Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/eaeuYWjLz5KMabWFzky-gp3C2jk.roa
File: eaeuYWjLz5KMabWFzky-gp3C2jk.roa (raw, json)
Hash identifier: j4wtXc3eIby87bnHT43EtHq0+uSV3ADyXNWtY+FmNRc=
Subject key identifier: 79:A7:AE:61:68:CB:CF:92:8C:69:B5:85:CE:4C:BE:82:9D:C2:DA:39
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018F0EF0BB5A56EBE78070F9698DE66B9746
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/eaeuYWjLz5KMabWFzky-gp3C2jk.roa
Signing time: Wed 24 Apr 2024 07:10:08 +0000
ROA not before: Wed 24 Apr 2024 07:10:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215623
IP address blocks: 31.15.20.0/24 maxlen: 24
31.15.21.0/24 maxlen: 24
31.15.22.0/24 maxlen: 24
31.15.23.0/24 maxlen: 24
192.162.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 10:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0e:f0:bb:5a:56:eb:e7:80:70:f9:69:8d:e6:6b:97:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 24 07:10:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79a7ae6168cbcf928c69b585ce4cbe829dc2da39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:02:1f:00:94:2c:7f:31:62:6d:a2:d1:e6:2d:
15:f6:71:f8:c4:d2:30:fd:4b:48:57:7e:23:3d:70:
6a:df:74:7a:6d:2a:cf:d6:f8:04:7e:fc:a8:64:7c:
b0:ad:8c:8d:a4:3f:d7:f3:97:71:0d:82:72:b4:fd:
70:62:ad:48:7f:a7:48:21:e1:d7:68:f7:5d:33:7a:
1d:b6:38:64:fd:1f:8a:21:3c:3a:04:f6:12:1e:a8:
e7:4c:1d:86:5b:8f:33:19:25:a1:54:b2:9f:d1:76:
17:9b:3d:40:70:ed:1e:18:59:e7:d5:3d:90:df:fc:
8c:70:62:c1:3e:db:1d:df:ed:75:53:a2:d0:2a:70:
be:a6:3d:99:5b:99:0e:e5:81:c8:81:0e:02:57:07:
e3:c1:5d:f9:f9:d9:23:68:87:92:bd:54:6e:f2:b2:
1a:24:f7:f1:a8:75:c2:cd:6d:68:b2:11:c8:9f:99:
66:b7:b9:e9:53:ef:60:35:1a:30:b7:18:c7:94:cf:
12:48:c8:0b:48:e8:e9:1a:5d:f7:42:67:ff:a7:c2:
bd:a2:14:2f:1a:d2:7f:2d:c4:be:62:68:1b:8a:8a:
57:28:cd:9f:44:6d:f8:92:5b:73:81:bc:63:40:c1:
7f:d9:4b:5a:5d:b8:fb:23:e6:6e:f9:4d:4d:fc:84:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A7:AE:61:68:CB:CF:92:8C:69:B5:85:CE:4C:BE:82:9D:C2:DA:39
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/eaeuYWjLz5KMabWFzky-gp3C2jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.20.0/22
192.162.66.0/24
Signature Algorithm: sha256WithRSAEncryption
02:82:e0:9e:b5:94:81:70:0d:a0:e1:62:e0:eb:15:62:05:45:
d3:57:b0:70:c2:2a:13:4f:56:f9:ec:9e:71:05:07:00:91:31:
a0:bd:d9:a1:44:ad:8b:ef:06:13:5c:99:fb:f5:d1:fd:74:4a:
a4:98:d4:2f:c4:22:79:a0:a5:ec:c6:44:6e:31:bd:27:8a:40:
64:0c:a4:b0:6e:40:98:63:04:1d:56:e7:17:26:57:91:b8:a6:
a0:c3:9a:81:bf:cd:e3:81:57:eb:30:33:57:58:03:2d:e6:33:
e6:78:cb:37:4e:29:36:a9:1d:cd:35:f9:e3:c1:ef:3b:af:36:
fb:86:c9:d2:47:93:7c:ea:20:47:17:20:35:41:a5:19:a4:66:
7a:97:b7:53:92:20:b8:8a:5e:ce:2b:11:25:6c:eb:4e:d8:4e:
32:40:d2:8e:33:d4:46:7c:cf:49:e6:e3:9e:ac:bd:91:57:59:
49:05:38:4f:45:a3:0d:ff:85:2f:b8:44:d3:20:cc:42:c1:17:
49:b0:be:49:d3:38:bc:19:56:78:62:e3:ba:94:bd:4e:39:93:
f9:11:ff:a2:fe:05:0b:11:6a:08:14:75:ed:00:92:b3:06:35:
b5:bc:1e:8c:09:ca:0a:05:b0:ca:2e:17:2c:cd:ab:03:b9:fa:
5d:ad:e8:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY8O8LtaVuvngHD5aY3ma5dGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjQwNDI0MDcxMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWE3YWU2MTY4Y2JjZjkyOGM2OWI1ODVjZTRjYmU4MjlkYzJkYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggIfAJQsfzFibaLR5i0V9nH4xNIw
/UtIV34jPXBq33R6bSrP1vgEfvyoZHywrYyNpD/X85dxDYJytP1wYq1If6dIIeHX
aPddM3odtjhk/R+KITw6BPYSHqjnTB2GW48zGSWhVLKf0XYXmz1AcO0eGFnn1T2Q
3/yMcGLBPtsd3+11U6LQKnC+pj2ZW5kO5YHIgQ4CVwfjwV35+dkjaIeSvVRu8rIa
JPfxqHXCzW1oshHIn5lmt7npU+9gNRowtxjHlM8SSMgLSOjpGl33Qmf/p8K9ohQv
GtJ/LcS+YmgbiopXKM2fRG34kltzgbxjQMF/2UtaXbj7I+Zu+U1N/IR0VQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHmnrmFoy8+SjGm1hc5MvoKdwto5MB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvZWFldVlXakx6NUtNYWJXRnpreS1ncDNDMmprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCHw8UAwQA
wKJCMA0GCSqGSIb3DQEBCwUAA4IBAQACguCetZSBcA2g4WLg6xViBUXTV7BwwioT
T1b57J5xBQcAkTGgvdmhRK2L7wYTXJn79dH9dEqkmNQvxCJ5oKXsxkRuMb0nikBk
DKSwbkCYYwQdVucXJleRuKagw5qBv83jgVfrMDNXWAMt5jPmeMs3Tik2qR3NNfnj
we87rzb7hsnSR5N86iBHFyA1QaUZpGZ6l7dTkiC4il7OKxElbOtO2E4yQNKOM9RG
fM9J5uOerL2RV1lJBThPRaMN/4UvuETTIMxCwRdJsL5J0zi8GVZ4YuO6lL1OOZP5
Ef+i/gULEWoIFHXtAJKzBjW1vB6MCcoKBbDKLhcszasDufpdrehw
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:01 2024 by rpki-client on console-fra.rpki-client.org