Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/u77P9CzyjgirgKq55AKmiLeOOqU.roa
File: u77P9CzyjgirgKq55AKmiLeOOqU.roa (raw, json)
Hash identifier: P5rs9FDFa2nqEq6vGXwOmVr4oWCGJKCNnOOmSzCWe9g=
Subject key identifier: BB:BE:CF:F4:2C:F2:8E:08:AB:80:AA:B9:E4:02:A6:88:B7:8E:3A:A5
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 018570E76E58744CCF6025C59590C5E9DE6A
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/u77P9CzyjgirgKq55AKmiLeOOqU.roa
Signing time: Mon 02 Jan 2023 05:14:53 +0000
ROA not before: Mon 02 Jan 2023 05:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197617
IP address blocks: 31.24.64.0/22 maxlen: 22
31.24.71.0/24 maxlen: 24
31.24.65.0/24 maxlen: 24
31.24.70.0/24 maxlen: 24
185.61.108.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:6e:58:74:4c:cf:60:25:c5:95:90:c5:e9:de:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Jan 2 05:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbbecff42cf28e08ab80aab9e402a688b78e3aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:89:e3:ef:ff:b2:e6:a7:f7:ed:e4:98:3d:
45:38:85:3d:52:98:ba:8c:d4:2d:62:3c:ae:fa:e1:
f7:99:b5:68:45:58:86:9c:12:08:f3:fc:0d:8b:b7:
a9:6d:91:d7:a0:d2:e8:47:66:2a:a6:2c:e0:5f:98:
72:5e:62:2e:30:08:84:a4:71:37:8b:c2:e4:21:1e:
1b:43:2a:7d:09:f8:8b:cf:4d:36:97:b1:c4:b6:ec:
13:bc:b0:3d:92:aa:87:09:ce:ae:56:1c:32:69:89:
e9:2e:fa:71:66:95:28:5c:32:56:ae:22:c8:c9:a8:
fd:21:ba:c5:ff:03:fb:6f:a5:d9:e2:6b:10:45:03:
da:11:7d:19:ee:bb:57:89:f5:c7:57:ff:a8:1e:3b:
02:36:2c:dd:89:2e:28:1b:b3:e8:1b:98:2c:21:6c:
e2:f5:9e:cb:24:11:61:27:59:95:c3:b2:42:d3:b5:
5c:26:81:69:22:06:a1:00:5a:52:91:f5:91:9b:8f:
cf:c8:dc:aa:f7:b8:f9:74:58:0e:c9:45:d5:20:19:
cf:e8:5c:c1:43:e3:fd:d4:3a:1d:1b:fc:0f:d1:1c:
7d:24:83:79:89:4b:90:90:72:3e:d8:e2:d4:42:41:
52:2f:14:87:ea:d9:05:72:f4:51:3b:5a:c7:63:8e:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BE:CF:F4:2C:F2:8E:08:AB:80:AA:B9:E4:02:A6:88:B7:8E:3A:A5
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/u77P9CzyjgirgKq55AKmiLeOOqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.64.0/22
31.24.70.0/23
185.61.108.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:6f:9a:75:b1:05:ce:ad:64:cf:57:23:4a:4a:26:0c:22:c6:
d0:8d:c8:10:a4:5b:31:af:7a:17:1f:f9:14:d6:cf:c3:c1:e7:
e2:e8:22:a8:62:4d:f8:bb:06:65:2b:4d:a5:af:d2:01:ae:cd:
ce:0d:66:81:3a:89:d1:d4:5d:7d:ed:55:49:bf:67:4a:0d:d8:
ec:3c:7b:fa:b7:15:26:66:36:e8:df:89:49:55:ca:24:43:d3:
82:0d:ef:3b:b2:7b:3d:b2:2d:25:71:4b:cc:50:54:8a:e7:f5:
eb:04:84:1e:c6:9a:75:c8:cc:1f:cf:af:35:bb:7c:22:22:16:
da:4f:c6:ba:00:dc:19:df:cf:6a:b1:0c:b4:a1:ad:d7:a4:26:
7b:65:5c:85:c3:dd:99:c2:fe:e7:5b:5a:f4:bc:7b:87:65:1c:
45:14:7d:ca:e8:c3:eb:6f:e4:fd:f9:a8:8c:c0:67:f4:95:86:
90:07:b7:33:e4:1d:61:03:22:2c:9d:07:95:ea:09:f2:58:0e:
6e:5d:70:9d:8c:83:a5:5e:8c:a0:0e:ad:21:f1:51:3d:7f:6c:
f3:c6:bc:7d:6c:78:b6:e3:24:e0:95:04:5e:d8:22:95:7c:e1:
c6:f4:e0:a6:f1:8c:e5:f8:71:d4:f3:00:c3:25:1f:47:72:b5:
96:69:1a:28
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVw525YdEzPYCXFlZDF6d5qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MjJhZDQzNDcxYjYwNmJjYzg1M2JiYTExYjhlZDY2M2Mx
NTE4ODIwHhcNMjMwMTAyMDUxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmJlY2ZmNDJjZjI4ZTA4YWI4MGFhYjllNDAyYTY4OGI3OGUzYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PuJ4+//suan9+3kmD1FOIU9Upi6
jNQtYjyu+uH3mbVoRViGnBII8/wNi7epbZHXoNLoR2YqpizgX5hyXmIuMAiEpHE3
i8LkIR4bQyp9CfiLz002l7HEtuwTvLA9kqqHCc6uVhwyaYnpLvpxZpUoXDJWriLI
yaj9IbrF/wP7b6XZ4msQRQPaEX0Z7rtXifXHV/+oHjsCNizdiS4oG7PoG5gsIWzi
9Z7LJBFhJ1mVw7JC07VcJoFpIgahAFpSkfWRm4/PyNyq97j5dFgOyUXVIBnP6FzB
Q+P91DodG/wP0Rx9JIN5iUuQkHI+2OLUQkFSLxSH6tkFcvRRO1rHY477/QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLu+z/Qs8o4Iq4CqueQCpoi3jjqlMB8GA1UdIwQY
MBaAFMcirUNHG2BrzIU7uhG47WY8FRiCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kM2EwYjEtMDhhMC00NGRkLTg3NzQt
MDY2ZmZlZmQwY2FiLzEvdTc3UDlDenlqZ2lyZ0txNTVBS21pTGVPT3FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9kM2EwYjEtMDhhMC00NGRkLTg3NzQtMDY2ZmZlZmQwY2Fi
LzEveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCHxhAAwQB
HxhGAwQCuT1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9b5p1sQXOrWTPVyNKSiYMIsbQ
jcgQpFsxr3oXH/kU1s/Dwefi6CKoYk34uwZlK02lr9IBrs3ODWaBOonR1F197VVJ
v2dKDdjsPHv6txUmZjbo34lJVcokQ9OCDe87sns9si0lcUvMUFSK5/XrBIQexpp1
yMwfz681u3wiIhbaT8a6ANwZ389qsQy0oa3XpCZ7ZVyFw92Zwv7nW1r0vHuHZRxF
FH3K6MPrb+T9+aiMwGf0lYaQB7cz5B1hAyIsnQeV6gnyWA5uXXCdjIOlXoygDq0h
8VE9f2zzxrx9bHi24yTglQRe2CKVfOHG9OCm8Yzl+HHU8wDDJR9HcrWWaRoo
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:51 2024 by rpki-client on console-ams.rpki-client.org