Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/aibaoxzVj2jAyxDHhTQSi89hMD0.roa
File: aibaoxzVj2jAyxDHhTQSi89hMD0.roa (raw, json)
Hash identifier: CkyEd1Fce5Eh5uJAfMfVISMGkI5foAtW4UBbEFNTuuM=
Subject key identifier: 6A:26:DA:A3:1C:D5:8F:68:C0:CB:10:C7:85:34:12:8B:CF:61:30:3D
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018E41F0837C42485903AD970C4331675468
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/aibaoxzVj2jAyxDHhTQSi89hMD0.roa
Signing time: Fri 15 Mar 2024 11:47:45 +0000
ROA not before: Fri 15 Mar 2024 11:47:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 18:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:f0:83:7c:42:48:59:03:ad:97:0c:43:31:67:54:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Mar 15 11:47:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a26daa31cd58f68c0cb10c78534128bcf61303d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:3a:5d:35:b9:01:5d:32:f3:e4:42:b8:9f:
2d:c4:44:21:98:7c:6a:b1:52:f2:d3:7f:19:f9:87:
92:a6:cd:5c:71:67:ee:28:11:77:b4:30:9e:3f:8e:
d8:85:03:4d:4e:96:fc:10:c0:46:1a:6b:09:1c:c9:
fa:e7:cf:00:45:79:11:64:97:d4:67:9e:41:14:b7:
32:1d:e4:c5:22:d4:2a:e9:8a:da:2c:42:74:ff:08:
76:6a:06:bf:63:3a:42:38:51:ed:a9:05:df:4c:71:
d3:da:22:0c:10:da:17:4d:9f:ca:60:fa:6a:42:e7:
01:e9:aa:21:0e:d1:37:18:68:0a:2f:38:c8:f2:ed:
71:9f:8c:fb:1f:5c:4b:0b:52:51:59:bb:5f:b9:bf:
e3:b0:be:15:26:67:60:4a:5a:2b:7c:4f:e8:8b:5d:
bb:cf:f6:12:35:c0:9b:5a:01:94:87:a5:46:b1:ac:
29:1e:73:e3:2d:b7:61:53:a4:43:25:e5:56:3e:92:
19:1b:5e:60:89:1a:ca:72:3f:bd:2a:f9:d3:ed:19:
ac:d5:e6:a5:9e:c7:56:f9:8f:e8:21:82:e0:b7:0a:
a5:44:ee:31:7e:6d:a4:18:18:f5:b5:8c:79:7c:1f:
e5:b4:79:b7:76:0e:cf:30:fe:7b:e8:6f:09:66:e8:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:26:DA:A3:1C:D5:8F:68:C0:CB:10:C7:85:34:12:8B:CF:61:30:3D
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/aibaoxzVj2jAyxDHhTQSi89hMD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.77.0-31.169.78.255
31.169.81.0-31.169.82.255
31.169.88.0/24
31.169.92.0-31.169.94.255
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c1:c0:2e:59:40:5c:2d:d7:a3:65:87:f9:87:62:5d:75:5f:
35:c6:2c:73:24:dc:5c:ea:ad:f6:d7:03:75:81:b4:68:dd:dd:
a6:5f:fb:03:7a:ab:7c:40:63:1c:7b:a5:4c:c6:56:86:1a:6f:
bc:96:e6:40:a5:1a:c5:23:10:31:36:70:f4:95:23:19:c7:4e:
d9:bc:26:fa:8a:92:12:c1:83:99:6e:0f:b4:92:ba:b4:9f:d7:
97:2f:00:eb:d2:fa:fd:35:1e:86:3c:e7:cc:1c:0f:b6:fa:dc:
b6:3f:61:f4:f2:bc:2b:80:97:d2:88:3d:1c:c0:0d:32:d3:36:
db:e7:00:a2:8c:24:ec:7a:30:61:5a:1a:7d:c5:6f:60:e4:8d:
f2:9d:6b:45:2b:c4:6d:87:5f:5a:2f:29:81:b5:2e:86:f4:61:
fe:b5:c0:59:75:85:a0:c2:2d:6f:12:58:8e:1a:37:b0:39:a0:
61:2f:a7:75:8b:8a:d4:45:52:9f:ae:f0:be:5a:3e:92:48:e1:
f5:6c:df:71:c1:68:b1:06:bc:1c:fc:a4:21:44:75:46:70:93:
63:5d:47:fd:71:e2:ef:32:12:f0:ed:dc:bc:3f:e6:c9:40:b8:
7e:ef:48:bc:86:a6:06:9e:b5:d8:bd:b3:69:62:c4:21:80:20:
9d:2a:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:47 2024 by rpki-client on console-ams.rpki-client.org