Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/biAvdqXLgLmPkig9RNkY8L7AmN0.roa
File: biAvdqXLgLmPkig9RNkY8L7AmN0.roa (raw, json)
Hash identifier: RgEtauCItFKRa9YGXz6QUluQJjzvxAc3L0lILczLYkU=
Subject key identifier: 6E:20:2F:76:A5:CB:80:B9:8F:92:28:3D:44:D9:18:F0:BE:C0:98:DD
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018AE1105A59C0B25B6B6896CFCE6D12E739
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/biAvdqXLgLmPkig9RNkY8L7AmN0.roa
Signing time: Fri 29 Sep 2023 13:10:59 +0000
ROA not before: Fri 29 Sep 2023 13:10:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208972
IP address blocks: 31.169.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 08:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e1:10:5a:59:c0:b2:5b:6b:68:96:cf:ce:6d:12:e7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Sep 29 13:10:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e202f76a5cb80b98f92283d44d918f0bec098dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:98:c1:8a:95:fe:55:b2:fd:54:f5:73:46:52:
38:82:3d:18:d1:ba:5b:32:fa:8c:19:9e:96:fc:8d:
02:d8:b4:0e:ec:2d:42:86:5e:87:62:bb:38:3d:bd:
f1:47:cd:44:8e:09:1b:21:c9:5c:90:62:8f:31:72:
4e:bc:7c:da:17:78:4c:84:a8:e7:d7:d5:4e:41:52:
b8:f9:fa:c3:8c:d8:17:9b:04:50:5b:40:b3:35:73:
a7:30:4f:9b:d6:cf:0d:af:7a:bf:0b:a6:79:e5:66:
b7:7a:d5:1c:9b:a2:f3:68:81:51:5e:48:f2:19:c4:
fb:98:b3:21:d4:8b:5f:25:90:df:39:56:bd:29:b6:
af:f8:66:df:47:4f:47:a0:cd:bb:20:cd:48:1f:64:
68:ae:42:04:45:d7:94:52:12:18:71:9e:39:5e:72:
7e:85:8b:64:db:14:11:86:45:e1:28:43:c6:55:b9:
b0:75:16:96:fa:a5:c6:34:55:0d:09:c8:30:9e:44:
a5:87:1c:60:ea:88:b4:c7:7f:ed:9f:92:96:ae:31:
47:cd:2c:0b:07:65:85:bc:ff:40:a5:e8:65:45:3e:
2b:3d:95:4c:c5:63:da:60:dc:48:17:be:c7:4b:7e:
a2:83:84:14:1f:9d:20:ef:47:a1:a8:34:65:ca:e8:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:20:2F:76:A5:CB:80:B9:8F:92:28:3D:44:D9:18:F0:BE:C0:98:DD
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/biAvdqXLgLmPkig9RNkY8L7AmN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.84.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:4c:82:1f:10:93:46:c1:6c:73:2e:1a:6c:bf:4b:b6:dc:5f:
0b:e3:bf:9b:98:65:47:d5:0e:58:b9:05:10:16:ee:21:9c:15:
b3:82:a4:a5:fa:b6:9f:3b:d7:ea:66:0e:92:2d:46:f6:ab:02:
df:5a:ff:06:1f:28:83:23:cb:46:ca:cf:e5:ea:75:5b:f2:3a:
d2:87:25:de:03:82:d0:26:9c:03:77:68:1e:e1:d5:17:9c:56:
7b:23:3a:49:a6:b9:af:fd:af:be:d3:e1:ca:1c:51:79:47:f8:
0f:63:9f:dd:20:11:96:3a:ac:df:1f:74:20:d9:23:1f:28:b2:
b1:ba:bb:77:b6:12:d8:03:bd:7f:15:a7:41:47:1e:4a:fd:f6:
96:19:16:f4:10:13:5b:13:5c:e4:5f:e6:e7:64:43:c2:80:0b:
44:3f:c4:48:c8:41:29:cc:79:ee:a2:72:ca:b2:f5:a4:15:49:
89:4d:9f:50:84:39:97:67:69:26:be:c4:ad:f4:3c:65:64:1a:
f0:59:73:85:8b:35:0e:b6:d3:8e:a1:0f:19:03:9c:71:ec:8e:
79:26:ea:b8:a7:0c:d7:7e:75:1b:5d:fb:40:f6:ac:66:60:90:
04:9c:24:1d:54:be:ca:06:1d:44:65:dc:2d:57:67:d0:4b:4e:
59:f3:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:56 2024 by rpki-client on console-fra.rpki-client.org