Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/1LsMRF9R_uCZJwtFBIus-NEAUsQ.roa
File: 1LsMRF9R_uCZJwtFBIus-NEAUsQ.roa (raw, json)
Hash identifier: olFQ5jCrgKDti6hbEh0FjpxPNLLZCD66A+Q/7Fnk3Yg=
Subject key identifier: D4:BB:0C:44:5F:51:FE:E0:99:27:0B:45:04:8B:AC:F8:D1:00:52:C4
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018CB72FE3F7B6CC37F9FBA144D689888F0B
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/1LsMRF9R_uCZJwtFBIus-NEAUsQ.roa
Signing time: Fri 29 Dec 2023 20:06:58 +0000
ROA not before: Fri 29 Dec 2023 20:06:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 31.169.83.0/24 maxlen: 24
31.169.80.0/24 maxlen: 24
31.169.86.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b7:2f:e3:f7:b6:cc:37:f9:fb:a1:44:d6:89:88:8f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Dec 29 20:06:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4bb0c445f51fee099270b45048bacf8d10052c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8e:80:4e:ab:b3:d9:66:94:b4:75:d5:97:a7:
6e:2f:8c:ea:75:1e:6f:5d:8d:b7:eb:b5:3d:cf:d6:
57:1a:e4:d0:f3:4f:06:fc:e6:a0:7b:3b:24:b5:ad:
91:19:b0:f5:11:88:be:59:1a:10:90:d8:e1:ac:69:
4b:e0:d9:b8:19:7f:a3:4c:cb:b0:d3:38:14:61:3b:
91:3a:1d:6e:02:a2:f5:d2:38:48:80:b0:28:16:6a:
49:92:33:43:f5:19:37:06:57:c3:9e:d1:85:a0:8c:
a8:0d:b8:af:c1:19:e4:cc:89:c7:9c:cf:c8:82:ea:
0c:53:c8:d9:36:f8:52:fa:83:4e:51:7d:c1:38:5c:
eb:e5:e2:ee:a4:e8:27:e5:a5:74:3f:2f:da:f2:f7:
50:91:9a:47:22:ba:85:30:2f:ea:18:86:ad:9a:a3:
70:e5:49:46:8b:b7:72:b0:c2:ac:f2:f8:6f:fa:35:
be:ab:a3:f8:57:97:ea:e9:11:24:0b:6a:43:59:1b:
2e:54:64:4c:71:87:97:ad:f2:d8:07:90:0d:0c:cb:
ff:46:81:dd:77:4d:fd:51:f0:e2:3a:d4:8a:55:f6:
4d:cb:b0:6c:4e:21:d5:86:aa:a0:d2:a2:a0:31:7b:
52:84:70:74:9c:d4:b1:d5:80:99:f9:d1:6f:c3:b0:
3c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:0C:44:5F:51:FE:E0:99:27:0B:45:04:8B:AC:F8:D1:00:52:C4
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/1LsMRF9R_uCZJwtFBIus-NEAUsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.80.0/24
31.169.83.0/24
31.169.86.0/24
31.169.88.0/24
Signature Algorithm: sha256WithRSAEncryption
98:33:9d:e6:dc:48:54:0a:0e:f7:35:b1:80:07:4b:70:a9:60:
c8:ec:c9:34:13:1c:58:b2:ee:9b:8d:14:68:c9:eb:52:b2:8d:
a8:ae:ac:0d:b8:1c:e4:af:ec:da:20:34:dc:b9:1b:03:2e:65:
b8:92:23:09:18:c1:75:a3:db:3a:68:95:dd:a9:98:6e:22:04:
ee:3c:b1:69:af:bf:5c:33:fe:0f:22:f8:a2:8b:05:ad:cc:24:
c5:e3:c7:28:0a:01:56:77:ed:87:9b:02:96:77:52:92:f4:32:
cd:c8:a2:0e:c4:ac:8a:12:84:93:22:89:d0:7f:9d:e2:0a:c9:
b0:ab:c2:db:23:5d:a4:05:39:b6:63:f7:68:9c:a2:fa:48:45:
98:32:a5:f9:ba:d6:57:dc:6e:79:be:c7:1e:9f:e2:f4:87:f8:
ae:9e:98:ab:00:2c:3d:28:09:9d:fe:3b:ef:04:a9:6a:1e:0c:
8e:09:7f:d8:ec:9f:e2:88:31:9d:7f:46:50:b9:b2:f7:14:25:
d4:63:76:ee:59:20:8f:03:c4:db:17:ea:4a:fc:38:bc:24:d6:
08:47:6a:b8:b8:a5:e6:ed:dd:1a:ca:1b:4d:dd:5a:06:5e:23:
4d:82:95:55:02:4e:97:c8:8e:c8:a4:6e:c0:b5:2c:20:3f:2e:
44:22:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:47 2024 by rpki-client on console-ams.rpki-client.org