Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/9aOLum4L4MSQ0mzvMQMay5QIluE.roa
File: 9aOLum4L4MSQ0mzvMQMay5QIluE.roa (raw, json)
Hash identifier: XTlPRX98dZ4Ps/s4ZbyVceOsuR6I20stgnFm/k9vCCM=
Subject key identifier: F5:A3:8B:BA:6E:0B:E0:C4:90:D2:6C:EF:31:03:1A:CB:94:08:96:E1
Certificate issuer: /CN=8baa27f9c2ef7bf4809ad42ae589101b73e98927
Certificate serial: 01856EF418B3C1F11FC496D9E33156634817
Authority key identifier: 8B:AA:27:F9:C2:EF:7B:F4:80:9A:D4:2A:E5:89:10:1B:73:E9:89:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/9aOLum4L4MSQ0mzvMQMay5QIluE.roa
Signing time: Sun 01 Jan 2023 20:09:28 +0000
ROA not before: Sun 01 Jan 2023 20:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44851
IP address blocks: 31.41.16.0/22 maxlen: 24
185.204.166.0/24 maxlen: 24
185.204.164.0/24 maxlen: 24
185.204.164.0/22 maxlen: 22
185.204.164.0/23 maxlen: 23
185.176.216.0/22 maxlen: 24
185.204.165.0/24 maxlen: 24
185.204.166.0/23 maxlen: 23
185.204.167.0/24 maxlen: 24
2a0a:fd40::/29 maxlen: 29
2a0a:2280::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:18:b3:c1:f1:1f:c4:96:d9:e3:31:56:63:48:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8baa27f9c2ef7bf4809ad42ae589101b73e98927
Validity
Not Before: Jan 1 20:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5a38bba6e0be0c490d26cef31031acb940896e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:49:2a:bb:b4:90:f7:8a:85:1d:0d:0c:c5:4b:
bd:d8:4e:b2:65:70:4c:d5:76:ab:9a:25:bf:9a:bd:
d1:9c:e6:e2:c3:d3:f6:14:90:e6:2c:39:e8:7c:4d:
f8:24:81:02:14:e0:ec:42:9a:40:f6:65:2e:e6:c4:
d0:16:e0:43:43:14:a2:11:6b:01:43:c2:64:58:ac:
d3:aa:6c:d2:8e:b6:7b:27:ca:e9:f8:3f:f0:93:3a:
98:a5:a0:1a:51:3d:9f:a1:95:83:ce:69:06:86:07:
f5:b8:0f:3e:d6:46:99:c8:40:27:02:13:6b:60:d3:
08:37:93:d5:5e:7a:5e:e9:2a:7b:87:59:0b:16:cb:
88:c9:d5:9a:a2:4b:fb:b5:fc:b5:bf:ce:a4:b0:21:
a8:39:01:97:16:e6:5c:57:3c:31:69:4d:4c:ed:f9:
fb:48:2e:ec:fa:e0:e7:06:ca:e1:5d:49:69:ce:ff:
39:ac:f8:84:0a:9c:c5:b4:24:79:41:c2:65:a0:04:
0a:74:d2:98:de:f6:b6:d1:e3:bd:9d:62:2d:21:38:
b0:fd:02:33:2f:c4:61:26:49:b4:1c:97:cc:e4:fc:
c1:d0:41:d4:6e:3f:e2:42:fb:96:fb:5f:1c:e0:3b:
08:c5:24:bc:93:be:0b:e8:d0:30:29:a4:e9:7f:5b:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A3:8B:BA:6E:0B:E0:C4:90:D2:6C:EF:31:03:1A:CB:94:08:96:E1
X509v3 Authority Key Identifier:
keyid:8B:AA:27:F9:C2:EF:7B:F4:80:9A:D4:2A:E5:89:10:1B:73:E9:89:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/9aOLum4L4MSQ0mzvMQMay5QIluE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.16.0/22
185.176.216.0/22
185.204.164.0/22
IPv6:
2a0a:2280::/29
2a0a:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
48:bf:b1:e8:d9:df:ed:ea:d8:5f:f4:0b:4f:d0:00:b4:10:8c:
2d:f1:8c:b6:60:69:d8:e1:b5:6c:a8:8b:93:27:81:a3:78:57:
fd:28:b3:a2:35:e4:68:c2:99:9d:84:58:65:01:32:8a:9f:eb:
25:c7:ad:53:6d:43:37:f3:59:db:1b:11:25:a3:12:d6:a1:8a:
97:d8:62:fb:5a:24:ba:3e:04:08:1e:15:6c:fb:86:fe:15:42:
3f:88:86:0c:e9:b2:d7:f6:0d:89:4d:00:91:5d:e9:6f:f3:d9:
66:3e:4f:35:7e:4c:6a:8b:ee:e1:e6:9e:91:ce:c1:b8:4d:8f:
36:ff:c9:d2:e6:43:70:6a:61:f8:57:63:3b:a7:e8:46:c7:f6:
7f:76:96:f8:2f:d3:69:34:02:54:b0:74:aa:86:41:2c:8d:e7:
de:31:01:85:62:0e:70:a9:c6:5a:7a:54:40:38:65:ac:11:9b:
71:bb:21:fa:9c:4c:a7:28:d4:17:70:68:59:81:25:fc:f8:6d:
eb:8c:fa:2d:70:5a:f4:32:2c:00:df:6d:c8:ce:db:90:58:82:
e0:f5:4e:59:7a:2f:e5:80:42:ba:ff:de:80:5f:f8:ce:f7:1e:
1c:73:8e:54:e5:36:cd:3b:11:0f:9c:9b:1b:d6:53:7e:39:5f:
d6:91:fd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:38 2024 by rpki-client on console-ams.rpki-client.org