Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/t761xjDsF3-t2SjIYGyeW9nX5wg.roa
File: t761xjDsF3-t2SjIYGyeW9nX5wg.roa (raw, json)
Hash identifier: Ld06RyRnGnWSpe1ZXbrqMQcfzj7GPZ0LZp3L4+3zLxo=
Subject key identifier: B7:BE:B5:C6:30:EC:17:7F:AD:D9:28:C8:60:6C:9E:5B:D9:D7:E7:08
Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial: 01856B81030B7A41317EC7EE4C5B9BF468EF
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/t761xjDsF3-t2SjIYGyeW9nX5wg.roa
Signing time: Sun 01 Jan 2023 04:04:55 +0000
ROA not before: Sun 01 Jan 2023 04:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6712
IP address blocks: 31.202.192.0/18 maxlen: 24
46.160.64.0/20 maxlen: 24
91.250.0.0/19 maxlen: 24
46.160.80.0/21 maxlen: 24
46.160.96.0/19 maxlen: 24
91.250.32.0/19 maxlen: 24
2a00:1210:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Apr 2023 20:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:03:0b:7a:41:31:7e:c7:ee:4c:5b:9b:f4:68:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Validity
Not Before: Jan 1 04:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7beb5c630ec177fadd928c8606c9e5bd9d7e708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:e5:57:db:ba:0b:04:77:8e:4d:1c:d8:fc:
01:06:8a:0e:2e:5e:0c:fe:3f:3c:b7:49:79:df:0f:
12:ad:32:86:45:b8:ed:de:bd:5a:64:e1:6c:5b:77:
57:91:12:3d:1e:9e:94:20:12:30:c4:27:92:53:f2:
0d:9b:02:70:5e:63:b6:80:2f:0b:c2:86:0d:24:52:
50:c6:52:f1:ae:4d:1f:d4:a8:05:e1:0e:1f:d8:16:
c5:f8:2d:9e:5f:47:0c:c2:9e:da:9c:74:9b:22:45:
64:15:87:c8:11:ea:f3:0d:10:93:a0:5f:ad:aa:05:
91:74:1c:4e:de:b5:8f:0f:13:cb:90:61:e6:b6:95:
9d:4b:59:3c:32:48:bf:22:4d:69:be:14:28:49:83:
7a:1c:68:34:4c:9c:ea:18:a2:4e:13:f1:18:95:0c:
0e:9a:5c:6d:6a:fb:1a:9a:a7:30:70:f4:9a:8b:3c:
e8:a8:f6:96:3e:5b:fa:ba:d7:c8:b6:cb:3e:57:35:
df:8e:cc:91:bc:c2:46:ba:eb:41:7f:ac:c7:a5:e7:
27:aa:34:4d:ef:9a:52:d5:ef:42:99:12:1c:2a:2c:
2d:ab:08:9b:35:f8:09:82:a7:23:69:b8:fe:24:e2:
00:a1:d5:c6:03:3a:f5:c3:6e:57:b5:cf:02:ae:71:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:B5:C6:30:EC:17:7F:AD:D9:28:C8:60:6C:9E:5B:D9:D7:E7:08
X509v3 Authority Key Identifier:
keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/t761xjDsF3-t2SjIYGyeW9nX5wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.202.192.0/18
46.160.64.0-46.160.87.255
46.160.96.0/19
91.250.0.0/18
IPv6:
2a00:1210:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
