Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/31xRxkg_6aEbvljAoKDKJFDn88A.roa
File: 31xRxkg_6aEbvljAoKDKJFDn88A.roa (raw, json)
Hash identifier: r3sgSuyhjO2oEHq+CZntjXxwH139AGOI7bsjMFcjZRo=
Subject key identifier: DF:5C:51:C6:48:3F:E9:A1:1B:BE:58:C0:A0:A0:CA:24:50:E7:F3:C0
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0191320576FDD2B1460A46186C9806899FAC
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/31xRxkg_6aEbvljAoKDKJFDn88A.roa
Signing time: Thu 08 Aug 2024 12:45:04 +0000
ROA not before: Thu 08 Aug 2024 12:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55286
IP address blocks: 86.104.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 17:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:05:76:fd:d2:b1:46:0a:46:18:6c:98:06:89:9f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 8 12:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df5c51c6483fe9a11bbe58c0a0a0ca2450e7f3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:45:0f:85:c6:fc:95:c8:64:88:d4:c1:51:
bf:f4:cb:6d:d7:e3:35:c1:f6:ba:76:f3:2e:8e:79:
c7:5a:19:18:59:6b:c9:07:52:9e:1a:bc:e2:72:6e:
d8:e9:3e:bc:f0:49:47:8e:fe:8f:d9:82:a1:5b:59:
c0:57:34:a0:d5:d1:40:bf:90:8d:d4:0a:b2:4c:7e:
61:3a:b7:56:cf:6c:5b:81:c5:d5:fb:25:7e:10:16:
aa:7c:93:cb:19:a5:ac:1b:f7:83:a9:c8:2f:0a:c8:
d8:ae:24:66:7f:48:9a:9f:74:94:80:12:de:0e:e7:
39:b2:1b:b3:69:82:cb:15:7c:22:c5:8f:98:77:01:
55:6e:15:0e:7f:e0:de:05:d9:52:0f:45:9d:b8:c5:
3d:b3:f8:81:c6:cf:35:e9:20:d9:5d:06:b2:76:d1:
6e:b2:7f:63:7c:2f:3f:d3:dd:99:ea:3c:07:71:e9:
5e:6d:4d:2a:eb:ce:c9:c2:f4:1b:a9:b1:25:b9:40:
41:94:7b:f8:58:90:d6:be:2a:a6:e1:b2:05:cc:83:
c9:46:80:ae:19:b2:3e:74:09:be:91:4a:ec:28:93:
db:aa:61:ae:a8:9c:d1:75:fd:70:2f:1d:5c:6b:0a:
f2:c3:87:81:73:bb:93:4a:e8:0e:02:11:bd:96:4c:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5C:51:C6:48:3F:E9:A1:1B:BE:58:C0:A0:A0:CA:24:50:E7:F3:C0
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/31xRxkg_6aEbvljAoKDKJFDn88A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.8.0/24
Signature Algorithm: sha256WithRSAEncryption
09:08:f8:34:a7:08:ac:04:cc:51:81:c2:5f:f6:28:f4:f6:c0:
67:23:9f:84:2f:c4:da:d8:bb:c2:13:31:37:f7:75:5d:aa:7b:
d2:9c:39:79:f3:c0:6a:58:33:99:f4:ef:13:01:d1:9d:60:14:
5e:89:23:f2:3e:4c:68:9d:98:c5:0f:b8:ab:bb:39:28:0a:9d:
e9:e5:c9:fa:61:55:c8:b3:87:ff:11:f6:91:b9:79:34:25:e2:
3b:56:7d:84:74:ad:74:b8:57:56:3b:c6:dc:5e:7e:16:b9:22:
9b:f3:a4:7c:e7:c1:17:05:ea:1e:4a:28:d3:6e:39:df:9c:92:
8d:b3:13:f7:38:c5:3b:9b:17:d1:38:dd:4b:f4:dc:f2:02:c3:
43:a9:64:eb:7f:65:51:9c:59:a2:42:72:86:c9:ac:31:92:1a:
ae:e9:f8:61:66:d9:68:c8:e9:ba:dd:bb:81:b5:b6:90:37:68:
2a:56:30:31:a5:c6:4f:c5:10:0d:49:31:1c:b9:73:ef:49:7e:
64:00:7f:6d:78:ca:c1:ca:ce:89:7e:08:14:42:1c:f1:84:c7:
99:c2:a3:02:bb:ae:00:39:91:86:63:cb:80:52:87:4d:55:62:
a7:cb:87:2e:ca:cd:b8:70:74:a2:5b:8e:fc:b4:c8:c9:b3:c9:
c6:c5:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:18 2025 by rpki-client