Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/1SG3zE22KE1NXDRo1BPAaCLvHMo.roa
File: 1SG3zE22KE1NXDRo1BPAaCLvHMo.roa (raw, json)
Hash identifier: wQTYijeAvbZeDm8kox1nZj2bcekPsfVsoN8o6Xcqv30=
Subject key identifier: D5:21:B7:CC:4D:B6:28:4D:4D:5C:34:68:D4:13:C0:68:22:EF:1C:CA
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 0189540AFA32E5E702F7BE2F46CCDF1C130D
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/1SG3zE22KE1NXDRo1BPAaCLvHMo.roa
Signing time: Fri 14 Jul 2023 10:55:52 +0000
ROA not before: Fri 14 Jul 2023 10:55:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393954
IP address blocks: 31.186.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 10:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:0a:fa:32:e5:e7:02:f7:be:2f:46:cc:df:1c:13:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jul 14 10:55:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d521b7cc4db6284d4d5c3468d413c06822ef1cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:11:3f:a0:b3:fd:1c:a0:4f:39:2c:5d:ed:
ee:f7:e0:ac:ea:70:4e:d9:2e:6b:74:25:85:e9:cb:
f9:a0:70:99:96:e5:3f:54:6d:1d:7e:9c:77:b9:df:
b5:63:9f:9e:c7:0c:d6:16:9c:60:73:a8:4a:d0:26:
a7:c5:11:3d:5d:9f:a4:d5:7f:93:56:17:8f:47:5e:
70:a9:e4:04:b6:1d:06:63:26:c1:c5:f2:3c:e4:02:
c3:15:86:99:ac:43:2c:0a:f4:81:76:23:3a:3f:d5:
18:d8:51:86:1e:16:c8:93:5b:2f:e5:f0:87:1f:3d:
db:98:a5:85:29:36:11:d6:c7:3e:74:33:84:9c:2e:
95:ca:33:ae:c0:67:6c:04:5f:4e:e4:24:5f:6b:71:
a2:5a:ad:be:14:00:49:5b:f1:58:9e:8d:d6:a6:f6:
35:5f:13:85:1b:03:86:41:5f:d7:6a:a1:14:ed:3f:
1a:67:fa:c1:5f:99:69:ff:3d:25:70:8f:57:7e:fa:
af:c5:8a:2c:d3:73:83:c6:1e:8e:94:c0:32:c1:b0:
a8:60:be:52:ff:4c:be:6a:4b:9d:65:76:c1:ef:f6:
80:9a:1b:3e:42:4b:29:a2:59:af:af:cb:f7:e3:c4:
36:0f:4e:a6:77:88:aa:ae:51:d4:62:83:ef:aa:ff:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:21:B7:CC:4D:B6:28:4D:4D:5C:34:68:D4:13:C0:68:22:EF:1C:CA
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/1SG3zE22KE1NXDRo1BPAaCLvHMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.225.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e8:fd:2b:a2:55:0f:35:46:56:8d:e5:e2:b4:ee:b1:c9:b5:
b5:46:8d:e5:23:12:b8:f0:64:0d:9a:2b:65:75:57:f8:bb:8c:
f3:7d:03:4d:f9:58:30:a9:7d:05:22:b5:78:f7:e2:1f:56:07:
8e:7c:c5:13:bb:c3:3c:30:4e:5c:15:01:12:48:e8:38:db:e6:
2b:9f:82:93:fa:04:ae:43:33:80:ab:c2:68:44:7b:35:fc:f3:
a1:f0:07:d8:06:ea:f9:76:2e:9d:2b:ae:1d:49:2e:14:17:63:
93:b9:a6:5f:f4:d9:86:01:6e:fd:ab:7d:5a:a2:c3:db:6f:8b:
4a:03:1d:b8:63:73:16:51:7c:67:91:4b:89:a3:a2:3d:8d:1c:
35:03:2f:7c:50:4c:6b:be:fc:9d:8a:7c:b1:75:7c:bc:54:ca:
83:28:94:39:17:3c:a8:31:ea:c6:52:58:5c:5e:a4:65:f3:c5:
e5:ed:07:bd:e9:4e:19:c1:9c:b3:f5:80:ea:45:2b:13:35:32:
e8:d9:d2:d2:85:01:70:14:ac:f6:76:c9:b6:91:d8:48:94:c0:
10:94:1f:81:a9:fd:71:16:f6:58:93:6c:0c:3d:ad:a4:dc:fc:
76:27:bd:a6:a7:7d:dd:cf:41:47:42:b9:c1:8a:29:01:50:b9:
0b:c4:9c:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlUCvoy5ecC974vRszfHBMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3
OThmZDkwHhcNMjMwNzE0MTA1NTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTIxYjdjYzRkYjYyODRkNGQ1YzM0NjhkNDEzYzA2ODIyZWYxY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihMRP6Cz/RygTzksXe3u9+Cs6nBO
2S5rdCWF6cv5oHCZluU/VG0dfpx3ud+1Y5+exwzWFpxgc6hK0CanxRE9XZ+k1X+T
VhePR15wqeQEth0GYybBxfI85ALDFYaZrEMsCvSBdiM6P9UY2FGGHhbIk1sv5fCH
Hz3bmKWFKTYR1sc+dDOEnC6VyjOuwGdsBF9O5CRfa3GiWq2+FABJW/FYno3WpvY1
XxOFGwOGQV/XaqEU7T8aZ/rBX5lp/z0lcI9XfvqvxYos03ODxh6OlMAywbCoYL5S
/0y+akudZXbB7/aAmhs+Qkspolmvr8v348Q2D06md4iqrlHUYoPvqv8qeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNUht8xNtihNTVw0aNQTwGgi7xzKMB8GA1UdIwQY
MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt
OTk4NjhjNTEzMjlhLzEvMVNHM3pFMjJLRTFOWERSbzFCUEFhQ0x2SE1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh
LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7rhMA0G
CSqGSIb3DQEBCwUAA4IBAQCC6P0rolUPNUZWjeXitO6xybW1Ro3lIxK48GQNmitl
dVf4u4zzfQNN+VgwqX0FIrV49+IfVgeOfMUTu8M8ME5cFQESSOg42+Yrn4KT+gSu
QzOAq8JoRHs1/POh8AfYBur5di6dK64dSS4UF2OTuaZf9NmGAW79q31aosPbb4tK
Ax24Y3MWUXxnkUuJo6I9jRw1Ay98UExrvvydinyxdXy8VMqDKJQ5FzyoMerGUlhc
XqRl88Xl7Qe96U4ZwZyz9YDqRSsTNTLo2dLShQFwFKz2dsm2kdhIlMAQlB+Bqf1x
FvZYk2wMPa2k3Px2J72mp33dz0FHQrnBiikBULkLxJxT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:02 2024 by rpki-client on console-ams.rpki-client.org