Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/xReR9iiJ4Q8kx5Q8usxZnQR6ZiQ.roa
File: xReR9iiJ4Q8kx5Q8usxZnQR6ZiQ.roa (raw, json)
Hash identifier: u0V3ZIEq73nTOw/6pz98lwYlA08vWhL6wmdy543+mG0=
Subject key identifier: C5:17:91:F6:28:89:E1:0F:24:C7:94:3C:BA:CC:59:9D:04:7A:66:24
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 0185701EE128FCA238283BE52D495FB4EDF0
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/xReR9iiJ4Q8kx5Q8usxZnQR6ZiQ.roa
Signing time: Mon 02 Jan 2023 01:35:49 +0000
ROA not before: Mon 02 Jan 2023 01:35:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20546
IP address blocks: 89.236.188.0/22 maxlen: 24
31.193.212.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:e1:28:fc:a2:38:28:3b:e5:2d:49:5f:b4:ed:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: Jan 2 01:35:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c51791f62889e10f24c7943cbacc599d047a6624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:4a:49:52:1e:ab:ed:51:7b:cb:be:de:91:
76:17:63:e1:ef:0f:83:66:c4:a4:de:09:b5:50:60:
9f:eb:bd:b8:b8:e8:f8:45:66:97:3d:c6:3a:eb:17:
b0:a0:15:5f:bc:ae:15:1f:45:05:56:d7:2e:78:ba:
ac:83:4b:ad:83:20:b3:40:c2:a6:64:05:dc:4b:c6:
10:04:a0:2f:7e:cb:fc:82:14:0d:de:23:a9:fb:6a:
79:a2:3d:81:82:b5:3c:76:aa:b7:64:04:c7:4d:38:
20:8e:a7:09:62:bf:43:ff:ed:53:6c:ed:5c:87:ad:
29:33:37:94:b1:fe:80:32:d5:a2:b9:20:3b:78:cc:
b6:97:52:1f:11:11:fb:12:78:87:9c:50:d5:68:fe:
5a:26:03:14:d0:36:09:96:0e:d7:75:8b:e7:68:b5:
9a:7f:c4:48:6c:81:a9:48:98:63:34:49:ea:2a:1e:
05:3a:e4:22:1e:8c:10:e9:c5:4f:80:84:7b:d0:7e:
56:11:1f:df:9f:ce:ea:0b:33:fe:39:7b:e1:d1:c6:
1a:7f:a5:91:69:15:e0:c4:a1:d5:f5:f2:b8:7d:7a:
1d:b8:ad:c6:29:82:95:c1:3b:53:14:fe:65:8b:3f:
a9:ea:e5:30:4b:a6:65:f7:a2:22:00:46:2e:a2:e3:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:17:91:F6:28:89:E1:0F:24:C7:94:3C:BA:CC:59:9D:04:7A:66:24
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/xReR9iiJ4Q8kx5Q8usxZnQR6ZiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.212.0/22
89.236.188.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:87:34:c6:20:33:bc:6b:da:6f:9c:fc:44:65:39:64:a5:47:
53:39:4a:86:c6:90:3b:ca:52:82:fe:f0:a9:01:0d:55:5a:0a:
cb:e4:47:bc:3f:20:76:e6:85:a0:de:da:c3:3c:bb:fd:3a:44:
dd:63:65:3d:a9:53:3c:b9:65:ac:ee:f2:92:c8:a0:3a:a0:1f:
ba:38:9e:7c:0d:d5:f3:1b:47:02:28:af:ca:31:a5:19:d8:91:
ee:45:13:fe:41:40:88:0d:59:08:25:d3:fb:19:7f:db:66:18:
81:52:52:9b:27:1e:19:df:44:8f:7e:f0:57:93:4e:41:f1:e6:
55:5f:0f:40:77:9d:16:8d:c2:37:9f:f8:e8:b8:81:47:9f:d6:
af:39:58:00:4a:e3:07:9c:64:95:c0:82:d4:6c:bf:d0:29:7e:
f9:7a:ac:9b:65:12:0b:e9:d6:5e:20:60:e8:df:ab:5b:c5:de:
68:74:ce:e5:87:90:ea:b2:fb:eb:26:ec:51:ad:79:83:ce:70:
25:d7:45:13:a7:ee:56:1f:dd:27:0a:6e:d0:5b:9a:8d:2d:c3:
1f:28:6a:d9:8a:3d:a2:c8:d2:21:6e:a9:ef:45:a4:f9:6a:60:
77:47:8c:39:59:16:0d:ee:12:a9:63:e5:82:a1:86:24:97:8e:
ad:a8:f4:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwHuEo/KI4KDvlLUlftO3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NDUzN2Q1NGYzNmYxNDIyMzFiYzgxNzAzODg3MmNiNjA3
YjIxZTcwHhcNMjMwMTAyMDEzNTQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTE3OTFmNjI4ODllMTBmMjRjNzk0M2NiYWNjNTk5ZDA0N2E2NjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4ZKSVIeq+1Re8u+3pF2F2Ph7w+D
ZsSk3gm1UGCf6724uOj4RWaXPcY66xewoBVfvK4VH0UFVtcueLqsg0utgyCzQMKm
ZAXcS8YQBKAvfsv8ghQN3iOp+2p5oj2BgrU8dqq3ZATHTTggjqcJYr9D/+1TbO1c
h60pMzeUsf6AMtWiuSA7eMy2l1IfERH7EniHnFDVaP5aJgMU0DYJlg7XdYvnaLWa
f8RIbIGpSJhjNEnqKh4FOuQiHowQ6cVPgIR70H5WER/fn87qCzP+OXvh0cYaf6WR
aRXgxKHV9fK4fXoduK3GKYKVwTtTFP5liz+p6uUwS6Zl96IiAEYuouMnYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMUXkfYoieEPJMeUPLrMWZ0EemYkMB8GA1UdIwQY
MBaAFFdFN9VPNvFCIxvIFwOIcstgeyHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQt
NGI4OWQzNzc4MDhlLzEveFJlUjlpaUo0UThreDVROHVzeFpuUVI2WmlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQtNGI4OWQzNzc4MDhl
LzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCH8HUAwQC
Wey8MA0GCSqGSIb3DQEBCwUAA4IBAQBLhzTGIDO8a9pvnPxEZTlkpUdTOUqGxpA7
ylKC/vCpAQ1VWgrL5Ee8PyB25oWg3trDPLv9OkTdY2U9qVM8uWWs7vKSyKA6oB+6
OJ58DdXzG0cCKK/KMaUZ2JHuRRP+QUCIDVkIJdP7GX/bZhiBUlKbJx4Z30SPfvBX
k05B8eZVXw9Ad50WjcI3n/jouIFHn9avOVgASuMHnGSVwILUbL/QKX75eqybZRIL
6dZeIGDo36tbxd5odM7lh5DqsvvrJuxRrXmDznAl10UTp+5WH90nCm7QW5qNLcMf
KGrZij2iyNIhbqnvRaT5amB3R4w5WRYN7hKpY+WCoYYkl46tqPSl
-----END CERTIFICATE-----
Generated at Thu Sep 14 14:42:45 2023 by rpki-client on console-fra.rpki-client.org