Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/1YuKVB6KhBKvm09jwOrSUEMhhlA.roa
File: 1YuKVB6KhBKvm09jwOrSUEMhhlA.roa (raw, json)
Hash identifier: tGIekDoVEEdK2x8TmuKCCOt9KKwYV8wIIYIr6nmq9c4=
Subject key identifier: D5:8B:8A:54:1E:8A:84:12:AF:9B:4F:63:C0:EA:D2:50:43:21:86:50
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 018570D50A83643209A75DF9B1F0F04A4079
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/1YuKVB6KhBKvm09jwOrSUEMhhlA.roa
Signing time: Mon 02 Jan 2023 04:54:48 +0000
ROA not before: Mon 02 Jan 2023 04:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49986
IP address blocks: 78.31.236.0/22 maxlen: 22
78.31.238.0/23 maxlen: 23
78.31.236.0/23 maxlen: 23
2a05:c000::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:0a:83:64:32:09:a7:5d:f9:b1:f0:f0:4a:40:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Jan 2 04:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d58b8a541e8a8412af9b4f63c0ead25043218650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fd:4a:dd:33:10:1e:63:ce:e2:66:d3:33:b0:
6e:73:d3:f8:64:28:32:2a:15:51:3f:f3:c5:e7:ee:
9c:99:b7:04:7a:b4:81:58:90:ac:5c:91:fc:c4:b4:
70:f8:17:2d:28:78:87:2c:a3:c8:e6:27:d4:a5:92:
6f:c4:e3:23:bb:5f:8d:46:43:55:93:24:a7:82:90:
41:4e:1c:87:40:a3:41:71:70:d6:4e:d1:f1:67:28:
b9:6a:ca:75:aa:92:79:5b:46:0a:5f:a1:ec:d4:12:
c9:28:f0:b9:df:41:de:c5:86:7e:d9:78:55:22:8d:
e9:9f:04:f0:ba:a2:bd:00:44:3b:c4:ff:69:eb:8f:
21:5c:76:32:fc:9e:33:e2:1b:ac:29:4a:35:c0:d7:
94:fa:bc:31:ff:6f:42:65:3a:ef:c7:57:1c:af:c2:
19:6a:2f:26:ae:41:03:dc:5a:95:2d:6c:76:86:85:
8a:1f:46:89:97:87:1b:42:15:b3:fb:f1:83:ee:43:
b0:8c:28:39:77:81:20:f2:65:0a:ed:73:b1:75:02:
0a:ca:74:77:ac:d5:95:ab:e3:ed:84:5d:a8:53:87:
15:b8:04:06:1f:67:db:78:76:b1:2f:0d:ba:34:2e:
e1:cc:d6:d2:0b:98:5e:00:7f:14:3d:35:f2:5f:c1:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:8A:54:1E:8A:84:12:AF:9B:4F:63:C0:EA:D2:50:43:21:86:50
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/1YuKVB6KhBKvm09jwOrSUEMhhlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.236.0/22
IPv6:
2a05:c000::/32
Signature Algorithm: sha256WithRSAEncryption
0f:10:f2:97:ee:9a:b3:41:ac:4f:aa:9f:6a:7a:ab:8e:7a:ba:
15:13:46:30:70:d2:e5:5e:e7:b1:96:7e:49:f2:fb:e8:d8:58:
a8:0e:59:e3:22:0f:14:44:15:37:1f:3a:2a:77:fd:d4:e7:4c:
83:46:2a:5a:4d:26:dd:6b:b9:a3:c8:3e:68:ad:44:31:47:39:
ce:6b:ae:9e:23:d9:c5:d8:fd:3a:31:2d:57:5d:73:e9:6d:47:
57:3b:1e:b2:ee:da:07:4f:83:b0:e5:f4:51:42:72:91:7b:63:
87:4b:de:d9:6c:04:89:5b:f1:d1:0e:73:21:e0:c8:01:2e:a5:
83:7e:5b:9a:47:53:2a:60:f7:60:ea:6a:e8:20:f6:ac:3e:6a:
87:bc:08:ea:70:c1:e8:9b:6c:00:bb:76:d9:97:37:9b:e7:15:
e2:c5:81:16:49:e7:74:73:c1:ad:93:e7:25:84:5c:c8:e8:31:
72:7a:1c:c0:0b:c6:f8:31:71:f1:23:96:a4:68:2e:c8:94:95:
f4:69:74:a9:94:d9:19:f4:70:05:aa:08:42:b6:3d:0d:10:ba:
07:c0:52:cc:91:49:27:ab:2a:56:a1:a7:e6:ba:42:ee:cf:a0:
d6:88:64:08:99:c7:72:b5:bf:1b:ff:50:0b:8b:a9:be:0b:98:
f0:89:52:68
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVw1QqDZDIJp135sfDwSkB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlN2YyMmJlZWI1MmM2ZTUxYTI0MjJiMTM5MTQyZWVhMDNm
YjVkNGQwHhcNMjMwMTAyMDQ1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNThiOGE1NDFlOGE4NDEyYWY5YjRmNjNjMGVhZDI1MDQzMjE4NjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6f1K3TMQHmPO4mbTM7Buc9P4ZCgy
KhVRP/PF5+6cmbcEerSBWJCsXJH8xLRw+BctKHiHLKPI5ifUpZJvxOMju1+NRkNV
kySngpBBThyHQKNBcXDWTtHxZyi5asp1qpJ5W0YKX6Hs1BLJKPC530HexYZ+2XhV
Io3pnwTwuqK9AEQ7xP9p648hXHYy/J4z4husKUo1wNeU+rwx/29CZTrvx1ccr8IZ
ai8mrkED3FqVLWx2hoWKH0aJl4cbQhWz+/GD7kOwjCg5d4Eg8mUK7XOxdQIKynR3
rNWVq+PthF2oU4cVuAQGH2fbeHaxLw26NC7hzNbSC5heAH8UPTXyX8FDDQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNWLilQeioQSr5tPY8Dq0lBDIYZQMB8GA1UdIwQY
MBaAFG5/Ir7rUsblGiQisTkULuoD+11NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUt
NGRkNGQwZjUzODQ5LzEvMVl1S1ZCNktoQkt2bTA5andPclNVRU1oaGxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUtNGRkNGQwZjUzODQ5
LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCTh/sMA0E
AgACMAcDBQAqBcAAMA0GCSqGSIb3DQEBCwUAA4IBAQAPEPKX7pqzQaxPqp9qequO
eroVE0YwcNLlXuexln5J8vvo2FioDlnjIg8URBU3Hzoqd/3U50yDRipaTSbda7mj
yD5orUQxRznOa66eI9nF2P06MS1XXXPpbUdXOx6y7toHT4Ow5fRRQnKRe2OHS97Z
bASJW/HRDnMh4MgBLqWDfluaR1MqYPdg6mroIPasPmqHvAjqcMHom2wAu3bZlzeb
5xXixYEWSed0c8Gtk+clhFzI6DFyehzAC8b4MXHxI5akaC7IlJX0aXSplNkZ9HAF
qghCtj0NELoHwFLMkUknqypWoafmukLuz6DWiGQImcdytb8b/1ALi6m+C5jwiVJo
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:02 2024 by rpki-client on console-fra.rpki-client.org