Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/7rWJxh_ioKudJV4G6DN2OwVZizM.roa
File: 7rWJxh_ioKudJV4G6DN2OwVZizM.roa (raw, json)
Hash identifier: lIJGWRHp/K9G53hz3zg2pykgFL4jk9/evF0Y7L7WBS4=
Subject key identifier: EE:B5:89:C6:1F:E2:A0:AB:9D:25:5E:06:E8:33:76:3B:05:59:8B:33
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01892ABFDA990B961A932D40271D64D0463E
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/7rWJxh_ioKudJV4G6DN2OwVZizM.roa
Signing time: Thu 06 Jul 2023 10:29:23 +0000
ROA not before: Thu 06 Jul 2023 10:29:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 804
IP address blocks: 31.193.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jul 2023 12:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:bf:da:99:0b:96:1a:93:2d:40:27:1d:64:d0:46:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jul 6 10:29:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeb589c61fe2a0ab9d255e06e833763b05598b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:8e:58:09:e4:ff:b1:86:0c:a7:ae:6d:86:
f4:d3:8f:e5:3a:83:61:1f:3f:87:8d:1a:52:6d:2a:
c3:ad:bf:e1:48:2c:ce:05:68:4f:26:34:17:4d:53:
74:2a:aa:b2:e1:e6:8f:5f:75:c5:df:43:88:08:2e:
36:78:5b:82:8f:8b:bc:be:bd:e9:16:10:47:f0:84:
8d:21:4b:e7:49:7c:c8:30:e7:7f:7b:6e:a1:34:0e:
90:c1:3a:1f:04:fb:7a:45:70:6a:50:77:fc:5f:01:
59:cc:4f:b9:d7:a2:e3:74:e4:3f:60:44:dd:15:d2:
c6:c2:af:a2:b0:47:74:ed:9a:c7:0f:d0:db:e6:9a:
ef:fa:f7:eb:de:2f:5b:1c:29:ef:13:8f:48:e8:44:
fe:dd:70:79:f4:36:00:c0:f2:ea:6b:60:3a:74:2d:
4a:1f:87:86:93:53:06:8d:6f:4f:11:21:3b:c4:81:
1b:f0:d6:71:f1:98:99:72:b8:41:03:53:1a:f6:4b:
61:52:7b:49:1c:da:68:93:56:c6:5a:73:16:c4:11:
f4:1b:03:db:be:f1:4d:bd:3f:d0:f0:1e:4c:b1:b3:
5e:4d:07:83:bb:d4:16:19:25:f2:b3:68:17:eb:28:
8c:cf:78:f2:b0:e6:48:09:43:98:1e:64:1c:40:69:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B5:89:C6:1F:E2:A0:AB:9D:25:5E:06:E8:33:76:3B:05:59:8B:33
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/7rWJxh_ioKudJV4G6DN2OwVZizM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/22
Signature Algorithm: sha256WithRSAEncryption
96:5e:b2:33:d8:a5:ae:f9:59:0f:44:b0:c8:76:f1:38:1c:f4:
fc:63:d8:e8:91:9a:dc:0f:d7:66:2a:cb:e3:2f:97:cc:a3:9f:
82:ae:c2:83:f8:3b:e6:8e:cb:72:b0:fa:ef:0f:01:e9:40:94:
2d:c9:6d:22:68:98:cf:8f:a9:57:94:c2:18:8f:ac:cb:29:87:
c0:76:ef:50:56:1a:af:95:ff:ae:fd:ef:59:1e:7e:5d:41:9b:
29:80:05:3f:43:49:20:a4:26:02:64:5a:4d:a5:e9:69:ff:20:
db:76:1e:e2:22:cd:6a:48:be:fe:7a:78:14:67:75:73:d6:e5:
7c:0d:3b:02:da:d1:b1:70:84:cf:39:13:3d:07:d1:c5:38:8a:
b4:5c:46:58:8b:d7:e6:5c:a7:61:fa:a5:77:6f:46:c0:bc:f5:
6f:cf:3f:42:79:5b:53:2f:20:fb:f9:e7:1e:03:8d:3a:68:65:
f3:35:45:af:64:af:cb:c7:39:6f:ca:0e:23:0c:06:d9:48:db:
02:44:72:3e:40:c2:e6:36:8d:4c:f7:00:7e:8e:97:f7:42:7a:
50:b4:b0:47:7f:63:0d:7a:ee:14:98:c7:53:3a:3c:68:fb:b6:
41:44:16:64:81:2a:75:c6:bc:0f:49:2e:66:4e:10:c1:1c:79:
af:28:fc:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkqv9qZC5Yaky1AJx1k0EY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjMwNzA2MTAyOTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWI1ODljNjFmZTJhMGFiOWQyNTVlMDZlODMzNzYzYjA1NTk4YjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV+OWAnk/7GGDKeubYb004/lOoNh
Hz+HjRpSbSrDrb/hSCzOBWhPJjQXTVN0Kqqy4eaPX3XF30OICC42eFuCj4u8vr3p
FhBH8ISNIUvnSXzIMOd/e26hNA6QwTofBPt6RXBqUHf8XwFZzE+516LjdOQ/YETd
FdLGwq+isEd07ZrHD9Db5prv+vfr3i9bHCnvE49I6ET+3XB59DYAwPLqa2A6dC1K
H4eGk1MGjW9PESE7xIEb8NZx8ZiZcrhBA1Ma9kthUntJHNpok1bGWnMWxBH0GwPb
vvFNvT/Q8B5MsbNeTQeDu9QWGSXys2gX6yiMz3jysOZICUOYHmQcQGkFWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO61icYf4qCrnSVeBugzdjsFWYszMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvN3JXSnhoX2lvS3VkSlY0RzZETjJPd1ZaaXpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH8HwMA0G
CSqGSIb3DQEBCwUAA4IBAQCWXrIz2KWu+VkPRLDIdvE4HPT8Y9jokZrcD9dmKsvj
L5fMo5+CrsKD+DvmjstysPrvDwHpQJQtyW0iaJjPj6lXlMIYj6zLKYfAdu9QVhqv
lf+u/e9ZHn5dQZspgAU/Q0kgpCYCZFpNpelp/yDbdh7iIs1qSL7+engUZ3Vz1uV8
DTsC2tGxcITPORM9B9HFOIq0XEZYi9fmXKdh+qV3b0bAvPVvzz9CeVtTLyD7+ece
A406aGXzNUWvZK/Lxzlvyg4jDAbZSNsCRHI+QMLmNo1M9wB+jpf3QnpQtLBHf2MN
eu4UmMdTOjxo+7ZBRBZkgSp1xrwPSS5mThDBHHmvKPx+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:26 2024 by rpki-client on console-ams.rpki-client.org