Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/bJWrqroE-ngoUKrpcJV30N9Es9U.roa
File: bJWrqroE-ngoUKrpcJV30N9Es9U.roa (raw, json)
Hash identifier: GVxsakNFJ9zE7LP5tMVQr+vb7VsupV93Atcz4roDFFw=
Subject key identifier: 6C:95:AB:AA:BA:04:FA:78:28:50:AA:E9:70:95:77:D0:DF:44:B3:D5
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 019256BA64458FBDF4187E286674718D2CCC
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/bJWrqroE-ngoUKrpcJV30N9Es9U.roa
Signing time: Fri 04 Oct 2024 08:51:48 +0000
ROA not before: Fri 04 Oct 2024 08:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52011
IP address blocks: 31.132.57.0/24 maxlen: 24
2a00:16d8:52::/48 maxlen: 48
2a03:b000:b00::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 04 Oct 2024 09:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:ba:64:45:8f:bd:f4:18:7e:28:66:74:71:8d:2c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Oct 4 08:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c95abaaba04fa782850aae9709577d0df44b3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:97:1c:65:2e:0d:2a:1a:03:10:a5:de:a5:
5b:78:84:3f:d4:6d:24:1d:b9:ab:85:40:57:07:84:
9c:1d:a8:34:5f:c3:0a:97:d6:7c:c3:e8:ae:f7:49:
2e:47:7f:f8:72:c7:86:c6:b6:fc:27:1e:89:f0:97:
53:ce:02:b4:32:ef:51:aa:9c:4b:33:12:27:7e:d4:
d7:31:ab:51:e3:5b:ab:3d:15:44:3f:75:9c:1e:d6:
da:c7:b1:37:24:0f:2f:94:55:7c:a7:62:c5:8a:9d:
87:35:04:95:3e:be:5d:5b:e6:4b:70:d7:2f:17:d3:
55:dc:0a:44:81:13:57:ae:da:0c:d8:0e:41:93:7d:
60:4c:9a:28:40:54:87:c5:0e:34:20:da:d6:ee:77:
4b:c0:2a:3d:64:a2:89:ac:a7:48:8a:03:21:5d:9f:
a0:e7:d1:27:bd:d0:1d:42:00:3c:ec:b5:a0:d2:4a:
93:96:c3:04:a7:16:a1:50:40:2f:89:f0:25:5d:f0:
85:ec:23:5b:e9:5a:9f:4e:9e:ed:22:43:5a:32:91:
4e:c1:8b:43:87:20:28:32:46:1f:12:c4:02:6a:e3:
b6:9b:17:c2:1a:f5:40:fc:f6:a8:e4:3c:1f:47:9a:
44:e5:59:cb:e4:50:cf:bd:ec:bd:32:55:32:b9:27:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:95:AB:AA:BA:04:FA:78:28:50:AA:E9:70:95:77:D0:DF:44:B3:D5
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/bJWrqroE-ngoUKrpcJV30N9Es9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.57.0/24
IPv6:
2a00:16d8:52::/48
2a03:b000:b00::/40
Signature Algorithm: sha256WithRSAEncryption
5d:99:56:2d:6b:34:ff:87:45:8f:da:9d:e8:0b:bd:c8:48:6c:
a5:07:0e:c0:e9:8d:d5:55:cc:39:c3:4e:10:6a:db:a1:73:e5:
92:58:5e:e0:7d:a6:d7:2e:46:47:3f:5c:e4:97:32:3d:c9:ae:
40:80:62:4f:9a:35:4f:56:25:95:94:d2:b6:bf:f3:f0:82:2c:
51:ee:94:38:47:43:19:b0:f6:57:6f:67:d2:8d:58:3a:52:b1:
ec:f8:8e:5b:85:b9:04:a8:a9:86:bb:67:2e:9b:12:4e:fc:0c:
99:0d:0e:ec:ea:1e:d5:b1:94:ff:84:c8:bc:44:41:01:7b:c8:
39:fd:b9:28:be:46:e3:68:c9:46:d6:da:97:cb:a6:8a:b4:cb:
f1:6a:35:c3:06:b3:d2:ce:a1:ee:4b:c7:76:e8:3c:85:62:d7:
b0:e7:01:94:16:90:6a:6e:95:0d:8b:f7:01:94:9c:59:5d:f5:
38:f3:4e:af:0c:3b:9b:c4:6e:e1:90:f0:6e:f2:5b:c3:b7:f6:
66:b8:96:cc:de:03:8f:17:f1:f4:f3:0b:8c:27:01:8b:ff:df:
20:27:3e:55:30:19:81:2b:8d:77:8f:8e:01:37:4c:15:ba:f5:
81:78:d1:4b:a7:0b:16:6d:33:f1:87:44:42:b3:c4:56:58:50:
59:1d:41:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZJWumRFj730GH4oZnRxjSzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjkyNmY4YzYwM2FhYjc5Y2I0NmE4ODNiZjYzMjU2NGEz
ZmFhYmYwHhcNMjQxMDA0MDg1MTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzk1YWJhYWJhMDRmYTc4Mjg1MGFhZTk3MDk1NzdkMGRmNDRiM2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssGXHGUuDSoaAxCl3qVbeIQ/1G0k
HbmrhUBXB4ScHag0X8MKl9Z8w+iu90kuR3/4cseGxrb8Jx6J8JdTzgK0Mu9RqpxL
MxInftTXMatR41urPRVEP3WcHtbax7E3JA8vlFV8p2LFip2HNQSVPr5dW+ZLcNcv
F9NV3ApEgRNXrtoM2A5Bk31gTJooQFSHxQ40INrW7ndLwCo9ZKKJrKdIigMhXZ+g
59EnvdAdQgA87LWg0kqTlsMEpxahUEAvifAlXfCF7CNb6VqfTp7tIkNaMpFOwYtD
hyAoMkYfEsQCauO2mxfCGvVA/Pao5DwfR5pE5VnL5FDPvey9MlUyuScrQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyVq6q6BPp4KFCq6XCVd9DfRLPVMB8GA1UdIwQY
MBaAFO25JvjGA6q3nLRqiDv2MlZKP6q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2Mt
M2JkMTk3OGJmMmY2LzEvYkpXcnFyb0UtbmdvVUtycGNKVjMwTjlFczlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2MtM2JkMTk3OGJmMmY2
LzEvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQAH4Q5MBcE
AgACMBEDBwAqABbYAFIDBgAqA7AACzANBgkqhkiG9w0BAQsFAAOCAQEAXZlWLWs0
/4dFj9qd6Au9yEhspQcOwOmN1VXMOcNOEGrboXPlklhe4H2m1y5GRz9c5JcyPcmu
QIBiT5o1T1YllZTStr/z8IIsUe6UOEdDGbD2V29n0o1YOlKx7PiOW4W5BKiphrtn
LpsSTvwMmQ0O7Ooe1bGU/4TIvERBAXvIOf25KL5G42jJRtbal8umirTL8Wo1wwaz
0s6h7kvHdug8hWLXsOcBlBaQam6VDYv3AZScWV31OPNOrww7m8Ru4ZDwbvJbw7f2
ZriWzN4Djxfx9PMLjCcBi//fICc+VTAZgSuNd4+OATdMFbr1gXjRS6cLFm0z8YdE
QrPEVlhQWR1BWA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:51:43 2025 by rpki-client