Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/g4l6QsiitWqJZUuzg4A8Suyn43I.roa
File: g4l6QsiitWqJZUuzg4A8Suyn43I.roa (raw, json)
Hash identifier: o/EmZIg/iOxe4M4KlEvqHQcRAgK0iF8rIAaBr2s2MNo=
Subject key identifier: 83:89:7A:42:C8:A2:B5:6A:89:65:4B:B3:83:80:3C:4A:EC:A7:E3:72
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018A08C0270AE1A9208519BC16C18E400BF5
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/g4l6QsiitWqJZUuzg4A8Suyn43I.roa
Signing time: Fri 18 Aug 2023 13:05:25 +0000
ROA not before: Fri 18 Aug 2023 13:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 31.169.74.0/24 maxlen: 24
31.169.83.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.80.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.86.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 11:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:c0:27:0a:e1:a9:20:85:19:bc:16:c1:8e:40:0b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Aug 18 13:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83897a42c8a2b56a89654bb383803c4aeca7e372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:fc:6a:7f:54:b6:fb:bf:5c:76:f3:df:16:
4c:7f:0e:54:48:84:eb:2d:8d:30:42:bb:52:91:0f:
62:df:b5:88:51:f6:b7:48:cb:1d:be:85:f2:e7:99:
54:ee:eb:85:ea:3e:80:9d:64:7b:0c:0f:70:7a:3c:
0a:f5:60:d9:9d:ba:0f:ac:7a:37:2c:31:c2:1a:69:
97:16:04:c8:8a:6c:d1:68:5d:8e:a8:d9:d8:91:3f:
2a:03:91:f9:46:97:ac:fc:43:4d:89:6f:ce:cc:79:
9d:0d:17:8d:54:97:00:3a:bc:93:d2:9c:85:ca:a4:
43:ac:4b:c4:c1:ec:f6:ff:0c:be:88:37:8c:a8:00:
4c:04:a3:7d:ee:d0:76:90:4b:19:45:f1:86:4f:b5:
1f:ec:62:5f:22:f1:57:56:de:26:a4:50:cf:cb:15:
bc:23:ea:46:97:02:4d:c2:6a:aa:79:b6:29:41:65:
84:5e:a0:d4:4b:3c:5a:69:3c:59:32:e9:5c:44:cd:
30:81:a2:31:93:89:c2:69:03:3a:d4:b2:51:64:18:
ad:2f:92:95:c5:37:78:95:8d:bb:0d:a2:f0:a5:59:
11:e1:a7:d1:e9:08:90:3c:a3:00:32:81:c0:8e:5d:
ae:6b:56:d4:f4:81:2d:57:92:c2:df:fe:64:72:54:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:89:7A:42:C8:A2:B5:6A:89:65:4B:B3:83:80:3C:4A:EC:A7:E3:72
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/g4l6QsiitWqJZUuzg4A8Suyn43I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.74.0/24
31.169.80.0/24
31.169.82.0-31.169.84.255
31.169.86.0/24
31.169.88.0/24
31.169.90.0/24
Signature Algorithm: sha256WithRSAEncryption
88:08:99:a0:88:65:a7:d6:4f:36:66:e2:0c:3c:5d:09:94:b3:
30:6e:11:88:35:55:ff:52:97:75:e8:94:12:48:81:52:e5:f1:
c8:f8:b4:05:13:e5:38:e4:dc:3b:cf:f7:db:51:77:9f:6d:c8:
c1:63:82:89:eb:f8:75:4e:1d:e3:4b:7d:ee:5e:5e:38:cc:46:
49:c4:85:83:2c:96:c2:7f:0f:62:3f:f4:4c:dd:12:d0:ab:3a:
96:3e:1e:50:81:a6:1c:65:7e:36:17:4f:42:c5:a1:09:25:1e:
38:65:ad:0f:06:16:fc:e9:22:99:08:ec:c7:6d:98:b2:3c:70:
ba:c1:94:96:6c:30:74:00:5f:88:91:c3:6d:d9:7d:9c:4d:72:
dc:e6:04:c4:e0:af:e9:87:9c:c6:86:16:23:07:81:38:6e:13:
89:d1:3d:7c:97:a0:4b:9d:0e:a3:d9:d6:22:00:7f:d8:9e:ad:
51:84:4f:1e:56:48:04:4d:56:2f:63:ca:62:f1:33:a9:bb:8f:
76:5e:3c:87:8b:93:94:c3:9c:e0:d6:c6:6c:b2:04:81:d6:d5:
c2:bc:ff:de:9e:2e:44:51:8c:42:3d:fb:fe:03:58:fd:ff:ff:
b3:00:78:78:f3:a5:f6:70:e9:22:5a:62:26:f9:ce:f3:bf:05:
e5:73:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:56 2024 by rpki-client on console-fra.rpki-client.org