Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/WqZll7uBw5VB_mAPAuK7-b4liBc.roa
File: WqZll7uBw5VB_mAPAuK7-b4liBc.roa (raw, json)
Hash identifier: cWyxE8ltYxB5uJXn/qeCyA1qC+nM8WvdKpSM+581W8Y=
Subject key identifier: 5A:A6:65:97:BB:81:C3:95:41:FE:60:0F:02:E2:BB:F9:BE:25:88:17
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018DE595FCCBDBD6398BE2A1108A53EC9824
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/WqZll7uBw5VB_mAPAuK7-b4liBc.roa
Signing time: Mon 26 Feb 2024 13:23:48 +0000
ROA not before: Mon 26 Feb 2024 13:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56582
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 01 Mar 2024 17:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:95:fc:cb:db:d6:39:8b:e2:a1:10:8a:53:ec:98:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Feb 26 13:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aa66597bb81c39541fe600f02e2bbf9be258817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:a3:af:4c:25:5c:5f:2d:c2:b9:8e:39:f7:
9e:03:38:42:a5:95:89:aa:49:69:0b:45:f3:54:d2:
30:3a:e0:a3:64:41:fa:88:1f:96:b1:28:4f:1e:37:
03:be:3f:57:1b:f3:80:78:e3:70:43:e0:b1:d1:13:
9f:a9:39:15:a3:97:62:ba:1c:ed:2b:4b:2f:eb:1a:
1b:55:06:86:de:14:67:dd:52:66:3b:be:92:66:a8:
a2:20:64:ef:1e:64:56:cc:91:ee:c4:5e:cb:e6:6e:
9e:d9:b9:af:e8:59:88:13:89:4d:a3:2b:78:bd:9e:
10:25:4a:f7:16:cc:c8:39:ea:01:e1:22:33:c3:c9:
4d:0b:2e:f0:73:87:dc:9e:ba:c5:3e:a5:72:b2:9c:
e0:34:53:9a:5a:e9:43:43:74:36:64:e3:b8:06:48:
cd:55:fe:3b:40:ec:43:1e:46:40:42:a2:19:3e:10:
da:91:61:48:7a:a3:49:35:27:ba:19:bd:0f:7d:c8:
b5:c7:b4:f7:0d:9b:c2:a2:0f:32:0a:3b:a5:ac:9a:
29:29:62:9a:0f:08:b0:dc:35:77:fd:5d:55:13:37:
7c:65:70:ad:13:40:ee:b3:22:b0:cf:92:09:e0:d7:
1c:ef:7e:d3:2b:90:fd:7f:c2:cd:8f:de:15:c0:82:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A6:65:97:BB:81:C3:95:41:FE:60:0F:02:E2:BB:F9:BE:25:88:17
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/WqZll7uBw5VB_mAPAuK7-b4liBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.74.0/24
31.169.76.0-31.169.78.255
31.169.81.0/24
31.169.84.0/24
31.169.88.0/24
31.169.92.0/22
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
66:47:68:bc:02:b0:3b:6c:3a:84:0f:36:a6:63:0d:2b:40:d5:
40:c0:54:de:c2:04:55:84:ef:8c:6b:e3:52:98:29:52:b4:b6:
79:a5:d3:3c:61:d2:a2:5d:2f:e8:12:23:9b:17:65:ce:b6:a6:
de:09:16:91:54:28:83:1f:11:a5:72:79:96:b8:9a:78:38:4d:
12:f0:61:57:b1:10:65:2e:72:f8:e5:09:bf:e3:5e:7e:da:5a:
ac:dd:2d:6f:6d:00:80:e4:9a:83:bd:e8:96:c1:97:0b:ac:be:
1c:29:ed:ed:ff:23:3d:f6:2e:1d:2c:e8:27:e4:39:0e:48:ec:
db:4b:cb:20:12:3a:70:9a:85:ab:0b:01:95:3c:3b:61:38:1a:
e1:e0:a3:54:43:ba:c8:26:64:e5:64:fa:26:97:f8:03:eb:f5:
0b:ae:7f:66:89:d2:d3:96:c0:66:a5:32:3e:ba:a5:37:b5:63:
fd:63:bf:c9:46:d8:18:11:4f:e6:a2:ce:7c:9e:a8:22:85:e5:
1d:94:b2:ca:40:81:bf:ee:28:46:57:05:e3:ac:ed:ca:26:0e:
ad:c7:68:06:95:a3:39:f2:d8:38:a8:e7:d1:55:15:1c:d5:ea:
8c:f3:93:2e:8c:de:63:64:99:b6:ea:24:ac:de:12:bd:66:4c:
29:1b:1d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:56 2024 by rpki-client on console-fra.rpki-client.org