Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Kf0IV9IKpzuERPia3wEHj8MGHSU.roa
File: Kf0IV9IKpzuERPia3wEHj8MGHSU.roa (raw, json)
Hash identifier: 38UjaoenxcgtSJK8O217BRHeWWT2cgKaHIXi3SFAYBs=
Subject key identifier: 29:FD:08:57:D2:0A:A7:3B:84:44:F8:9A:DF:01:07:8F:C3:06:1D:25
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01897215ECB3A48144805AA53C375CF1360A
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Kf0IV9IKpzuERPia3wEHj8MGHSU.roa
Signing time: Thu 20 Jul 2023 06:56:26 +0000
ROA not before: Thu 20 Jul 2023 06:56:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
46.16.12.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
37.220.80.0/22 maxlen: 22
185.166.196.0/23 maxlen: 24
94.198.216.0/22 maxlen: 24
94.198.220.0/23 maxlen: 24
81.200.144.0/21 maxlen: 24
81.200.152.0/22 maxlen: 24
77.220.204.0/24 maxlen: 24
81.200.156.0/23 maxlen: 24
46.19.64.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:15:ec:b3:a4:81:44:80:5a:a5:3c:37:5c:f1:36:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jul 20 06:56:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29fd0857d20aa73b8444f89adf01078fc3061d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:59:05:01:0b:a5:14:41:c4:61:bc:cf:c3:
27:7e:a5:ea:94:a1:60:37:94:7d:7c:5b:69:d1:5c:
54:4e:55:9d:8b:9e:ba:f3:10:61:e8:11:ef:11:d1:
a5:15:1d:03:4c:bc:3c:6b:56:58:73:24:46:4c:89:
87:57:65:ad:ea:ac:6c:24:9c:26:ee:6e:4f:df:53:
6c:ed:15:d5:9c:74:db:53:41:bd:b5:59:ef:32:07:
3e:e4:2b:62:d5:13:9e:25:21:36:87:7d:3c:0b:d6:
84:cc:c4:73:9d:5f:5e:7c:ed:55:c7:bd:4c:9a:f7:
d3:50:47:b3:54:b4:1b:94:94:0f:10:f6:87:06:d3:
66:4a:74:41:1f:2f:ba:4e:b3:ea:90:bd:0e:6b:61:
9c:ac:c2:76:fe:71:9a:82:ba:3b:f1:48:07:a6:13:
8b:9b:c5:6d:3f:fb:e6:6b:0f:de:97:53:63:47:ed:
6e:8b:dd:11:b8:c4:68:65:df:ec:55:9c:dd:02:13:
aa:e1:04:e4:77:ab:d2:e9:db:d4:f3:9b:b8:d4:45:
ce:72:74:1e:1f:33:23:aa:82:11:06:16:e2:f3:80:
36:e4:d4:1b:c4:25:9d:7d:13:80:9e:be:9f:ef:ec:
9d:28:ce:7a:e0:9e:5a:36:7e:9e:b1:e1:39:06:5e:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FD:08:57:D2:0A:A7:3B:84:44:F8:9A:DF:01:07:8F:C3:06:1D:25
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Kf0IV9IKpzuERPia3wEHj8MGHSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.20.255
31.129.23.0-31.129.29.255
31.129.31.0/24
37.220.80.0/22
46.16.12.0/24
46.16.14.0/23
46.19.64.0/22
77.220.204.0/24
81.200.144.0-81.200.157.255
94.198.216.0-94.198.221.255
141.98.234.0/24
185.166.196.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:c5:25:44:be:6e:58:a8:c3:75:03:7c:c6:11:04:0f:d4:e7:
f3:cc:66:dc:f2:01:1f:71:31:0a:7c:22:ce:ef:31:52:5c:09:
de:12:78:08:bb:fc:14:aa:0f:b9:6a:50:9f:ff:29:4b:08:de:
26:08:76:b1:e4:af:a6:55:b7:c2:4b:03:1b:f7:bf:0a:4c:ea:
09:a7:7b:4c:95:90:5f:3b:c8:5a:e2:2f:9c:c2:7a:71:32:36:
cd:c4:f9:70:11:5f:c4:df:3a:73:e3:ed:9b:3a:4b:e2:dd:60:
48:b3:a2:a2:1b:ba:85:f0:34:5b:a9:4c:bc:d2:5b:e3:db:de:
51:96:26:1e:95:02:63:ed:a2:f6:cc:69:c9:f7:7d:49:7a:9f:
5f:a9:f1:f0:01:86:7c:39:c2:9d:76:1b:eb:86:b8:b4:a6:56:
45:01:fc:f7:7d:13:87:be:19:49:f4:9b:e1:50:69:e1:9f:95:
03:81:e2:5c:09:1c:e8:72:ff:39:fd:47:f7:af:ef:b8:68:e8:
20:c9:5d:6a:2a:9a:e7:7e:ec:c6:37:99:e8:b1:13:2d:8a:eb:
d1:f8:a1:60:f5:21:a7:a4:85:58:d1:9b:5d:0e:18:ae:06:18:
1f:6c:8b:93:86:d8:db:2b:dc:bc:b1:34:bd:ea:cf:b6:b7:df:
ac:44:d1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 10:07:45 2023 by rpki-client on console-ams.rpki-client.org