Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/71KdiFRSGvQLJpboErJ5ebrSarY.roa
File: 71KdiFRSGvQLJpboErJ5ebrSarY.roa (raw, json)
Hash identifier: snfctbIcD8AL3JfmbQqXBPKGxhquW9ZFHoZloNTOilQ=
Subject key identifier: EF:52:9D:88:54:52:1A:F4:0B:26:96:E8:12:B2:79:79:BA:D2:6A:B6
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 018570706D5DCBC7735947DF5CF8D78413BE
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/71KdiFRSGvQLJpboErJ5ebrSarY.roa
Signing time: Mon 02 Jan 2023 03:04:54 +0000
ROA not before: Mon 02 Jan 2023 03:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56623
IP address blocks: 31.133.112.0/24 maxlen: 24
31.133.115.0/24 maxlen: 24
31.133.114.0/24 maxlen: 24
31.133.117.0/24 maxlen: 24
31.133.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:6d:5d:cb:c7:73:59:47:df:5c:f8:d7:84:13:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Jan 2 03:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef529d8854521af40b2696e812b27979bad26ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:40:ee:a0:cb:ed:eb:b9:36:10:3d:20:64:bd:
bc:95:c3:94:5c:e9:c1:c3:50:33:8d:b2:6a:3d:68:
f6:be:db:74:4c:5a:56:0d:ed:3a:af:6c:d1:5d:fa:
81:14:92:8e:5f:3e:ed:62:24:fc:10:e8:54:dd:1b:
42:de:82:2c:98:1c:71:87:1d:17:ee:49:6c:67:a2:
0f:1d:e0:87:6b:f6:71:44:ad:49:66:64:f4:46:d5:
cd:c4:99:b5:56:51:5f:84:c2:75:62:ed:30:03:ef:
cd:eb:4f:35:e2:c7:95:5f:f3:b5:97:df:50:50:59:
75:6c:64:f2:1f:1a:7d:8b:5d:1a:f0:42:02:89:8b:
7d:b5:a9:5e:ea:8c:fe:4a:4f:ac:b4:e4:10:f1:89:
3d:3e:4d:bb:e5:ba:2d:ba:f7:4b:0f:31:9f:83:80:
06:a6:81:45:97:bc:c6:05:a0:98:c8:5d:62:99:d5:
31:9f:41:01:c5:36:9e:cc:86:4e:53:19:b5:6b:08:
1a:ab:13:58:f9:5d:59:40:47:48:3b:75:1b:59:0f:
6d:b3:ec:3b:13:c6:cb:03:28:d5:f5:2d:b1:43:48:
68:25:f2:15:55:43:d0:05:de:e9:8a:ea:99:d7:fa:
78:08:b2:44:89:ff:d2:2e:47:a6:0f:e6:4e:4e:f6:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:52:9D:88:54:52:1A:F4:0B:26:96:E8:12:B2:79:79:BA:D2:6A:B6
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/71KdiFRSGvQLJpboErJ5ebrSarY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.112.0/22
31.133.117.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c8:7c:c9:18:02:c1:7a:9b:09:c1:f6:d9:43:b9:15:07:c1:
d0:af:8e:d6:09:4f:6c:39:62:07:d8:fc:8c:b4:f8:00:a9:00:
7f:30:28:ad:91:78:50:d0:39:63:8d:bf:e3:dd:5d:fb:19:43:
b2:0f:7c:ac:b1:4c:3f:1d:6a:7e:1b:82:96:9b:2f:a8:15:e5:
c2:8c:bd:a0:24:61:84:e0:4a:27:aa:75:11:8d:72:ab:84:9a:
fe:d3:21:16:9b:87:26:f1:6a:9d:0b:40:33:c6:ef:24:78:9d:
86:1b:c7:5f:0e:0a:88:9e:f6:c7:8e:89:55:95:4f:f8:33:f9:
be:8a:e2:c2:09:50:a1:78:d1:09:5a:6d:a9:a2:01:f0:7a:eb:
d3:db:2f:0d:86:c7:a8:93:a7:ef:db:c6:30:ed:36:73:2b:24:
90:da:9e:82:2d:3b:c6:81:b4:fd:3b:c7:2a:8b:ee:35:0a:22:
fd:31:ff:d4:82:f3:6b:cb:19:65:41:2c:4c:6d:3f:4b:f9:81:
47:36:34:e5:44:e7:7c:a8:ed:3b:a0:27:17:1a:9f:db:c2:0d:
7a:b2:0b:7e:10:65:0a:a8:0c:c4:a3:c1:32:ba:80:f0:6f:7d:
78:41:9c:bb:8a:5a:16:42:6f:4e:57:64:74:00:b8:27:93:27:
0f:00:57:d9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwcG1dy8dzWUffXPjXhBO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MzljYzE2MjFlZTMwMTBhZTk4ZTEyN2JkMjU0YTc4MzNm
ZDI4MjcwHhcNMjMwMTAyMDMwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjUyOWQ4ODU0NTIxYWY0MGIyNjk2ZTgxMmIyNzk3OWJhZDI2YWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUDuoMvt67k2ED0gZL28lcOUXOnB
w1AzjbJqPWj2vtt0TFpWDe06r2zRXfqBFJKOXz7tYiT8EOhU3RtC3oIsmBxxhx0X
7klsZ6IPHeCHa/ZxRK1JZmT0RtXNxJm1VlFfhMJ1Yu0wA+/N60814seVX/O1l99Q
UFl1bGTyHxp9i10a8EICiYt9tale6oz+Sk+stOQQ8Yk9Pk275botuvdLDzGfg4AG
poFFl7zGBaCYyF1imdUxn0EBxTaezIZOUxm1awgaqxNY+V1ZQEdIO3UbWQ9ts+w7
E8bLAyjV9S2xQ0hoJfIVVUPQBd7piuqZ1/p4CLJEif/SLkemD+ZOTvZRvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO9SnYhUUhr0CyaW6BKyeXm60mq2MB8GA1UdIwQY
MBaAFKk5zBYh7jAQrpjhJ70lSngz/SgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYt
YjA2MTk0ZDEzYzZiLzEvNzFLZGlGUlNHdlFMSnBib0VySjVlYnJTYXJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYtYjA2MTk0ZDEzYzZi
LzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCH4VwAwQA
H4V1MA0GCSqGSIb3DQEBCwUAA4IBAQCayHzJGALBepsJwfbZQ7kVB8HQr47WCU9s
OWIH2PyMtPgAqQB/MCitkXhQ0Dljjb/j3V37GUOyD3yssUw/HWp+G4KWmy+oFeXC
jL2gJGGE4EonqnURjXKrhJr+0yEWm4cm8WqdC0Azxu8keJ2GG8dfDgqInvbHjolV
lU/4M/m+iuLCCVCheNEJWm2pogHweuvT2y8Nhseok6fv28Yw7TZzKySQ2p6CLTvG
gbT9O8cqi+41CiL9Mf/UgvNryxllQSxMbT9L+YFHNjTlROd8qO07oCcXGp/bwg16
sgt+EGUKqAzEo8EyuoDwb314QZy7iloWQm9OV2R0ALgnkycPAFfZ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:59 2023 by rpki-client on console-fra.rpki-client.org