Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/5yR58nFlJF00Ek8oBZn6171qHoM.roa
File: 5yR58nFlJF00Ek8oBZn6171qHoM.roa (raw, json)
Hash identifier: R5ip/30fAaMbxlU9AMztHGkB1A3ulmLwTkBF87RSdk8=
Subject key identifier: E7:24:79:F2:71:65:24:5D:34:12:4F:28:05:99:FA:D7:BD:6A:1E:83
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018B0414F4461812A1053F21D4A7B099B471
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/5yR58nFlJF00Ek8oBZn6171qHoM.roa
Signing time: Fri 06 Oct 2023 08:22:43 +0000
ROA not before: Fri 06 Oct 2023 08:22:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56582
IP address blocks: 185.33.61.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.91.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
31.169.64.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:14:f4:46:18:12:a1:05:3f:21:d4:a7:b0:99:b4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Oct 6 08:22:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e72479f27165245d34124f280599fad7bd6a1e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:c9:95:39:df:7d:ec:3c:f1:ad:bd:4b:0c:
a0:eb:e7:32:1f:ca:97:a7:bb:6d:2d:a6:40:14:75:
5a:56:cc:f2:30:3a:8e:c4:e4:88:95:7f:1a:b8:db:
80:2f:4f:13:0e:bb:14:bd:c5:2d:ce:ab:20:96:0c:
c8:57:86:05:28:2d:9d:09:eb:e7:05:0c:ca:44:86:
3b:b5:81:a3:3a:dd:e8:0e:bb:83:c7:ac:5a:ce:35:
53:9b:76:b4:d4:2d:b9:e2:21:40:82:ac:57:56:09:
1f:d3:5c:98:bb:ec:3c:4c:73:5e:14:2f:37:29:c3:
39:36:b4:e2:02:24:64:8b:83:85:2f:5b:7a:b3:ea:
cc:4b:ee:7f:49:b6:79:59:1a:d1:5a:a1:8b:9d:e8:
d7:c7:07:60:df:56:ee:92:1f:4a:7d:1e:ae:8f:36:
15:20:df:64:78:b5:63:ba:85:d8:d8:ba:52:1b:66:
69:3f:a6:cf:05:72:b1:74:c6:f4:4b:bb:b6:2f:89:
22:3a:72:ea:bf:29:f2:d3:8e:2f:61:72:46:4c:fe:
eb:a7:e6:83:04:77:87:05:55:b4:90:49:e3:9e:7f:
98:f0:63:9d:1c:e1:b1:24:02:87:5e:ff:b6:25:cd:
67:97:5e:55:34:46:df:83:fd:c8:b7:95:87:a3:24:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:79:F2:71:65:24:5D:34:12:4F:28:05:99:FA:D7:BD:6A:1E:83
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/5yR58nFlJF00Ek8oBZn6171qHoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.74.0/24
31.169.76.0-31.169.78.255
31.169.81.0/24
31.169.88.0/24
31.169.91.0-31.169.95.255
185.33.61.0/24
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
0c:d0:67:9b:2f:a0:f2:4a:3d:31:6e:7e:0c:62:6c:57:56:72:
74:0e:9a:b9:6c:1d:88:df:a4:d2:c0:96:ab:fa:8e:44:42:da:
80:53:4d:ee:5a:c0:c5:bb:b2:1e:ce:b6:9c:6f:6c:4d:d2:cf:
9b:11:2c:6b:92:3b:ac:d0:95:ba:6d:30:28:99:1a:95:db:34:
9b:41:1a:e5:36:0b:ef:b3:96:88:4c:9c:7c:18:d2:ad:8a:f5:
13:b3:d7:34:9a:f4:d6:8a:69:bf:d2:99:bd:9d:f9:3c:08:45:
f6:a7:d9:42:7a:15:02:9b:5d:c4:58:48:02:a0:a5:03:bd:8e:
4a:07:36:2c:6d:19:55:7e:d4:a0:c6:ed:89:35:2b:40:bd:3d:
b4:96:27:c1:32:5e:d0:8e:e3:1a:08:e8:7b:46:f6:8e:d7:20:
ea:8d:f4:1a:06:85:4c:77:b3:75:8b:91:e4:0f:3d:fe:2b:fc:
96:97:a8:32:af:83:96:08:3d:3b:02:81:e4:d5:a7:c2:86:96:
4e:62:05:ee:22:fc:b8:95:dd:2a:e1:31:b7:df:f5:7f:0e:a5:
66:ce:93:83:bc:a8:79:b3:53:9a:a1:d1:9a:ba:22:38:ba:c4:
7c:24:f6:c7:f9:81:a6:f1:10:3d:ec:0d:7b:6b:40:5d:36:52:
d5:77:35:24
-----BEGIN CERTIFICATE-----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Generated at Tue Nov 14 19:32:03 2023 by rpki-client on console-ams.rpki-client.org