Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/DLU4cKbzR5xZ2TRsqoUb5Ut_xjg.roa
File: DLU4cKbzR5xZ2TRsqoUb5Ut_xjg.roa (raw, json)
Hash identifier: n5QDoniuMLns2Tu1bWG5f1zJep4oZXnBV2opOsYp4Kk=
Subject key identifier: 0C:B5:38:70:A6:F3:47:9C:59:D9:34:6C:AA:85:1B:E5:4B:7F:C6:38
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018CB72890E5857D6E6C71ED09AF966C0B8F
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/DLU4cKbzR5xZ2TRsqoUb5Ut_xjg.roa
Signing time: Fri 29 Dec 2023 19:58:58 +0000
ROA not before: Fri 29 Dec 2023 19:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208972
IP address blocks: 31.169.84.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b7:28:90:e5:85:7d:6e:6c:71:ed:09:af:96:6c:0b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Dec 29 19:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cb53870a6f3479c59d9346caa851be54b7fc638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:42:89:75:12:df:5e:0d:b3:34:fb:79:50:
0b:c0:7f:e4:b6:0e:69:fb:c5:b8:6a:05:8e:ac:2b:
9d:3d:18:7f:14:c8:57:af:ef:93:3f:f7:1d:3b:54:
51:d4:49:56:21:1a:82:50:2b:14:1c:cd:4b:f0:91:
71:18:90:90:77:35:1b:ab:3c:b8:3d:67:5a:df:58:
dc:ff:c5:d9:6b:d3:d0:1f:13:7f:8c:1c:c1:47:3d:
97:b4:28:c6:21:32:ba:9e:d0:63:6b:0a:a8:b3:47:
1e:eb:86:a8:db:e8:52:83:d0:1d:9f:19:42:1d:a8:
d6:7c:07:bb:ef:8a:f2:85:e7:e0:09:f9:a2:3d:86:
c5:96:a8:a4:82:be:be:f6:a7:a4:83:73:4a:fa:dc:
14:36:fd:2f:37:fa:ff:5b:92:65:e2:7c:8d:52:cc:
c0:03:fc:62:8a:0a:f3:c1:a7:f0:91:9e:9e:96:90:
82:b7:8e:b9:be:38:54:fe:49:cd:73:e9:b0:25:51:
bc:e4:8a:b9:30:70:8e:79:da:29:bb:b0:0c:f8:4b:
b3:1b:8e:0e:b2:66:f9:d0:7d:0a:6f:7b:47:da:d8:
65:d7:c1:59:c7:03:43:f8:d4:54:83:5c:4a:02:f7:
27:08:3e:b7:58:e8:76:d2:fe:e9:32:eb:0a:90:ac:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B5:38:70:A6:F3:47:9C:59:D9:34:6C:AA:85:1B:E5:4B:7F:C6:38
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/DLU4cKbzR5xZ2TRsqoUb5Ut_xjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.82.0/24
31.169.84.0/24
31.169.90.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7b:3f:88:91:33:c8:8f:95:0a:2a:b5:2c:56:54:e3:fa:8d:
52:4a:ed:25:49:de:41:ff:f7:89:40:c5:5e:c4:d1:ec:8f:f2:
32:03:c0:d3:6b:48:30:99:45:9a:b7:12:c6:d4:2f:5c:31:d9:
53:23:55:f9:51:44:01:84:0f:9e:b8:ed:37:07:b6:a5:9a:b4:
9e:a3:6d:9c:2c:1f:78:7a:f5:25:36:ac:10:e4:82:d4:49:8f:
70:ae:b8:a9:71:b8:4b:32:a9:b3:88:6e:ba:3f:b8:11:86:18:
d6:fe:3d:c6:d2:de:a6:cb:0e:77:65:1a:2e:19:7b:c2:38:5d:
2e:7f:6a:9d:2a:23:fa:40:36:7d:1e:ed:39:58:ff:7c:2f:8a:
df:f2:c7:00:b5:e0:78:e7:f9:07:88:48:38:b6:99:24:a1:2b:
9a:04:ca:88:51:ad:d7:aa:de:6c:75:d4:76:e4:83:1a:d1:a3:
6d:c2:63:ed:9b:98:17:8a:bf:27:3c:ea:b2:e2:95:a3:44:be:
00:8b:d1:1b:df:8c:12:62:c7:75:b3:7f:1b:ee:23:b0:05:a9:
af:42:dc:a2:ef:08:df:c4:83:88:7e:bd:cc:0e:03:b1:fa:bd:
8a:1e:91:41:6c:57:2f:56:e1:65:9a:3a:7a:c6:81:dc:56:be:
9b:cf:80:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:47 2024 by rpki-client on console-ams.rpki-client.org