Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/zaBumtMDzgK2cGxnaRyDw7ZHOqk.roa
File: zaBumtMDzgK2cGxnaRyDw7ZHOqk.roa (raw, json)
Hash identifier: ENVW4Umegs5+pOhks6hvwJwpzJIrjNftT+m/u5onBss=
Subject key identifier: CD:A0:6E:9A:D3:03:CE:02:B6:70:6C:67:69:1C:83:C3:B6:47:3A:A9
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01857139C6E40CF268E03684452A705DAAF3
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/zaBumtMDzgK2cGxnaRyDw7ZHOqk.roa
Signing time: Mon 02 Jan 2023 06:44:49 +0000
ROA not before: Mon 02 Jan 2023 06:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 31.43.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jul 2023 14:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:c6:e4:0c:f2:68:e0:36:84:45:2a:70:5d:aa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 2 06:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cda06e9ad303ce02b6706c67691c83c3b6473aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:8b:81:47:11:63:ac:cc:8e:26:39:70:b8:
01:3c:04:d4:dc:ac:f5:a9:ab:d7:1a:96:67:68:fe:
6d:a6:6e:0d:40:e8:f9:bc:f4:89:8a:76:66:b6:87:
f9:8c:b4:a0:35:a3:14:54:09:c0:e0:9a:63:02:d0:
fe:73:1e:91:ed:13:2c:b5:9a:f8:2c:15:cd:fe:06:
c9:b7:39:5c:9f:26:ec:1d:49:f0:ce:95:ba:86:32:
2c:63:4e:b8:fe:4c:a8:1b:cd:04:0a:07:00:a0:96:
b8:af:17:d1:ad:e0:c2:2e:37:35:c2:c7:8c:52:b6:
be:35:48:2f:1b:18:c4:2b:dd:c2:e3:ce:3e:29:67:
f3:a4:0c:f6:a2:05:f1:87:27:63:6f:97:ef:30:cc:
85:71:9e:9c:2f:e2:ba:53:bb:1a:3f:29:58:06:ba:
81:d8:f0:c0:9f:c4:a9:90:3d:44:fb:07:01:35:27:
cf:24:f0:76:d0:7d:36:f5:a9:cc:b2:ea:cf:88:89:
9b:88:a7:24:b6:28:60:6e:dc:1c:4c:70:18:3a:62:
f2:d7:70:34:95:a3:45:0f:b0:c1:90:b2:1a:89:6b:
55:f8:ca:c5:d5:c4:ae:69:58:52:c2:13:b5:97:9e:
26:03:50:aa:c6:ba:6a:9a:e1:82:7b:65:87:35:d8:
ef:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A0:6E:9A:D3:03:CE:02:B6:70:6C:67:69:1C:83:C3:B6:47:3A:A9
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/zaBumtMDzgK2cGxnaRyDw7ZHOqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.166.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:75:3f:55:04:1f:d9:cf:67:5e:c4:53:5e:fc:22:db:83:42:
04:94:a6:a7:ab:52:b5:a6:64:5c:d4:d5:b0:54:dd:44:7b:08:
f4:62:02:1a:b6:d5:6c:82:e7:92:d3:c7:94:ca:63:7f:73:d1:
a5:21:55:b4:92:53:99:81:80:2f:4b:d2:47:b1:63:9f:40:21:
d7:f2:9e:0e:ee:b5:56:cd:49:09:7c:bf:d4:77:94:61:73:5a:
20:b0:bd:c5:ce:46:4d:73:a0:b7:8d:b5:41:28:9b:0b:c2:49:
14:12:61:f4:1a:46:dc:cd:bc:34:27:b5:50:6f:22:e3:0f:57:
3d:1f:9d:d5:a8:93:d8:d6:56:40:15:81:13:c5:fb:bb:30:cf:
5c:2b:09:2c:31:ce:e0:fe:12:bc:71:36:45:fd:9d:e8:39:1e:
d2:cf:c9:4d:be:ad:bf:a3:47:78:3d:75:bd:8e:e4:04:7d:b3:
36:20:79:18:db:1d:ff:40:0e:22:e4:fd:b2:e5:0f:be:6f:7b:
06:76:45:63:db:49:0a:5c:fa:6e:6a:85:3c:93:2c:5f:f3:7c:
23:fd:f4:78:ed:dd:a4:c3:cf:71:e0:5a:15:63:b7:65:77:1e:
b0:ca:c3:65:58:58:8b:db:e0:fa:fa:17:d0:bc:6d:66:65:d0:
bf:8f:ec:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxOcbkDPJo4DaERSpwXarzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjMwMTAyMDY0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGEwNmU5YWQzMDNjZTAyYjY3MDZjNjc2OTFjODNjM2I2NDczYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3eLgUcRY6zMjiY5cLgBPATU3Kz1
qavXGpZnaP5tpm4NQOj5vPSJinZmtof5jLSgNaMUVAnA4JpjAtD+cx6R7RMstZr4
LBXN/gbJtzlcnybsHUnwzpW6hjIsY064/kyoG80ECgcAoJa4rxfRreDCLjc1wseM
Ura+NUgvGxjEK93C484+KWfzpAz2ogXxhydjb5fvMMyFcZ6cL+K6U7saPylYBrqB
2PDAn8SpkD1E+wcBNSfPJPB20H029anMsurPiImbiKcktihgbtwcTHAYOmLy13A0
laNFD7DBkLIaiWtV+MrF1cSuaVhSwhO1l54mA1CqxrpqmuGCe2WHNdjvOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM2gbprTA84CtnBsZ2kcg8O2RzqpMB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvemFCdW10TUR6Z0syY0d4bmFSeUR3N1pIT3FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyumMA0G
CSqGSIb3DQEBCwUAA4IBAQC6dT9VBB/Zz2dexFNe/CLbg0IElKanq1K1pmRc1NWw
VN1Eewj0YgIattVsgueS08eUymN/c9GlIVW0klOZgYAvS9JHsWOfQCHX8p4O7rVW
zUkJfL/Ud5Rhc1ogsL3FzkZNc6C3jbVBKJsLwkkUEmH0Gkbczbw0J7VQbyLjD1c9
H53VqJPY1lZAFYETxfu7MM9cKwksMc7g/hK8cTZF/Z3oOR7Sz8lNvq2/o0d4PXW9
juQEfbM2IHkY2x3/QA4i5P2y5Q++b3sGdkVj20kKXPpuaoU8kyxf83wj/fR47d2k
w89x4FoVY7dldx6wysNlWFiL2+D6+hfQvG1mZdC/j+yv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org