----
Generated at Wed Dec 6 15:09:13 2023 by rpki-client on console-fra.rpki-client.org