Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/vUq4HEMPYcu-bP1JRJ5t9n14UEc.roa
File: vUq4HEMPYcu-bP1JRJ5t9n14UEc.roa (raw, json)
Hash identifier: IMrrR1zPUOwMAHF2iDMRbD2Ew7G9Xl2C8r0HLch3TQI=
Subject key identifier: BD:4A:B8:1C:43:0F:61:CB:BE:6C:FD:49:44:9E:6D:F6:7D:78:50:47
Certificate issuer: /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial: 018570F0A8019CBB2B4A1C57CB3CE31A010C
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/vUq4HEMPYcu-bP1JRJ5t9n14UEc.roa
Signing time: Mon 02 Jan 2023 05:24:57 +0000
ROA not before: Mon 02 Jan 2023 05:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 31.25.14.0/24 maxlen: 24
31.25.13.0/24 maxlen: 24
31.25.12.0/24 maxlen: 24
185.197.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a8:01:9c:bb:2b:4a:1c:57:cb:3c:e3:1a:01:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Validity
Not Before: Jan 2 05:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd4ab81c430f61cbbe6cfd49449e6df67d785047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:ec:8e:01:bf:f5:ae:bc:f1:c8:df:0b:96:
61:6f:56:62:ef:b4:ed:5e:e9:db:e1:2f:c8:46:90:
86:97:7a:c1:dc:0b:e1:16:a6:82:7e:1d:54:78:7e:
36:4b:75:05:29:82:29:49:7c:92:66:28:49:46:3d:
63:c4:b4:fb:72:7a:d3:3f:2e:3d:1c:2b:b1:09:21:
7f:ce:f2:67:b2:2f:bf:97:fd:17:1f:dc:b9:3c:04:
3d:7b:94:c0:98:ee:b2:88:7a:e1:6d:6f:d9:43:09:
b0:9c:35:28:ed:eb:b9:9f:1e:ab:cf:d8:d2:e2:0f:
de:e4:46:5f:a4:56:26:0a:13:0a:a9:33:85:45:e9:
1e:13:78:f7:74:e7:64:fa:f1:01:95:7d:94:87:a4:
a5:9b:9d:09:3e:1c:67:78:e9:0d:9e:77:f4:7d:e6:
1f:7d:96:b5:e7:94:1f:b1:23:bb:69:9d:43:bf:a5:
9d:1e:6e:a0:c5:82:2f:99:85:45:cf:8f:e4:cc:df:
a8:4a:86:b7:8c:03:0e:6f:80:9b:09:20:3c:fc:e7:
77:8e:e0:fd:ff:b4:e4:48:d0:df:f3:f0:ac:69:40:
37:5c:3d:c0:4b:7e:9b:89:f0:20:12:00:2c:7b:9d:
de:2b:e8:13:dd:cc:00:5c:1d:0a:ac:fc:a4:c9:72:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4A:B8:1C:43:0F:61:CB:BE:6C:FD:49:44:9E:6D:F6:7D:78:50:47
X509v3 Authority Key Identifier:
keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/vUq4HEMPYcu-bP1JRJ5t9n14UEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.12.0-31.25.14.255
185.197.148.0/24
Signature Algorithm: sha256WithRSAEncryption
23:19:2d:bd:24:23:6e:50:1d:24:fc:2a:cb:54:7b:1c:da:c8:
af:9c:c7:0c:a9:3a:5b:42:2b:3c:29:99:83:a4:af:82:9a:1e:
9d:38:53:2a:21:a0:5d:47:d4:07:54:5c:2a:b5:d7:8d:ca:5f:
ab:d2:50:42:0d:e2:93:71:a4:4e:ae:4d:51:c1:9a:e5:fb:5d:
97:17:df:bf:fc:84:db:71:9c:d8:fb:95:ad:b4:7f:6e:f7:af:
96:7a:3b:33:ad:59:f0:84:27:fa:39:47:65:7d:62:fb:45:76:
6e:1d:0f:86:3f:b6:87:7c:98:3b:ae:a1:75:99:87:a5:18:6a:
b3:03:12:23:27:65:b1:a9:aa:bd:be:89:c6:88:45:b1:0b:57:
bc:61:66:51:f3:32:ef:b5:ce:e3:1e:96:4e:42:e5:b8:3a:eb:
ae:d8:67:80:ec:6d:26:75:06:a6:9c:de:8a:af:eb:28:82:ae:
23:28:26:74:20:a6:53:8a:d4:b0:5c:88:5e:08:51:6e:ea:45:
f1:9c:15:af:b2:3a:55:f2:7d:ef:ca:75:79:29:36:9f:4f:05:
4d:c6:2c:28:fc:83:e6:d5:5e:f4:64:09:c8:6d:e3:e8:24:2e:
2f:25:e6:e4:ae:14:c2:f1:24:7f:86:d9:0a:87:72:a4:de:42:
01:6d:81:df
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVw8KgBnLsrShxXyzzjGgEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZWMxYTBlNjRlYTg0YjY5YTQwN2NmM2YyYTkyNTM4OGFi
NGVjYjQwHhcNMjMwMTAyMDUyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDRhYjgxYzQzMGY2MWNiYmU2Y2ZkNDk0NDllNmRmNjdkNzg1MDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd7sjgG/9a688cjfC5Zhb1Zi77Tt
Xunb4S/IRpCGl3rB3AvhFqaCfh1UeH42S3UFKYIpSXySZihJRj1jxLT7cnrTPy49
HCuxCSF/zvJnsi+/l/0XH9y5PAQ9e5TAmO6yiHrhbW/ZQwmwnDUo7eu5nx6rz9jS
4g/e5EZfpFYmChMKqTOFRekeE3j3dOdk+vEBlX2Uh6Slm50JPhxneOkNnnf0feYf
fZa155QfsSO7aZ1Dv6WdHm6gxYIvmYVFz4/kzN+oSoa3jAMOb4CbCSA8/Od3juD9
/7TkSNDf8/CsaUA3XD3AS36bifAgEgAse53eK+gT3cwAXB0KrPykyXKrRwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFL1KuBxDD2HLvmz9SUSebfZ9eFBHMB8GA1UdIwQY
MBaAFBHsGg5k6oS2mkB88/KpJTiKtOy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wY2Y3NDUtYTRkOC00MjNkLWEyZDkt
ODMwMmVkODUwYzg3LzEvdlVxNEhFTVBZY3UtYlAxSlJKNXQ5bjE0VUVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8wY2Y3NDUtYTRkOC00MjNkLWEyZDktODMwMmVkODUwYzg3
LzEvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAIfGQwD
BAAfGQ4DBAC5xZQwDQYJKoZIhvcNAQELBQADggEBACMZLb0kI25QHST8KstUexza
yK+cxwypOltCKzwpmYOkr4KaHp04UyohoF1H1AdUXCq1143KX6vSUEIN4pNxpE6u
TVHBmuX7XZcX37/8hNtxnNj7la20f273r5Z6OzOtWfCEJ/o5R2V9YvtFdm4dD4Y/
tod8mDuuoXWZh6UYarMDEiMnZbGpqr2+icaIRbELV7xhZlHzMu+1zuMelk5C5bg6
667YZ4DsbSZ1Bqac3oqv6yiCriMoJnQgplOK1LBciF4IUW7qRfGcFa+yOlXyfe/K
dXkpNp9PBU3GLCj8g+bVXvRkCcht4+gkLi8l5uSuFMLxJH+G2QqHcqTeQgFtgd8=
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:18 2024 by rpki-client on console-fra.rpki-client.org