Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/yDTlPrwrzkXK51KnPHtcNfRN18U.roa
File: yDTlPrwrzkXK51KnPHtcNfRN18U.roa (raw, json)
Hash identifier: VXYpVfmK9TRFOmfFi7SEc/4g+0KihP7CC/x6gAedG8E=
Subject key identifier: C8:34:E5:3E:BC:2B:CE:45:CA:E7:52:A7:3C:7B:5C:35:F4:4D:D7:C5
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 018CC9BC137F2AA9E12F43451B66E5720060
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/yDTlPrwrzkXK51KnPHtcNfRN18U.roa
Signing time: Tue 02 Jan 2024 10:33:15 +0000
ROA not before: Tue 02 Jan 2024 10:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57641
IP address blocks: 178.22.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 16:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:13:7f:2a:a9:e1:2f:43:45:1b:66:e5:72:00:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jan 2 10:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c834e53ebc2bce45cae752a73c7b5c35f44dd7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:29:37:fb:24:65:aa:87:75:6a:32:fd:34:
01:e6:5d:51:d7:25:a4:3a:7b:85:39:71:b5:1b:7d:
d3:20:b9:23:1b:2d:ef:7c:4c:cf:ee:44:5b:cb:ee:
7b:b6:1e:ce:bf:ab:62:b5:08:e0:19:aa:02:97:30:
47:3e:eb:45:9d:7e:5e:d2:d1:bd:f1:15:a0:a0:bd:
09:af:dc:cd:91:0d:35:c9:a7:a7:09:1d:8e:6d:ce:
75:a6:93:89:5d:cb:03:c5:2d:63:a1:87:56:10:62:
e3:a7:01:39:c6:8b:77:0b:f3:6c:4e:d4:2a:b1:43:
1f:29:2c:54:24:0d:3c:4f:6c:51:18:f4:69:3b:25:
34:46:34:be:0d:96:dd:df:f3:4f:31:9d:c2:5c:2b:
df:b4:cd:14:02:10:cb:d8:c0:19:7c:7b:94:cd:3f:
be:05:c3:22:60:e8:7f:fc:5b:d6:ca:75:3b:da:3a:
d0:a8:25:1b:71:a4:85:a3:54:12:99:51:71:9e:c0:
e8:84:e4:70:39:d0:99:4a:05:ec:da:3a:66:c4:14:
aa:fc:a1:f6:5b:d6:f5:26:73:3c:7d:9e:88:e2:a8:
de:98:ab:d4:7c:07:e0:1d:97:19:ea:53:c8:7a:dd:
1d:f1:6b:93:80:08:fc:65:13:18:25:1c:bc:b3:c8:
06:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:34:E5:3E:BC:2B:CE:45:CA:E7:52:A7:3C:7B:5C:35:F4:4D:D7:C5
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/yDTlPrwrzkXK51KnPHtcNfRN18U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.31.0/24
Signature Algorithm: sha256WithRSAEncryption
19:12:59:9f:14:a6:97:8d:44:43:53:4a:89:69:19:15:2c:ad:
21:26:b7:40:ba:58:57:a7:77:d9:8e:80:95:cb:25:97:e0:61:
da:89:63:02:21:ce:f7:9e:54:a1:27:e2:c3:5c:30:d0:0f:33:
4f:bd:07:0c:36:73:8f:a2:42:94:64:a9:56:46:41:1f:3a:aa:
e9:c0:ba:c4:4b:ed:75:27:4c:f6:fc:77:8c:95:5b:59:20:60:
e6:55:67:83:2d:5a:66:ad:4c:9b:cb:5c:00:48:a4:06:37:0b:
65:52:d9:80:a2:53:dd:d0:c8:66:5f:9a:35:f2:44:cc:7c:74:
b5:60:d3:94:b9:16:f3:be:45:64:a3:46:9b:99:b8:12:56:29:
ca:12:59:0f:4f:74:9d:76:9f:63:9c:33:35:3b:9a:4e:58:39:
e3:46:bf:c8:e4:23:c7:9a:f8:2f:51:18:3e:b4:c5:83:9b:1e:
fb:a8:17:33:5b:c0:c5:19:c2:07:69:8b:f1:07:6c:df:69:ad:
9c:f0:81:14:cc:5c:fe:1b:5c:49:30:3b:d4:47:51:64:b6:1c:
90:eb:82:32:48:01:20:d8:a8:61:8e:dd:25:57:5d:2b:ef:50:
62:26:5e:57:58:54:42:7e:75:e4:29:ec:29:e2:8c:db:84:e4:
c5:2c:19:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvBN/KqnhL0NFG2blcgBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi
OWQ2ZDYwHhcNMjQwMTAyMTAzMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODM0ZTUzZWJjMmJjZTQ1Y2FlNzUyYTczYzdiNWMzNWY0NGRkN2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CspN/skZaqHdWoy/TQB5l1R1yWk
OnuFOXG1G33TILkjGy3vfEzP7kRby+57th7Ov6titQjgGaoClzBHPutFnX5e0tG9
8RWgoL0Jr9zNkQ01yaenCR2Obc51ppOJXcsDxS1joYdWEGLjpwE5xot3C/NsTtQq
sUMfKSxUJA08T2xRGPRpOyU0RjS+DZbd3/NPMZ3CXCvftM0UAhDL2MAZfHuUzT++
BcMiYOh//FvWynU72jrQqCUbcaSFo1QSmVFxnsDohORwOdCZSgXs2jpmxBSq/KH2
W9b1JnM8fZ6I4qjemKvUfAfgHZcZ6lPIet0d8WuTgAj8ZRMYJRy8s8gGdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMg05T68K85FyudSpzx7XDX0TdfFMB8GA1UdIwQY
MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt
NTViNjU5Y2Q4MmJiLzEveURUbFByd3J6a1hLNTFLblBIdGNOZlJOMThVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi
LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshYfMA0G
CSqGSIb3DQEBCwUAA4IBAQAZElmfFKaXjURDU0qJaRkVLK0hJrdAulhXp3fZjoCV
yyWX4GHaiWMCIc73nlShJ+LDXDDQDzNPvQcMNnOPokKUZKlWRkEfOqrpwLrES+11
J0z2/HeMlVtZIGDmVWeDLVpmrUyby1wASKQGNwtlUtmAolPd0MhmX5o18kTMfHS1
YNOUuRbzvkVko0abmbgSVinKElkPT3Sddp9jnDM1O5pOWDnjRr/I5CPHmvgvURg+
tMWDmx77qBczW8DFGcIHaYvxB2zfaa2c8IEUzFz+G1xJMDvUR1FkthyQ64IySAEg
2Khhjt0lV10r71BiJl5XWFRCfnXkKewp4ozbhOTFLBlM
-----END CERTIFICATE-----
Generated at Tue Mar 12 19:56:38 2024 by rpki-client on console-fra.rpki-client.org