Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/YMp5P6Li-BHkIoj5P-F1Gk0TG2A.roa
File: YMp5P6Li-BHkIoj5P-F1Gk0TG2A.roa (raw, json)
Hash identifier: b8llpMRPAwcrzkMG9G5FbXVgAUX6C4r/LV4vWW7rZt0=
Subject key identifier: 60:CA:79:3F:A2:E2:F8:11:E4:22:88:F9:3F:E1:75:1A:4D:13:1B:60
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 018CC7269D2AD318360EFA75E776A70808F7
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/YMp5P6Li-BHkIoj5P-F1Gk0TG2A.roa
Signing time: Mon 01 Jan 2024 22:30:45 +0000
ROA not before: Mon 01 Jan 2024 22:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59595
IP address blocks: 31.135.184.0/22 maxlen: 22
31.135.191.0/24 maxlen: 24
31.135.188.0/23 maxlen: 23
31.135.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:9d:2a:d3:18:36:0e:fa:75:e7:76:a7:08:08:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Jan 1 22:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60ca793fa2e2f811e42288f93fe1751a4d131b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:f1:3e:77:01:d4:6a:23:dd:5a:e6:22:e0:
9a:e0:ce:cc:dc:9f:e7:ec:af:fe:db:a0:81:58:9b:
02:57:d6:f9:7c:c2:99:d8:48:e2:db:e4:77:19:e4:
ea:80:a7:b7:1b:a8:43:60:23:ad:0a:c4:6f:77:6d:
1d:25:ed:51:ae:7b:bb:9a:08:4c:ec:33:11:73:09:
30:d8:ee:61:27:4d:46:5e:b7:18:cc:18:d3:ae:60:
a0:0c:61:0b:b4:b0:3f:e5:b9:92:07:f7:b9:3e:01:
b6:8f:2c:37:52:aa:e0:ce:70:f7:e0:ba:90:88:2f:
e6:0a:12:3b:16:80:b3:ef:89:62:08:08:51:40:03:
f5:71:98:3f:3a:d5:24:82:7d:21:23:96:27:ae:17:
4c:ae:c8:4a:90:7f:35:df:c8:19:83:1e:6a:b6:27:
f5:f8:9b:e0:5c:17:03:29:e5:14:f2:41:74:8f:d5:
7a:59:b3:b4:08:2d:38:0c:33:c6:2d:11:8d:16:f5:
f7:ca:5b:6a:85:59:8e:c3:f4:9b:5a:c6:25:22:c2:
38:22:19:54:fd:d2:53:7c:24:b9:c3:22:e0:5b:d8:
f1:64:af:e7:f9:7c:5d:97:77:ae:43:07:1e:76:68:
7a:6b:2b:11:18:aa:41:02:4b:74:8b:b1:c6:92:69:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CA:79:3F:A2:E2:F8:11:E4:22:88:F9:3F:E1:75:1A:4D:13:1B:60
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/YMp5P6Li-BHkIoj5P-F1Gk0TG2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.184.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:d8:18:65:c2:2c:0b:a6:e0:ed:5c:0e:d4:fb:40:89:5b:41:
0c:d1:db:e8:e2:c1:71:34:a0:59:38:63:45:f6:7c:2d:65:20:
9d:9f:7b:4f:9d:a7:d1:40:62:e7:10:91:ed:b6:6c:4b:37:73:
f5:f8:e6:70:fa:c5:77:c3:8b:15:ac:b9:89:08:62:84:a2:e7:
3a:94:bd:3b:40:3e:9a:99:70:7b:14:52:ef:83:bd:c9:c2:54:
30:6c:98:1a:a9:df:4a:89:40:e0:e8:2e:bb:ef:a4:46:44:12:
6c:8a:5c:7c:1e:46:57:db:e4:8e:ae:71:21:b7:61:50:0d:47:
37:a7:38:41:54:3b:76:17:30:cb:6a:a4:dd:59:5a:80:cc:28:
e6:d4:14:cd:7f:a5:91:1c:02:e7:5c:64:e6:13:16:77:09:cb:
ec:26:2d:5f:43:bd:2f:59:7b:ca:0a:14:e8:e8:62:6f:61:e6:
ab:ea:2d:16:ec:e9:e5:4c:70:85:ce:81:55:5f:ad:20:d3:27:
b0:16:33:6c:d0:d0:b2:a8:36:ab:a8:56:09:a3:d4:12:2e:b9:
22:40:d1:b3:ea:25:d2:a2:6e:70:43:77:1d:92:75:17:f2:11:
cb:22:23:d2:6a:d2:46:fe:2f:04:0e:4e:49:16:26:44:0d:37:
65:73:1f:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJp0q0xg2Dvp153anCAj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWJiMTE2NmMwNjBkYjI1ZGY5NGYwMmJkMmY4ZjlkYTZj
NGRkNGIwHhcNMjQwMTAxMjIzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGNhNzkzZmEyZTJmODExZTQyMjg4ZjkzZmUxNzUxYTRkMTMxYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk63xPncB1Goj3VrmIuCa4M7M3J/n
7K/+26CBWJsCV9b5fMKZ2Eji2+R3GeTqgKe3G6hDYCOtCsRvd20dJe1Rrnu7mghM
7DMRcwkw2O5hJ01GXrcYzBjTrmCgDGELtLA/5bmSB/e5PgG2jyw3UqrgznD34LqQ
iC/mChI7FoCz74liCAhRQAP1cZg/OtUkgn0hI5YnrhdMrshKkH8138gZgx5qtif1
+JvgXBcDKeUU8kF0j9V6WbO0CC04DDPGLRGNFvX3yltqhVmOw/SbWsYlIsI4IhlU
/dJTfCS5wyLgW9jxZK/n+Xxdl3euQwcedmh6aysRGKpBAkt0i7HGkmkdqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGDKeT+i4vgR5CKI+T/hdRpNExtgMB8GA1UdIwQY
MBaAFNLrsRZsBg2yXflPAr0vj52mxN1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYt
ZWVkMWQwOTY3MDc4LzEvWU1wNVA2TGktQkhrSW9qNVAtRjFHazBURzJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYtZWVkMWQwOTY3MDc4
LzEvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4e4MA0G
CSqGSIb3DQEBCwUAA4IBAQBq2BhlwiwLpuDtXA7U+0CJW0EM0dvo4sFxNKBZOGNF
9nwtZSCdn3tPnafRQGLnEJHttmxLN3P1+OZw+sV3w4sVrLmJCGKEouc6lL07QD6a
mXB7FFLvg73JwlQwbJgaqd9KiUDg6C6776RGRBJsilx8HkZX2+SOrnEht2FQDUc3
pzhBVDt2FzDLaqTdWVqAzCjm1BTNf6WRHALnXGTmExZ3CcvsJi1fQ70vWXvKChTo
6GJvYear6i0W7OnlTHCFzoFVX60g0yewFjNs0NCyqDarqFYJo9QSLrkiQNGz6iXS
om5wQ3cdknUX8hHLIiPSatJG/i8EDk5JFiZEDTdlcx85
-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:49 2025 by rpki-client