Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/dg6C4VHtWq5ZqFJhI6vzGzvjjUQ.roa
File: dg6C4VHtWq5ZqFJhI6vzGzvjjUQ.roa (raw, json)
Hash identifier: RW9WN5yCLl+TGG5oPV8y2SOvSitaPxwkZZeZB8PvJro=
Subject key identifier: 76:0E:82:E1:51:ED:5A:AE:59:A8:52:61:23:AB:F3:1B:3B:E3:8D:44
Certificate issuer: /CN=85927a93283d62ce672efa1f9bef57a2356118aa
Certificate serial: 018570674734556BA3CD7972047DD7B09CD6
Authority key identifier: 85:92:7A:93:28:3D:62:CE:67:2E:FA:1F:9B:EF:57:A2:35:61:18:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/dg6C4VHtWq5ZqFJhI6vzGzvjjUQ.roa
Signing time: Mon 02 Jan 2023 02:54:54 +0000
ROA not before: Mon 02 Jan 2023 02:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203649
IP address blocks: 193.31.64.0/24 maxlen: 24
193.31.67.0/24 maxlen: 24
193.31.65.0/24 maxlen: 24
193.31.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:47:34:55:6b:a3:cd:79:72:04:7d:d7:b0:9c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85927a93283d62ce672efa1f9bef57a2356118aa
Validity
Not Before: Jan 2 02:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=760e82e151ed5aae59a8526123abf31b3be38d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:88:6c:0c:7d:58:9a:2d:9a:dd:57:35:5c:8b:
63:b5:03:93:a8:59:7d:11:07:e3:ec:26:9b:d4:c4:
04:0c:77:88:7c:60:51:73:67:65:c2:77:d4:e4:ca:
80:a0:e0:d8:e5:d8:ae:4c:d2:f7:52:15:b7:5b:d0:
c2:fe:81:6c:4f:74:ed:25:3a:b0:3a:fa:37:93:72:
ca:97:ed:fe:50:9b:cc:79:46:96:8c:6a:a3:af:96:
1a:6e:e9:6d:67:e9:54:2d:02:49:70:df:85:a4:00:
37:34:b4:97:3d:aa:55:b5:30:27:88:66:cf:b3:96:
4b:b2:a3:01:5f:9c:d4:24:ef:9e:66:0f:4d:94:13:
83:82:3b:ad:e0:83:e8:fb:de:8c:71:55:e1:a3:e1:
ef:0e:a4:c9:68:73:69:d3:5f:7c:ca:ac:53:22:65:
e4:0c:98:24:82:65:87:2c:a6:9c:a4:bb:ba:35:0a:
4a:93:43:bd:a3:27:45:af:a9:ff:0a:ab:08:47:d9:
0f:d9:6d:cf:00:ec:94:60:0b:3f:91:d2:f3:ac:c8:
11:d1:5a:3b:b9:f8:59:d4:1f:06:70:70:ba:2f:ae:
63:84:11:aa:cc:a9:eb:bb:47:3f:de:fc:01:05:23:
a3:87:08:1c:20:bf:c8:11:73:4d:48:16:1f:19:83:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0E:82:E1:51:ED:5A:AE:59:A8:52:61:23:AB:F3:1B:3B:E3:8D:44
X509v3 Authority Key Identifier:
keyid:85:92:7A:93:28:3D:62:CE:67:2E:FA:1F:9B:EF:57:A2:35:61:18:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/dg6C4VHtWq5ZqFJhI6vzGzvjjUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.64.0/22
Signature Algorithm: sha256WithRSAEncryption
72:d9:bf:be:ba:10:af:31:78:27:70:5c:f2:5a:9f:05:0d:b0:
