Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/feuIUFOgA5OZYhJIDMKGfim2ECs.roa
File: feuIUFOgA5OZYhJIDMKGfim2ECs.roa (raw, json)
Hash identifier: k3hdab20bTYJNGi8sDPDaTtnv0QrjjqXJkGYzQkG5Qc=
Subject key identifier: 7D:EB:88:50:53:A0:03:93:99:62:12:48:0C:C2:86:7E:29:B6:10:2B
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0185728CA7A793858AC044453E5E1ABEA539
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/feuIUFOgA5OZYhJIDMKGfim2ECs.roa
Signing time: Mon 02 Jan 2023 12:54:58 +0000
ROA not before: Mon 02 Jan 2023 12:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 31.169.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:a7:a7:93:85:8a:c0:44:45:3e:5e:1a:be:a5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 2 12:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7deb885053a00393996212480cc2867e29b6102b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1e:7c:63:48:09:ff:f5:1b:ae:f5:c4:72:c5:
c3:eb:ec:74:da:eb:1c:e9:e4:42:83:b6:ef:0a:0a:
ce:8e:98:e8:19:e6:dd:ae:64:9f:14:cb:1f:a9:71:
82:7d:64:54:8a:ec:f4:c6:2f:81:d0:7b:23:c4:8f:
5e:0c:81:ea:48:40:02:87:29:2f:2d:32:0b:52:7d:
90:ae:5f:0d:5e:76:7d:25:9c:67:54:93:fe:ec:55:
f9:20:3f:d7:eb:00:c3:c0:38:37:62:0d:ec:59:6e:
c2:ea:13:fd:d7:ee:10:39:56:bc:61:00:c3:f4:96:
d8:e3:a4:33:10:f0:da:d7:6c:e3:99:e1:3e:d0:3f:
79:4a:27:a0:f2:1d:43:c9:eb:f3:d5:23:c1:22:58:
bd:30:cd:23:de:32:14:46:0b:87:72:99:f4:b9:cc:
3c:41:2e:a2:5f:5e:94:f3:f1:81:36:66:30:24:56:
8d:52:01:34:f2:e3:2e:a2:77:f2:0e:aa:d8:77:e5:
6f:ea:f3:09:b9:86:24:7b:83:a6:58:20:87:a6:3f:
f9:51:ca:00:ea:ef:5c:4c:49:60:39:64:60:f8:8a:
24:42:b1:0d:16:06:82:aa:99:ea:c3:18:4f:f5:da:
4c:51:d6:fa:99:8b:c7:9b:a9:79:44:10:17:c7:fb:
e0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EB:88:50:53:A0:03:93:99:62:12:48:0C:C2:86:7E:29:B6:10:2B
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/feuIUFOgA5OZYhJIDMKGfim2ECs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.89.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a8:c2:c8:b6:44:4e:78:44:98:1d:c4:c4:cd:42:d5:f3:27:
88:c5:0c:7b:fe:e0:2e:26:8a:5f:e6:38:d4:d7:09:22:82:2f:
3f:5e:c9:6f:35:b2:56:93:ba:7b:a0:fa:98:e1:c9:79:e8:0c:
a6:12:53:89:77:d6:6b:2a:05:32:0e:18:aa:9e:ed:23:43:9e:
60:2b:51:76:5f:1e:ec:4b:05:e5:87:25:0c:38:5c:1d:a4:32:
59:31:d4:3f:bd:80:59:c2:e3:51:f7:d8:a6:37:39:56:ab:93:
8a:29:6f:13:d2:34:9d:dd:fa:1d:77:d3:82:b8:25:a6:3f:bc:
89:b3:f1:4d:32:21:f8:51:15:36:dc:c3:fa:ea:97:0b:5e:93:
17:81:a6:23:2b:65:a0:88:08:91:12:15:6c:99:52:d9:ba:0d:
30:b1:6b:66:c9:6b:f9:80:4a:0e:29:d6:fd:8d:ce:5a:71:bc:
29:c3:b4:0a:57:2d:60:e9:8b:42:13:63:1d:4f:c2:d3:ed:b1:
1a:25:84:5e:42:36:ad:d4:e9:7d:ac:77:aa:86:92:ef:02:7f:
b5:92:df:e3:be:2e:79:1f:55:01:1c:9e:85:7f:d3:c7:80:f3:
f5:e9:a6:0b:82:ff:97:42:c0:06:ad:b2:eb:e6:69:f4:74:3d:
d6:ee:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:56 2024 by rpki-client on console-fra.rpki-client.org