Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/F2SxQ-68Sw3AVnlK_oOOMBgBjOk.roa
File: F2SxQ-68Sw3AVnlK_oOOMBgBjOk.roa (raw, json)
Hash identifier: IkfCO7EsvFYSoYM+iZkAiF3+gnbNMBOLtrD1HV4/p0Q=
Subject key identifier: 17:64:B1:43:EE:BC:4B:0D:C0:56:79:4A:FE:83:8E:30:18:01:8C:E9
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018DEAAAF3C9E7D38372E3B045EA8ADEAD6F
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/F2SxQ-68Sw3AVnlK_oOOMBgBjOk.roa
Signing time: Tue 27 Feb 2024 13:04:48 +0000
ROA not before: Tue 27 Feb 2024 13:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208885
IP address blocks: 31.169.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 16:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ea:aa:f3:c9:e7:d3:83:72:e3:b0:45:ea:8a:de:ad:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Feb 27 13:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1764b143eebc4b0dc056794afe838e3018018ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:47:76:d9:52:a9:6d:65:bd:52:fe:d0:05:
45:01:0f:18:64:fc:a5:a9:f4:58:66:03:3e:4f:2e:
9a:e5:fb:d8:ff:46:71:8b:88:7f:5c:cf:65:c6:1a:
04:b1:a6:2e:3d:1b:6e:63:0b:c1:66:f0:46:52:52:
b9:16:81:ef:50:09:29:52:fa:3c:98:50:19:a9:45:
01:10:f1:5c:cc:1e:d6:26:b7:bb:ba:40:47:7d:b2:
92:e3:3f:01:21:59:0b:4e:df:72:fc:73:12:63:49:
64:20:ed:ac:42:39:af:13:a3:79:0f:9d:c5:89:e9:
6c:d7:49:b2:d3:46:72:41:bb:e1:d8:96:50:da:89:
b0:2b:f7:2a:7f:10:72:d4:e5:ac:86:a8:c8:42:59:
5a:8c:21:68:2f:63:34:26:e8:87:f5:3b:ff:6f:de:
d4:2f:a9:29:5f:3f:8f:a1:b2:26:6e:78:6a:4c:42:
99:2f:98:f2:0d:69:d9:b4:0c:ca:65:89:1c:0c:16:
13:dc:9a:c2:83:5e:f9:c0:ec:b1:80:52:00:34:57:
c5:12:69:95:3e:c1:6a:7b:d3:7c:a4:10:ff:92:5c:
86:62:9e:c0:03:ae:8a:88:4c:de:06:49:9c:bf:ca:
08:8d:54:52:a0:c2:02:3e:ef:13:8e:f3:f9:81:f9:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:64:B1:43:EE:BC:4B:0D:C0:56:79:4A:FE:83:8E:30:18:01:8C:E9
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/F2SxQ-68Sw3AVnlK_oOOMBgBjOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.84.0/24
Signature Algorithm: sha256WithRSAEncryption
64:42:23:de:ed:5a:d3:17:9c:2b:1d:46:6d:5b:50:5b:a5:9e:
7f:61:13:70:b6:8d:1d:d1:c2:4c:30:68:9b:44:fb:69:5f:47:
de:e3:2c:0b:e1:d1:96:1e:15:91:3d:5d:8b:e1:3f:92:07:b5:
9d:69:a2:53:f0:ef:60:a5:5a:87:3c:02:3e:fc:91:ce:79:c3:
2d:d9:25:54:12:d2:b3:c0:5b:59:5a:1b:7d:47:0d:8e:cf:ea:
87:7b:3f:ba:fb:4f:37:1a:ed:8e:ec:ad:d3:c9:de:f5:df:41:
30:e6:75:bc:ed:5e:12:50:bf:7f:12:8c:9a:6b:18:de:85:75:
7a:6a:25:a4:fb:6b:9c:ff:0d:b5:9d:07:53:3a:de:c2:53:a6:
2b:33:81:47:6e:b5:48:d5:44:cd:56:db:db:32:ce:7e:df:82:
1d:12:5b:c3:19:19:28:ac:f4:ee:59:dd:24:d9:23:39:ff:94:
f1:28:6b:59:a3:21:37:6f:22:00:9d:b3:b7:4d:8f:f3:41:b6:
a4:80:16:f6:5d:bc:36:0e:f3:f0:fa:12:63:c2:cc:08:a8:33:
e3:46:ec:d6:6b:c6:ac:f1:58:17:17:31:6e:2a:21:60:16:e8:
44:18:8e:5d:18:4e:79:38:c3:fd:54:dc:53:7f:22:5c:c2:45:
6e:ee:f7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:56 2024 by rpki-client on console-fra.rpki-client.org