49:90:0c:2d:70:7e:5a:0a:c1:6d:91:68:1e:8e:a3:a1:c1:f8:
35:d3:5f:3d:76:a0:01:28:7e:ee:33:a8:77:66:e3:86:9e:b0:
fe:25:fa:a5:9a:e4:19:9f:3e:69:2d:b0:82:36:be:e8:c3:bc:
f4:56:a5:2d:d3:89:c2:e7:40:28:9d:90:87:22:cc:ca:7f:fa:
33:4d:36:bd:a9:ff:ef:f5:cc:0a:46:e9:81:dd:48:35:ea:49:
d1:57:a6:ee:07:84:b7:af:be:46:47:96:c9:26:5d:b8:93:9f:
3f:47:c1:87:2b:f2:15:0b:6b:e1:7a:85:3e:aa:6a:2e:30:da:
cd:cb:5d:17:a7:bc:2f:22:0e:e5:b8:28:33:b6:a5:cf:bd:8f:
c9:80:cd:a5:46:75:fa:49:f9:f6:c6:6c:0a:cd:9f:79:f2:95:
47:f1:c3:0e:13:59:fa:b5:b9:de:a6:db:28:d6:00:cb:ec:80:
3f:b9:2f:cf:43:84:4f:67:d5:e1:db:87:c4:4e:69:b2:65:39:
cb:93:da:bf:1a:65:7b:1b:f3:5f:92:43:81:8b:2f:7e:d1:2d:
1b:29:3d:6a:3c:77:de:2f:33:1a:c6:a6:14:4b:e0:cf:3e:e4:
ae:9d:7d:46:af:66:af:5f:2b:24:10:a7:e1:4e:fe:ea:bb:6c:
ef:60:20:08
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAYVrgQMLekExfsfuTFub9GjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlN2E5YjE3NDVhNWE3MGMzYmY3YmNjMmMyZWUxNjY0NjBh
ZmY3YTgwHhcNMjMwMTAxMDQwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2JlYjVjNjMwZWMxNzdmYWRkOTI4Yzg2MDZjOWU1YmQ5ZDdlNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ3lV9u6CwR3jk0c2PwBBooOLl4M
/j88t0l53w8SrTKGRbjt3r1aZOFsW3dXkRI9Hp6UIBIwxCeSU/INmwJwXmO2gC8L
woYNJFJQxlLxrk0f1KgF4Q4f2BbF+C2eX0cMwp7anHSbIkVkFYfIEerzDRCToF+t
qgWRdBxO3rWPDxPLkGHmtpWdS1k8Mki/Ik1pvhQoSYN6HGg0TJzqGKJOE/EYlQwO
mlxtavsamqcwcPSaizzoqPaWPlv6utfItss+VzXfjsyRvMJGuutBf6zHpecnqjRN
75pS1e9CmRIcKiwtqwibNfgJgqcjabj+JOIAodXGAzr1w25Xtc8CrnFxeQIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFLe+tcYw7Bd/rdkoyGBsnlvZ1+cIMB8GA1UdIwQY
MBaAFK56mxdFpacMO/e8wsLuFmRgr/eoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMt
Y2M5YTc1OGM5OTE2LzEvdDc2MXhqRHNGMy10MlNqSVlHeWVXOW5YNXdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMtY2M5YTc1OGM5OTE2
LzEvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAmBAIAATAgAwQGH8rAMAwD
BAYuoEADBAMuoFADBAUuoGADBAZb+gAwDwQCAAIwCQMHACoAEhD//zANBgkqhkiG
9w0BAQsFAAOCAQEASZAMLXB+WgrBbZFoHo6jocH4NdNfPXagASh+7jOod2bjhp6w
/iX6pZrkGZ8+aS2wgja+6MO89FalLdOJwudAKJ2QhyLMyn/6M002van/7/XMCkbp
gd1INepJ0Vem7geEt6++RkeWySZduJOfP0fBhyvyFQtr4XqFPqpqLjDazctdF6e8
LyIO5bgoM7alz72PyYDNpUZ1+kn59sZsCs2fefKVR/HDDhNZ+rW53qbbKNYAy+yA
P7kvz0OET2fV4duHxE5psmU5y5PavxplexvzX5JDgYsvftEtGyk9ajx33i8zGsam
FEvgzz7krp19Rq9mr18rJBCn4U7+6rts72AgCA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:49 2024 by rpki-client on console-fra.rpki-client.org