c0:af:2a:54:06:5c:23:e4:82:a9:1a:42:32:79:e6:14:d7:68:
ea:ff:48:7e:ae:be:eb:81:84:12:b0:db:8e:11:ef:d0:71:f4:
a5:3a:ee:c6:6e:bc:e1:cf:7d:86:cf:30:aa:e1:27:55:b3:0e:
b4:ea:a0:76:a5:33:8a:a3:c9:e9:5a:03:9e:99:19:4d:c2:75:
32:56:b7:74:9f:93:ed:b3:18:4d:c7:d8:b7:d7:84:79:ed:3d:
47:cc:65:f8:9e:e5:43:e1:8b:99:0c:83:bc:22:15:d0:c9:ac:
a8:30:59:4f:e6:71:72:b0:dd:23:ec:2d:57:9b:1e:32:50:0c:
33:f3:2b:b5:24:a6:f1:5f:41:7a:ac:26:93:eb:6d:2d:4f:d5:
5a:37:61:ca:9a:75:10:58:50:3a:69:2c:52:3c:77:f4:bc:f7:
2c:d7:28:c8:96:5d:2b:31:01:a9:81:4d:27:bf:5b:a8:c0:2c:
57:8c:74:c8:3c:21:a0:ce:08:a1:ca:49:b9:2e:c8:5a:74:b5:
23:d5:f7:81:31:f2:94:8c:9a:16:38:74:fb:85:17:d9:3d:dc:
5d:6b:12:f4:58:76:56:d8:d8:61:6c:cc:16:61:25:86:fe:b0:
e2:fe:35:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZ0c0VWujzXlyBH3XsJzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OTI3YTkzMjgzZDYyY2U2NzJlZmExZjliZWY1N2EyMzU2
MTE4YWEwHhcNMjMwMTAyMDI1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjBlODJlMTUxZWQ1YWFlNTlhODUyNjEyM2FiZjMxYjNiZTM4ZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ohsDH1Ymi2a3Vc1XItjtQOTqFl9
EQfj7Cab1MQEDHeIfGBRc2dlwnfU5MqAoODY5diuTNL3UhW3W9DC/oFsT3TtJTqw
Ovo3k3LKl+3+UJvMeUaWjGqjr5YabultZ+lULQJJcN+FpAA3NLSXPapVtTAniGbP
s5ZLsqMBX5zUJO+eZg9NlBODgjut4IPo+96McVXho+HvDqTJaHNp0198yqxTImXk
DJgkgmWHLKacpLu6NQpKk0O9oydFr6n/CqsIR9kP2W3PAOyUYAs/kdLzrMgR0Vo7
ufhZ1B8GcHC6L65jhBGqzKnru0c/3vwBBSOjhwgcIL/IEXNNSBYfGYMOIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHYOguFR7VquWahSYSOr8xs7441EMB8GA1UdIwQY
MBaAFIWSepMoPWLOZy76H5vvV6I1YRiqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpKNmt5ZzlZczVuTHZvZm0tOVhvalZoR0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82NWY2MDktMzNlZi00Y2E5LTgyYTYt
NzlhZDQ5OTE4Njk0LzEvZGc2QzRWSHRXcTVacUZKaEk2dnpHenZqalVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82NWY2MDktMzNlZi00Y2E5LTgyYTYtNzlhZDQ5OTE4Njk0
LzEvaFpKNmt5ZzlZczVuTHZvZm0tOVhvalZoR0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwR9AMA0G
CSqGSIb3DQEBCwUAA4IBAQBy2b++uhCvMXgncFzyWp8FDbDArypUBlwj5IKpGkIy
eeYU12jq/0h+rr7rgYQSsNuOEe/QcfSlOu7Gbrzhz32GzzCq4SdVsw606qB2pTOK
o8npWgOemRlNwnUyVrd0n5PtsxhNx9i314R57T1HzGX4nuVD4YuZDIO8IhXQyayo
MFlP5nFysN0j7C1Xmx4yUAwz8yu1JKbxX0F6rCaT620tT9VaN2HKmnUQWFA6aSxS
PHf0vPcs1yjIll0rMQGpgU0nv1uowCxXjHTIPCGgzgihykm5LshadLUj1feBMfKU
jJoWOHT7hRfZPdxdaxL0WHZW2NhhbMwWYSWG/rDi/jUD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:26 2024 by rpki-client on console-ams.rpki-client.org