Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/P7j5hHYlhSh1pZZRYD2zWDUkBWc.roa
File: P7j5hHYlhSh1pZZRYD2zWDUkBWc.roa (raw, json)
Hash identifier: Izw9Ljk9QXonXmA4uAxRoW6CLAAQmowqYXR3CnOS4f8=
Subject key identifier: 3F:B8:F9:84:76:25:85:28:75:A5:96:51:60:3D:B3:58:35:24:05:67
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018E480B5230906588DB9D59B34773395CB0
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/P7j5hHYlhSh1pZZRYD2zWDUkBWc.roa
Signing time: Sat 16 Mar 2024 16:14:45 +0000
ROA not before: Sat 16 Mar 2024 16:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208885
IP address blocks: 31.169.84.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 22:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:0b:52:30:90:65:88:db:9d:59:b3:47:73:39:5c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Mar 16 16:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fb8f9847625852875a59651603db35835240567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:73:d9:2b:82:50:84:56:95:5b:76:92:db:
03:df:3c:53:bf:b1:20:d4:cd:e6:3b:06:0a:51:9d:
f8:66:59:29:d2:6e:0d:10:dc:48:d7:3a:f0:15:6c:
f6:f7:7d:c5:78:84:08:11:4a:e0:5a:05:22:54:0c:
9a:00:40:76:37:b0:7b:ea:6b:9e:67:7b:fe:d5:a8:
80:61:da:4f:16:d6:62:04:88:fe:f4:b2:b4:c6:fe:
03:05:28:3f:6e:48:37:30:ba:d9:c6:37:35:34:9c:
88:20:3a:34:e2:11:30:ae:0e:6d:b9:1e:d7:48:3e:
1a:ce:1d:c8:5d:f1:c6:4f:37:3f:14:d9:80:45:98:
3b:43:88:19:5a:c7:9c:dd:d5:3e:d6:08:c6:2f:c4:
db:ed:17:23:4b:d2:ec:79:8c:3e:58:16:42:f7:8f:
42:9c:dc:3f:48:d2:74:95:4e:c0:ff:d2:85:21:a8:
7c:16:49:6e:ed:17:1c:e5:db:27:d0:ac:51:43:fa:
fc:e9:d0:df:9a:58:de:5c:23:d8:bf:39:b7:5b:21:
4e:1a:2c:14:68:8a:36:73:29:5a:69:e0:4c:d0:52:
e0:5c:b2:37:5c:71:55:8a:a0:b9:2a:e7:d4:6e:f9:
e6:bf:d5:e3:9c:60:ed:9b:00:13:a4:26:a4:8b:6f:
72:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B8:F9:84:76:25:85:28:75:A5:96:51:60:3D:B3:58:35:24:05:67
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/P7j5hHYlhSh1pZZRYD2zWDUkBWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.84.0/24
31.169.88.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:19:c4:f0:05:e9:a6:2a:5a:fc:20:d9:10:00:d2:ee:c0:33:
fb:d2:1a:6c:a2:55:76:b4:86:ca:5a:48:22:48:62:b4:f3:f8:
15:eb:7f:8d:cb:3e:0b:d9:59:48:c4:88:86:b3:e8:1a:3d:e0:
f7:70:6c:e5:ea:72:13:e9:a8:e7:2f:a2:84:1c:b3:f1:eb:d3:
19:6c:6a:d5:43:98:c4:8d:e5:ec:85:5a:68:97:76:ac:d7:bd:
d3:0a:a4:c9:ab:fb:7c:cc:cf:62:11:01:23:16:9c:82:e7:b3:
eb:9b:2a:4f:42:2c:01:12:bc:18:2d:0b:ea:89:01:dc:cb:2a:
c0:44:3b:d1:79:c7:85:26:b4:4d:b6:42:05:0b:7f:19:97:ed:
4c:ae:08:c1:c0:e9:e6:09:e7:a2:cb:d3:63:0e:94:b3:8c:b4:
7a:ec:01:98:f5:c5:f4:4f:98:b3:7d:fe:44:ad:cd:f4:fc:de:
9b:d4:2b:87:19:7b:61:78:4e:e7:66:d8:ba:c8:90:21:95:ce:
85:9f:07:c6:db:65:23:ef:1a:a4:dc:c6:19:57:4e:ab:a0:b9:
8f:86:52:4d:cd:e9:51:af:31:f9:d2:f8:6a:da:7b:83:65:a0:
32:81:c6:da:70:a0:da:08:84:f9:ba:7b:7c:cd:d8:18:88:6e:
eb:ee:9b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:40:54 2024 by rpki-client on console-fra.rpki-client.org