Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/jQAbqBSi-sfC3fMhiq86yL1s2GY.roa
File: jQAbqBSi-sfC3fMhiq86yL1s2GY.roa (raw, json)
Hash identifier: OYMDhrxJjmyBp2TkzW2UMfUJzQJNrm1mfim3KLLAzm4=
Subject key identifier: 8D:00:1B:A8:14:A2:FA:C7:C2:DD:F3:21:8A:AF:3A:C8:BD:6C:D8:66
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 01895E7152DBAE0E5692B65DC05FF2B94D85
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/jQAbqBSi-sfC3fMhiq86yL1s2GY.roa
Signing time: Sun 16 Jul 2023 11:23:52 +0000
ROA not before: Sun 16 Jul 2023 11:23:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22239
IP address blocks: 31.186.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5e:71:52:db:ae:0e:56:92:b6:5d:c0:5f:f2:b9:4d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jul 16 11:23:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d001ba814a2fac7c2ddf3218aaf3ac8bd6cd866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:44:f4:3b:ba:0a:aa:41:92:c9:7c:56:7e:85:
7f:8c:06:61:c1:38:c6:d3:c8:ac:1e:ec:9f:ea:fa:
f7:d1:fe:71:9d:94:43:39:54:f6:97:2a:0a:95:44:
3b:45:b8:ed:fe:a2:cc:40:e4:50:cd:82:32:c3:45:
53:a4:28:d5:ad:d6:b8:1c:85:bb:69:1a:c1:d2:fa:
6b:a7:b4:6b:4a:9c:6f:b2:7c:40:1b:05:61:17:cd:
96:1e:0e:c3:2d:68:ee:00:8c:0e:c5:03:5e:64:75:
95:69:26:4f:e8:06:d1:cc:97:65:88:bb:8d:9b:91:
39:db:cc:57:ea:c0:4a:fd:45:c9:c5:25:e7:18:de:
8a:69:81:71:d7:bc:3d:0a:62:41:4b:0f:66:1b:d1:
e7:89:71:4a:ce:81:6a:b5:62:bd:0f:69:ee:2a:de:
f6:70:52:67:b0:3e:c8:ef:e7:46:9c:80:c4:15:c8:
b8:bf:12:70:5e:47:69:84:70:02:4e:4e:91:87:ce:
c5:c7:75:d6:15:f6:3d:7a:c8:99:02:17:e3:56:78:
aa:52:e5:75:31:9b:97:41:ea:18:e0:b3:02:0d:68:
e8:8e:17:ef:77:80:22:9f:19:53:0c:4b:32:37:74:
e9:bf:68:41:4c:88:52:35:b8:ce:64:50:bb:f1:41:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:00:1B:A8:14:A2:FA:C7:C2:DD:F3:21:8A:AF:3A:C8:BD:6C:D8:66
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/jQAbqBSi-sfC3fMhiq86yL1s2GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:93:ff:71:a0:18:c0:6f:77:5a:ec:12:c9:22:07:5f:6f:80:
30:62:55:cd:11:79:3d:92:dd:e5:2f:9d:7f:10:a5:b5:49:d2:
9a:34:3e:58:14:e1:31:fc:27:40:14:95:66:9c:da:f5:00:d4:
dd:e4:a3:84:4a:77:55:37:42:35:c5:a9:9b:c6:ed:ec:27:f7:
7f:00:22:f1:ee:3a:0c:ae:cc:a5:69:37:7f:91:4f:41:7f:ea:
d8:4d:85:d8:3c:b4:54:56:70:04:7b:9c:b1:c5:d9:10:c6:c0:
37:ec:36:f8:ea:ae:e8:ec:a3:23:fc:58:0d:09:53:c8:dd:86:
09:91:c8:68:72:4f:c1:d7:9f:e5:c2:e8:08:73:14:30:f9:8f:
9c:1c:9b:8f:05:65:20:06:20:b6:ba:84:55:3f:a1:b8:5c:09:
47:5b:dd:29:0a:1b:dd:68:50:76:45:85:1b:6b:df:de:06:5b:
10:77:83:e0:c1:08:29:8c:97:b7:f8:46:c1:c0:db:96:f5:e3:
d9:0d:21:72:8e:c3:2a:0f:d6:f7:2f:9a:cd:8e:10:f3:a0:18:
14:68:02:52:dd:36:72:43:1f:71:b3:e3:eb:93:29:40:65:45:
23:15:25:25:9b:3f:9e:91:8c:09:0a:78:8d:cd:f7:6f:86:87:
b3:e9:69:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlecVLbrg5WkrZdwF/yuU2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3
OThmZDkwHhcNMjMwNzE2MTEyMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDAwMWJhODE0YTJmYWM3YzJkZGYzMjE4YWFmM2FjOGJkNmNkODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlET0O7oKqkGSyXxWfoV/jAZhwTjG
08isHuyf6vr30f5xnZRDOVT2lyoKlUQ7Rbjt/qLMQORQzYIyw0VTpCjVrda4HIW7
aRrB0vprp7RrSpxvsnxAGwVhF82WHg7DLWjuAIwOxQNeZHWVaSZP6AbRzJdliLuN
m5E528xX6sBK/UXJxSXnGN6KaYFx17w9CmJBSw9mG9HniXFKzoFqtWK9D2nuKt72
cFJnsD7I7+dGnIDEFci4vxJwXkdphHACTk6Rh87Fx3XWFfY9esiZAhfjVniqUuV1
MZuXQeoY4LMCDWjojhfvd4AinxlTDEsyN3Tpv2hBTIhSNbjOZFC78UGnawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI0AG6gUovrHwt3zIYqvOsi9bNhmMB8GA1UdIwQY
MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt
OTk4NjhjNTEzMjlhLzEvalFBYnFCU2ktc2ZDM2ZNaGlxODZ5TDFzMkdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh
LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7r5MA0G
CSqGSIb3DQEBCwUAA4IBAQCmk/9xoBjAb3da7BLJIgdfb4AwYlXNEXk9kt3lL51/
EKW1SdKaND5YFOEx/CdAFJVmnNr1ANTd5KOESndVN0I1xambxu3sJ/d/ACLx7joM
rsylaTd/kU9Bf+rYTYXYPLRUVnAEe5yxxdkQxsA37Db46q7o7KMj/FgNCVPI3YYJ
kchock/B15/lwugIcxQw+Y+cHJuPBWUgBiC2uoRVP6G4XAlHW90pChvdaFB2RYUb
a9/eBlsQd4PgwQgpjJe3+EbBwNuW9ePZDSFyjsMqD9b3L5rNjhDzoBgUaAJS3TZy
Qx9xs+PrkylAZUUjFSUlmz+ekYwJCniNzfdvhoez6Wnm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:02 2024 by rpki-client on console-ams.rpki-client.org