Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/VUObcPwsskavAo_IO8YaOSKR0R4.roa
File: VUObcPwsskavAo_IO8YaOSKR0R4.roa (raw, json)
Hash identifier: ADTqfDSPKs1HAD42zOu7uHcXpXLmFU1MYMvJWVqSnFs=
Subject key identifier: 55:43:9B:70:FC:2C:B2:46:AF:02:8F:C8:3B:C6:1A:39:22:91:D1:1E
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018875427ECD597AAF4A2AEEB1DA3806935F
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/VUObcPwsskavAo_IO8YaOSKR0R4.roa
Signing time: Thu 01 Jun 2023 04:41:12 +0000
ROA not before: Thu 01 Jun 2023 04:41:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 31.43.165.0/24 maxlen: 24
195.34.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Jun 2023 11:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:42:7e:cd:59:7a:af:4a:2a:ee:b1:da:38:06:93:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jun 1 04:41:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55439b70fc2cb246af028fc83bc61a392291d11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:9d:36:c5:5a:6e:c9:4a:1f:f7:e1:bc:7a:
1e:6f:95:20:4f:b9:09:53:90:eb:63:cb:4a:4d:8c:
3d:56:70:a5:86:c6:27:db:d8:d1:74:64:ce:01:6a:
b8:ab:f5:04:f2:b5:b8:c2:a2:a3:3f:48:e2:e3:61:
14:7b:85:95:a7:95:8f:0e:3f:48:38:83:7e:de:e5:
37:f7:d9:34:15:46:97:ad:ad:13:31:ac:70:63:ee:
f6:74:14:96:07:80:61:1c:f5:df:23:23:b8:c2:4b:
34:4a:fe:97:7b:2a:9e:8c:c7:0d:e9:ec:04:94:76:
5d:7e:86:5c:33:1f:87:f1:ef:0c:de:6b:5d:8d:16:
d2:8f:1c:8d:63:78:11:3e:08:2b:84:f4:17:4e:91:
2e:07:1a:19:f9:d0:4b:6c:6e:c0:08:ae:22:ba:f9:
d7:19:51:f1:7c:61:cd:b4:66:f2:14:73:6b:f4:a7:
08:48:80:a0:1b:cd:01:f6:c0:b1:46:85:87:8a:cc:
5b:fb:03:0e:60:3f:1c:8f:17:64:24:fd:d3:9b:08:
22:66:60:7a:bb:6c:b7:b3:35:6a:17:b1:f9:33:b1:
98:47:58:3c:25:25:71:1b:49:c8:3e:94:f6:16:4f:
f2:66:a5:37:e6:42:9c:0e:f1:28:c5:2e:e3:40:a5:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:9B:70:FC:2C:B2:46:AF:02:8F:C8:3B:C6:1A:39:22:91:D1:1E
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/VUObcPwsskavAo_IO8YaOSKR0R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
195.34.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b7:99:cd:b2:f2:0f:4d:c5:32:11:50:61:3e:53:d4:f0:e1:
67:40:25:1f:ab:6c:27:f3:c1:d9:4f:b2:90:a2:ad:a0:b1:70:
f4:4c:bf:c5:a1:33:dc:04:48:ca:8d:e3:a0:5d:f2:03:c8:13:
61:bd:b5:2b:63:7d:05:42:0b:0e:8e:12:be:8b:80:fd:23:63:
fb:e2:78:c0:08:2f:26:e9:d1:d4:df:53:84:67:29:63:82:f8:
5f:44:7c:56:4b:18:a9:3e:b0:82:14:48:0b:f1:95:45:35:67:
ae:41:4c:1b:88:3f:c1:3e:cd:20:1d:96:4a:a0:a8:9f:d0:0f:
c7:00:2f:f9:72:0f:b3:53:22:31:bf:03:55:ad:8d:6b:0a:cf:
13:73:72:4e:ff:87:3e:4c:f0:35:35:28:2e:52:d7:e4:44:ca:
ee:80:82:a1:0b:1f:27:fb:7e:f1:28:77:c0:58:44:be:d9:d8:
f1:64:92:12:bb:08:ea:67:ac:ea:89:50:b6:36:ae:da:ba:98:
e6:09:b9:2c:29:66:cd:47:9d:9e:f1:29:f4:dc:37:ef:ff:1c:
ae:69:a7:04:5b:e7:0e:6d:60:93:1d:47:90:26:aa:2b:e4:75:
49:64:29:39:5c:fd:59:01:c8:4b:09:86:16:75:f4:64:9e:51:
d0:80:08:9f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYh1Qn7NWXqvSirusdo4BpNfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjMwNjAxMDQ0MTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTQzOWI3MGZjMmNiMjQ2YWYwMjhmYzgzYmM2MWEzOTIyOTFkMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTedNsVabslKH/fhvHoeb5UgT7kJ
U5DrY8tKTYw9VnClhsYn29jRdGTOAWq4q/UE8rW4wqKjP0ji42EUe4WVp5WPDj9I
OIN+3uU399k0FUaXra0TMaxwY+72dBSWB4BhHPXfIyO4wks0Sv6XeyqejMcN6ewE
lHZdfoZcMx+H8e8M3mtdjRbSjxyNY3gRPggrhPQXTpEuBxoZ+dBLbG7ACK4iuvnX
GVHxfGHNtGbyFHNr9KcISICgG80B9sCxRoWHisxb+wMOYD8cjxdkJP3TmwgiZmB6
u2y3szVqF7H5M7GYR1g8JSVxG0nIPpT2Fk/yZqU35kKcDvEoxS7jQKWjLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFVDm3D8LLJGrwKPyDvGGjkikdEeMB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvVlVPYmNQd3Nza2F2QW9fSU84WWFPU0tSMFI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHyulAwQA
wyJOMA0GCSqGSIb3DQEBCwUAA4IBAQCot5nNsvIPTcUyEVBhPlPU8OFnQCUfq2wn
88HZT7KQoq2gsXD0TL/FoTPcBEjKjeOgXfIDyBNhvbUrY30FQgsOjhK+i4D9I2P7
4njACC8m6dHU31OEZyljgvhfRHxWSxipPrCCFEgL8ZVFNWeuQUwbiD/BPs0gHZZK
oKif0A/HAC/5cg+zUyIxvwNVrY1rCs8Tc3JO/4c+TPA1NSguUtfkRMrugIKhCx8n
+37xKHfAWES+2djxZJISuwjqZ6zqiVC2Nq7aupjmCbksKWbNR52e8Sn03Dfv/xyu
aacEW+cObWCTHUeQJqor5HVJZCk5XP1ZAchLCYYWdfRknlHQgAif
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org