Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/R5ltmZ5X0Dk0L517Qj9vIlr7WCY.roa
File: R5ltmZ5X0Dk0L517Qj9vIlr7WCY.roa (raw, json)
Hash identifier: 4spvgLixpo7jDPVNunQGIdhAQ2+YrRvGYxa9i7ebOYc=
Subject key identifier: 47:99:6D:99:9E:57:D0:39:34:2F:9D:7B:42:3F:6F:22:5A:FB:58:26
Certificate issuer: /CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Certificate serial: 01856E2FB9DAC89090712AF40DB04310F61E
Authority key identifier: E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/R5ltmZ5X0Dk0L517Qj9vIlr7WCY.roa
Signing time: Sun 01 Jan 2023 16:34:59 +0000
ROA not before: Sun 01 Jan 2023 16:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43915
IP address blocks: 31.210.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:b9:da:c8:90:90:71:2a:f4:0d:b0:43:10:f6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Validity
Not Before: Jan 1 16:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47996d999e57d039342f9d7b423f6f225afb5826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:48:50:82:1f:ba:60:1b:70:cb:80:8c:7b:
ef:c0:ab:e0:bf:5c:2f:29:f8:ec:05:fb:70:46:30:
0d:a8:b6:be:27:92:59:5a:03:5a:f0:6d:c6:f5:32:
20:61:e0:36:37:ee:de:f3:dd:eb:ab:60:93:ee:1f:
23:b5:c0:27:0d:5a:65:c6:29:f4:69:c7:0d:ca:60:
80:ca:21:30:b0:87:fc:53:c5:2c:25:b0:c3:7e:6c:
61:e8:4d:e7:fd:c8:f6:ef:f0:aa:ec:20:76:65:ce:
35:10:db:f9:34:62:c5:57:67:97:d3:5b:93:a8:5a:
2b:8d:c6:44:85:9e:7c:16:3c:78:03:c5:e5:2b:72:
1a:08:23:53:72:52:d3:8d:a4:6e:ad:2d:3a:22:ef:
df:85:1d:ec:8c:0e:56:23:7b:40:67:c7:b3:11:19:
a5:61:ca:5e:e2:10:18:4e:50:1b:a1:0f:52:45:08:
00:f9:2a:5d:af:0a:5d:40:b6:05:23:0c:c4:a7:8d:
be:93:16:0a:e9:79:36:c4:98:27:c4:ef:32:72:40:
39:d5:6f:36:bc:94:dc:1b:98:a8:3a:1b:08:bd:76:
a6:df:2c:a0:2b:7d:3e:79:b2:5b:72:50:7b:40:23:
71:6a:a6:47:e4:25:24:7a:69:ca:e7:64:1b:ae:62:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:99:6D:99:9E:57:D0:39:34:2F:9D:7B:42:3F:6F:22:5A:FB:58:26
X509v3 Authority Key Identifier:
keyid:E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/R5ltmZ5X0Dk0L517Qj9vIlr7WCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:9e:ed:e4:7a:44:a3:a7:d1:b7:83:3b:7d:f8:7c:37:8d:1e:
cf:61:64:71:6c:47:b9:98:25:62:20:33:2c:74:11:60:b3:a5:
dc:ab:9f:b8:b8:f3:03:fe:c0:52:a0:4f:4e:8a:12:f9:49:46:
39:a3:de:c8:d1:a8:8c:fd:41:c3:3e:15:b8:44:81:ab:b8:77:
a8:ef:db:e4:6a:b9:a0:4e:c0:29:3e:42:4b:a1:4a:a4:f2:a4:
15:f4:8e:9c:66:21:fe:53:04:fe:68:2b:dc:03:11:83:cd:43:
2e:40:d2:0d:aa:36:26:75:49:93:9b:5c:3c:ce:85:78:2b:9b:
1e:c7:95:7c:61:f5:92:40:cb:07:88:d3:45:d3:43:8a:5a:a5:
20:13:46:f1:5d:bd:4e:77:89:cd:c7:23:6f:2b:fb:de:b3:ec:
ba:f2:8b:cf:ea:ad:43:04:82:cd:39:1e:c3:23:07:63:33:ae:
e4:95:98:c2:73:51:e2:be:fd:59:50:2b:12:f3:8c:68:17:d4:
92:59:1a:6c:dc:29:d9:bd:b7:c0:fc:5f:f9:d5:c3:86:cc:db:
f6:3c:f6:0f:82:ee:be:10:5b:39:9b:39:2f:ed:cc:08:9a:03:
5f:4a:be:ca:e2:53:0a:30:9a:d3:8c:fc:79:c4:d1:8c:3c:ea:
a9:d0:be:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuL7nayJCQcSr0DbBDEPYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4N2NjNjgwYzg1OTgzZTdiZjc0NDk4ZDBlNmJlODAwZjg2
NDUxYzMwHhcNMjMwMTAxMTYzNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Nzk5NmQ5OTllNTdkMDM5MzQyZjlkN2I0MjNmNmYyMjVhZmI1ODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBVIUIIfumAbcMuAjHvvwKvgv1wv
KfjsBftwRjANqLa+J5JZWgNa8G3G9TIgYeA2N+7e893rq2CT7h8jtcAnDVplxin0
accNymCAyiEwsIf8U8UsJbDDfmxh6E3n/cj27/Cq7CB2Zc41ENv5NGLFV2eX01uT
qForjcZEhZ58Fjx4A8XlK3IaCCNTclLTjaRurS06Iu/fhR3sjA5WI3tAZ8ezERml
Ycpe4hAYTlAboQ9SRQgA+SpdrwpdQLYFIwzEp42+kxYK6Xk2xJgnxO8yckA51W82
vJTcG5ioOhsIvXam3yygK30+ebJbclB7QCNxaqZH5CUkemnK52QbrmI0SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEeZbZmeV9A5NC+de0I/byJa+1gmMB8GA1UdIwQY
MBaAFOh8xoDIWYPnv3RJjQ5r6AD4ZFHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkh6R2dNaFpnLWVfZEVtTkRtdm9BUGhrVWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yOWFmNTktMGI3Yi00ZDgwLThmOWYt
MTRkMDJlMzBkMjI3LzEvUjVsdG1aNVgwRGswTDUxN1FqOXZJbHI3V0NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yOWFmNTktMGI3Yi00ZDgwLThmOWYtMTRkMDJlMzBkMjI3
LzEvNkh6R2dNaFpnLWVfZEVtTkRtdm9BUGhrVWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9IbMA0G
CSqGSIb3DQEBCwUAA4IBAQBvnu3kekSjp9G3gzt9+Hw3jR7PYWRxbEe5mCViIDMs
dBFgs6Xcq5+4uPMD/sBSoE9OihL5SUY5o97I0aiM/UHDPhW4RIGruHeo79vkarmg
TsApPkJLoUqk8qQV9I6cZiH+UwT+aCvcAxGDzUMuQNINqjYmdUmTm1w8zoV4K5se
x5V8YfWSQMsHiNNF00OKWqUgE0bxXb1Od4nNxyNvK/ves+y68ovP6q1DBILNOR7D
IwdjM67klZjCc1Hivv1ZUCsS84xoF9SSWRps3CnZvbfA/F/51cOGzNv2PPYPgu6+
EFs5mzkv7cwImgNfSr7K4lMKMJrTjPx5xNGMPOqp0L41
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:39 2024 by rpki-client on console-fra.rpki-client.org