Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/lROvLJT15VHF_V0r0MaN6wIvSZw.roa
File: lROvLJT15VHF_V0r0MaN6wIvSZw.roa (raw, json)
Hash identifier: WbRBGUzmY/vNpL/5tN0gcy90zGyySusI+sYiNUK+ZLU=
Subject key identifier: 95:13:AF:2C:94:F5:E5:51:C5:FD:5D:2B:D0:C6:8D:EB:02:2F:49:9C
Certificate issuer: /CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Certificate serial: 0191DB99B342D88F3ECAAA7862E5D7D4E383
Authority key identifier: 79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/lROvLJT15VHF_V0r0MaN6wIvSZw.roa
Signing time: Tue 10 Sep 2024 11:02:48 +0000
ROA not before: Tue 10 Sep 2024 11:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197651
IP address blocks: 31.177.16.0/22 maxlen: 22
31.177.18.0/24 maxlen: 24
31.177.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 14:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:99:b3:42:d8:8f:3e:ca:aa:78:62:e5:d7:d4:e3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Validity
Not Before: Sep 10 11:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9513af2c94f5e551c5fd5d2bd0c68deb022f499c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:74:ef:26:17:3f:64:05:74:55:4c:57:0e:
fa:0a:18:f3:4c:99:53:f6:f1:20:c0:01:c9:c2:99:
f8:85:b6:94:96:78:85:7c:c5:bb:ec:8b:f3:7c:8a:
c3:7a:b0:b0:3c:09:2b:f2:fd:c1:76:fc:f7:8b:ce:
db:08:5f:36:72:0e:85:ae:48:cd:ed:91:6b:d4:af:
0b:a9:fd:b2:6a:2e:e5:4d:d7:ad:c1:16:e1:54:58:
54:b0:93:12:42:d3:14:df:bc:b7:bd:38:9c:00:f6:
4c:08:bd:43:d4:07:e4:0c:84:f3:68:26:22:69:e0:
cd:33:68:0a:ad:98:de:9c:f0:f1:8a:8e:5b:4b:09:
bc:76:20:44:32:b6:b1:ef:bc:da:17:1b:8c:b1:33:
c3:80:58:d4:81:ad:a8:00:b4:24:84:cd:aa:6b:2b:
64:b9:dd:27:89:1b:0d:f8:a0:f3:ea:1f:8e:86:8e:
0c:37:30:38:ff:03:0a:2f:83:68:be:3b:2f:1e:17:
c6:ec:13:b0:92:a7:e0:7c:1b:5f:34:a1:e6:30:f3:
c6:fe:2f:d6:98:07:e9:c8:00:fc:8e:e0:1f:3f:76:
34:2c:db:93:90:86:22:ff:4c:8d:9e:33:04:f8:ed:
1e:b2:86:59:41:34:8d:84:52:ee:c5:3a:2c:79:19:
fc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:13:AF:2C:94:F5:E5:51:C5:FD:5D:2B:D0:C6:8D:EB:02:2F:49:9C
X509v3 Authority Key Identifier:
keyid:79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/lROvLJT15VHF_V0r0MaN6wIvSZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.16.0/22
Signature Algorithm: sha256WithRSAEncryption
04:df:3b:25:ca:e3:87:8f:76:e1:86:98:5d:00:86:27:c4:e8:
ac:61:bd:b9:3f:9c:b1:89:bd:5b:a9:11:8e:c2:81:c3:91:be:
39:60:51:e1:11:59:0d:cd:aa:7a:55:af:26:31:ce:35:36:1e:
cd:01:1d:26:8b:87:2a:5c:6c:e1:09:be:e6:e3:3b:84:c2:82:
ab:9d:67:08:8f:19:ca:12:94:f0:a9:4c:00:51:a9:51:e0:2f:
a8:bd:fa:d8:d4:1a:a8:88:fd:34:c8:e7:a7:6e:bb:f3:5e:69:
16:4e:17:52:69:d0:22:5e:64:f9:80:0d:b3:bc:cc:ba:ac:c3:
1f:19:56:7a:a7:52:97:cb:18:70:d9:61:c9:da:0f:e8:6d:3d:
aa:09:2a:29:dd:fb:06:aa:51:b6:eb:c6:4f:58:b6:14:82:6f:
22:f0:4f:c9:d8:35:5f:8a:3c:81:b7:7e:9e:f2:fd:df:88:56:
c3:a6:eb:8b:56:76:09:13:10:92:9a:89:f6:19:96:81:56:8e:
cf:0f:99:29:fc:07:e5:6b:e2:55:74:8b:34:53:aa:58:3d:c2:
94:3b:ae:5e:cd:df:50:f2:ca:03:eb:28:10:97:63:b6:7f:f7:
26:f2:98:0e:16:c5:a4:75:9f:67:46:39:bd:5e:79:bc:19:62:
55:bc:77:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHbmbNC2I8+yqp4YuXX1OODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5M2Q5NjY0ZTI5YzBiZWI5MmM1NjczZGI2MDNhYjg0M2Uw
YzRjYWYwHhcNMjQwOTEwMTEwMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTEzYWYyYzk0ZjVlNTUxYzVmZDVkMmJkMGM2OGRlYjAyMmY0OTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0t07yYXP2QFdFVMVw76ChjzTJlT
9vEgwAHJwpn4hbaUlniFfMW77IvzfIrDerCwPAkr8v3Bdvz3i87bCF82cg6FrkjN
7ZFr1K8Lqf2yai7lTdetwRbhVFhUsJMSQtMU37y3vTicAPZMCL1D1AfkDITzaCYi
aeDNM2gKrZjenPDxio5bSwm8diBEMrax77zaFxuMsTPDgFjUga2oALQkhM2qaytk
ud0niRsN+KDz6h+Oho4MNzA4/wMKL4NovjsvHhfG7BOwkqfgfBtfNKHmMPPG/i/W
mAfpyAD8juAfP3Y0LNuTkIYi/0yNnjME+O0esoZZQTSNhFLuxToseRn8FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJUTryyU9eVRxf1dK9DGjesCL0mcMB8GA1UdIwQY
MBaAFHk9lmTinAvrksVnPbYDq4Q+DEyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVQyV1pPS2NDLXVTeFdjOXRnT3JoRDRNVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82ZWUwNjUtN2YyZS00MmU2LTliOTIt
Njg2Mzk5MDAwZDNiLzEvbFJPdkxKVDE1VkhGX1YwcjBNYU42d0l2U1p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82ZWUwNjUtN2YyZS00MmU2LTliOTItNjg2Mzk5MDAwZDNi
LzEvZVQyV1pPS2NDLXVTeFdjOXRnT3JoRDRNVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH7EQMA0G
CSqGSIb3DQEBCwUAA4IBAQAE3zslyuOHj3bhhphdAIYnxOisYb25P5yxib1bqRGO
woHDkb45YFHhEVkNzap6Va8mMc41Nh7NAR0mi4cqXGzhCb7m4zuEwoKrnWcIjxnK
EpTwqUwAUalR4C+ovfrY1BqoiP00yOenbrvzXmkWThdSadAiXmT5gA2zvMy6rMMf
GVZ6p1KXyxhw2WHJ2g/obT2qCSop3fsGqlG268ZPWLYUgm8i8E/J2DVfijyBt36e
8v3fiFbDpuuLVnYJExCSmon2GZaBVo7PD5kp/Afla+JVdIs0U6pYPcKUO65ezd9Q
8soD6ygQl2O2f/cm8pgOFsWkdZ9nRjm9Xnm8GWJVvHe1
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:58 2025 by rpki-client