Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/fx6DlUAsoUyfqPE22GukGor2js8.roa
File: fx6DlUAsoUyfqPE22GukGor2js8.roa (raw, json)
Hash identifier: 6IYAmPnsnbpgt0lomBou8xcrJJbWA/vooNtZvgrxstk=
Subject key identifier: 7F:1E:83:95:40:2C:A1:4C:9F:A8:F1:36:D8:6B:A4:1A:8A:F6:8E:CF
Certificate issuer: /CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
Certificate serial: 0185710303EF82890E499308F063A73F74B5
Authority key identifier: 34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/fx6DlUAsoUyfqPE22GukGor2js8.roa
Signing time: Mon 02 Jan 2023 05:45:01 +0000
ROA not before: Mon 02 Jan 2023 05:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 31.193.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:03:ef:82:89:0e:49:93:08:f0:63:a7:3f:74:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
Validity
Not Before: Jan 2 05:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f1e8395402ca14c9fa8f136d86ba41a8af68ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:98:83:a3:d0:10:41:3a:81:82:2e:e8:a7:
de:98:82:d4:46:a1:87:24:1d:61:01:bb:45:cd:0b:
a4:a1:82:06:a4:0e:18:d1:ce:77:2e:3b:fb:c5:d6:
95:3d:b5:9a:39:76:bb:7c:07:93:62:e4:e6:ac:ac:
4e:0d:bb:b6:2a:b6:8b:3d:27:fa:02:f7:21:e9:db:
47:1f:d3:ba:14:35:0e:49:bd:78:d5:64:8d:a2:dc:
e4:91:60:1b:b1:f6:bb:08:98:e2:60:56:f5:83:38:
8f:54:49:bd:01:31:44:28:b6:cb:bc:d0:2e:ff:39:
63:53:78:85:0d:14:e1:45:cd:d5:07:23:b6:9f:5e:
d3:3e:ae:62:c4:3a:9e:59:05:ce:29:88:27:78:32:
24:80:06:65:f3:bc:d5:66:a4:6f:d1:14:1a:af:a2:
42:96:57:cf:2c:7a:fb:e7:b7:63:26:46:9b:71:40:
a6:9b:e7:38:ab:ae:30:c3:6d:6c:2d:b2:df:b3:42:
5d:34:f2:82:14:26:02:6c:c0:4e:0f:92:b8:6f:9c:
28:bf:57:cf:18:b1:91:e1:98:d3:8f:aa:7a:c1:45:
1e:f6:de:b6:a2:64:ae:61:71:1f:11:78:94:f5:1e:
7e:38:3e:5c:43:83:3b:ff:01:6f:75:e0:9e:67:e6:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1E:83:95:40:2C:A1:4C:9F:A8:F1:36:D8:6B:A4:1A:8A:F6:8E:CF
X509v3 Authority Key Identifier:
keyid:34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/fx6DlUAsoUyfqPE22GukGor2js8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:29:31:a1:b3:a8:73:53:53:0e:36:97:38:02:09:57:8b:10:
d7:69:ab:5e:6e:d1:86:db:75:7e:f1:8c:e9:41:ad:29:10:ed:
3f:5c:17:33:28:23:09:4b:a3:b6:c0:e4:ab:32:ec:0f:72:13:
2d:15:73:38:d7:7f:f4:92:48:1f:f7:a8:4b:f7:74:1c:31:75:
7c:a5:30:98:b9:ab:b0:62:38:ea:ef:68:37:84:25:2d:61:c0:
a9:57:2e:1b:76:3f:2f:11:45:93:6d:38:cf:40:54:9d:e4:43:
82:06:e8:f6:20:32:a1:18:67:6d:2f:41:3e:d2:be:50:9a:d2:
4b:8f:e4:1b:1e:dd:07:42:73:92:e3:a3:89:2f:ee:3e:be:91:
c2:45:8a:86:c6:1f:cd:1e:5e:69:86:ec:4d:3c:1c:ca:4b:c1:
c1:39:1a:f9:73:4a:10:ce:4c:03:08:8d:3b:c9:f9:2b:27:b3:
82:56:e9:d1:64:61:38:33:be:1c:02:94:d7:0e:cd:fd:ea:95:
48:18:65:b1:a8:d4:e7:63:a1:5d:1e:8f:6f:16:74:ab:4c:65:
4e:75:ac:ed:7b:a7:74:84:8a:19:7f:e6:ae:3d:e8:e2:db:40:
8d:5d:fb:50:79:2c:fa:31:b9:8f:23:49:bf:86:d7:ce:09:6d:
3e:ff:6c:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxAwPvgokOSZMI8GOnP3S1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YTJlYTU1N2I0MmE5ZmQzYTgwMjExNTA2MTkzYzJiMzM4
OWRjNmYwHhcNMjMwMTAyMDU0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjFlODM5NTQwMmNhMTRjOWZhOGYxMzZkODZiYTQxYThhZjY4ZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVWYg6PQEEE6gYIu6KfemILURqGH
JB1hAbtFzQukoYIGpA4Y0c53Ljv7xdaVPbWaOXa7fAeTYuTmrKxODbu2KraLPSf6
Avch6dtHH9O6FDUOSb141WSNotzkkWAbsfa7CJjiYFb1gziPVEm9ATFEKLbLvNAu
/zljU3iFDRThRc3VByO2n17TPq5ixDqeWQXOKYgneDIkgAZl87zVZqRv0RQar6JC
llfPLHr757djJkabcUCmm+c4q64ww21sLbLfs0JdNPKCFCYCbMBOD5K4b5wov1fP
GLGR4ZjTj6p6wUUe9t62omSuYXEfEXiU9R5+OD5cQ4M7/wFvdeCeZ+YdUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH8eg5VALKFMn6jxNthrpBqK9o7PMB8GA1UdIwQY
MBaAFDSi6lV7Qqn9OoAhFQYZPCszidxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTktMcVZYdENxZjA2Z0NFVkJoazhLek9KM0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zMTMxNWMtODFhNC00OTY5LTg1NzEt
ZDc2MzQ2YTdhZGM2LzEvZng2RGxVQXNvVXlmcVBFMjJHdWtHb3IyanM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zMTMxNWMtODFhNC00OTY5LTg1NzEtZDc2MzQ2YTdhZGM2
LzEvTktMcVZYdENxZjA2Z0NFVkJoazhLek9KM0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH8G/MA0G
CSqGSIb3DQEBCwUAA4IBAQBaKTGhs6hzU1MONpc4AglXixDXaatebtGG23V+8Yzp
Qa0pEO0/XBczKCMJS6O2wOSrMuwPchMtFXM413/0kkgf96hL93QcMXV8pTCYuauw
Yjjq72g3hCUtYcCpVy4bdj8vEUWTbTjPQFSd5EOCBuj2IDKhGGdtL0E+0r5QmtJL
j+QbHt0HQnOS46OJL+4+vpHCRYqGxh/NHl5phuxNPBzKS8HBORr5c0oQzkwDCI07
yfkrJ7OCVunRZGE4M74cApTXDs396pVIGGWxqNTnY6FdHo9vFnSrTGVOdazte6d0
hIoZf+auPeji20CNXftQeSz6MbmPI0m/htfOCW0+/2yk
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:28 2024 by rpki-client on console-ams.rpki-client.org