Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/fLvduVxWKw-y84m3KtRdIwHQL-o.roa
File: fLvduVxWKw-y84m3KtRdIwHQL-o.roa (raw, json)
Hash identifier: TvUTjRkhM4aKm41fjIJIU3BfPsn7sTJ1ELcvQjy2rMQ=
Subject key identifier: 7C:BB:DD:B9:5C:56:2B:0F:B2:F3:89:B7:2A:D4:5D:23:01:D0:2F:EA
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018A26DDE28D60187EBD2988BEF961EF7E63
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/fLvduVxWKw-y84m3KtRdIwHQL-o.roa
Signing time: Thu 24 Aug 2023 09:26:30 +0000
ROA not before: Thu 24 Aug 2023 09:26:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
185.166.196.0/23 maxlen: 24
94.198.216.0/22 maxlen: 24
81.200.144.0/21 maxlen: 24
31.129.0.0/20 maxlen: 24
81.200.152.0/22 maxlen: 24
81.200.156.0/23 maxlen: 24
46.19.64.0/22 maxlen: 24
37.220.80.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:dd:e2:8d:60:18:7e:bd:29:88:be:f9:61:ef:7e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Aug 24 09:26:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cbbddb95c562b0fb2f389b72ad45d2301d02fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:eb:88:e9:f4:60:d0:12:f8:12:ab:9c:85:
53:d7:c6:9b:7d:83:d5:a3:e6:58:75:59:fb:c7:32:
3a:b6:d1:ca:80:f0:14:22:6a:91:9a:8f:90:46:4c:
7f:b0:7c:a4:f9:4e:d7:29:0c:52:c3:b7:01:8e:5c:
84:15:da:8b:8f:28:c1:8e:fa:44:b5:d5:46:df:93:
66:8e:d7:67:05:16:8d:9d:94:d8:e0:ec:6d:39:ff:
00:18:97:f0:d6:a9:f7:1e:d1:d9:51:db:73:db:f9:
3d:ca:2e:72:1b:07:ec:c8:bc:71:fa:16:90:a4:59:
9c:11:25:59:1f:86:0b:46:ee:33:00:60:8e:eb:7b:
8b:39:54:d0:e6:05:2c:66:0e:3c:46:3e:ab:da:ca:
6a:9c:f9:49:bf:96:d5:53:76:b8:7f:52:4e:07:6e:
9c:57:49:12:7b:66:8c:5e:f2:a8:f4:98:49:4b:31:
5a:79:a4:ff:c3:49:ec:d0:78:b1:03:77:53:25:f1:
4e:22:f4:6a:ce:8a:16:aa:85:cd:a3:7c:e9:ec:70:
cb:87:3d:fd:55:f6:94:b0:fa:19:de:11:ca:cf:69:
1a:53:97:bd:ab:15:a7:57:f8:1f:fb:e7:46:ef:4d:
63:e0:03:0f:8e:c2:80:8d:06:13:e0:44:ca:f9:89:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:DD:B9:5C:56:2B:0F:B2:F3:89:B7:2A:D4:5D:23:01:D0:2F:EA
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/fLvduVxWKw-y84m3KtRdIwHQL-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.20.255
31.129.23.0-31.129.29.255
31.129.31.0/24
37.220.80.0/22
46.19.64.0/22
81.200.144.0-81.200.157.255
94.198.216.0/22
141.98.234.0/24
185.166.196.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:4f:68:de:a9:2b:60:60:d5:ae:05:fa:e8:19:7f:b1:e4:5c:
b7:b7:d6:95:28:79:23:ff:bb:7f:ef:f0:05:01:79:aa:b4:12:
da:1e:e1:54:fd:2c:9e:4f:cf:8a:e1:92:8e:8a:88:de:9e:8a:
f3:3e:0b:30:58:cc:52:a6:43:f8:17:85:1e:c0:cc:30:34:91:
e4:75:fd:e2:44:df:54:31:03:30:fa:6e:70:f8:57:4a:94:bc:
3c:39:62:66:56:c0:50:28:22:2b:28:21:85:c5:1a:cb:63:11:
12:6f:80:34:f4:9c:9e:8f:a2:05:4e:74:41:98:a0:0f:15:be:
08:bc:58:66:a1:d6:b0:7d:6c:59:e7:9b:95:65:07:47:8e:65:
b2:0c:1b:eb:67:a6:59:31:02:9a:63:93:c8:7a:74:29:49:23:
13:96:10:f1:e6:36:b6:d5:b9:3f:cd:4a:d2:c3:d1:2e:5d:34:
a9:cd:e9:93:db:c6:74:bb:23:6b:77:db:aa:bd:a1:23:f3:0f:
0c:1f:f4:bc:16:59:98:b0:4c:c2:25:bf:17:86:95:46:b5:65:
b8:a5:5b:60:d2:f7:7e:3c:4a:56:84:d8:99:a4:21:49:b8:73:
4a:c5:ee:c0:76:75:e2:7c:08:71:30:ba:34:f7:4f:cc:ef:4a:
7d:55:10:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 09:17:00 2023 by rpki-client on console-ams.rpki-client.org