Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/hluW4Xw9KKviEPuSEIIxCoUTJJQ.roa
File: hluW4Xw9KKviEPuSEIIxCoUTJJQ.roa (raw, json)
Hash identifier: 4vR9p5HfuQakYAajUVQVBHuKvx42gxozxVo7hlZWCCc=
Subject key identifier: 86:5B:96:E1:7C:3D:28:AB:E2:10:FB:92:10:82:31:0A:85:13:24:94
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0185728CA9CFB0F2AE16F4785C415C1BEB61
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/hluW4Xw9KKviEPuSEIIxCoUTJJQ.roa
Signing time: Mon 02 Jan 2023 12:54:59 +0000
ROA not before: Mon 02 Jan 2023 12:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48737
IP address blocks: 31.169.75.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:a9:cf:b0:f2:ae:16:f4:78:5c:41:5c:1b:eb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 2 12:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=865b96e17c3d28abe210fb921082310a85132494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:1b:b7:24:6c:27:a1:c3:6b:4e:38:42:2b:
b7:49:4a:2b:8e:6e:f9:91:69:9b:4f:42:eb:df:2c:
20:69:dd:8c:94:68:25:be:6e:6c:2a:ae:a2:33:8f:
b4:0a:b5:d1:95:f1:df:18:23:32:e7:9a:32:52:89:
e2:9c:2c:06:78:39:df:0c:b0:a2:5a:46:79:ac:9f:
72:8c:f0:25:ea:b4:8e:0e:1b:79:da:c9:50:5d:96:
30:99:b7:46:cb:3f:92:8d:f8:9c:44:2e:3a:30:3c:
64:05:db:18:4c:f0:71:4e:84:98:12:d0:97:48:ea:
aa:31:ac:c6:93:62:5e:87:d1:42:95:5b:95:56:62:
96:41:ab:af:49:3e:26:41:4b:e1:ad:ca:ac:87:a8:
6d:28:c3:3b:63:7a:93:d7:3d:61:9f:dc:c0:c8:ac:
7a:21:a8:d8:5a:fd:af:f3:a7:0f:f4:34:c0:ea:46:
12:6c:37:a0:ac:2d:e7:35:ad:2b:d9:d2:33:bb:67:
0f:33:be:6f:a8:42:b0:03:80:59:d2:65:22:a7:b8:
d2:23:9f:2f:ff:05:0f:ff:b0:f3:cc:d6:5d:5d:35:
9a:03:81:1b:f1:a4:26:a6:38:28:42:04:bd:1b:cc:
63:ac:c2:3e:e3:b9:5d:5c:0a:df:b2:81:fd:8e:b6:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5B:96:E1:7C:3D:28:AB:E2:10:FB:92:10:82:31:0A:85:13:24:94
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/hluW4Xw9KKviEPuSEIIxCoUTJJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.75.0/24
31.169.85.0/24
31.169.87.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6d:8a:4a:f8:03:9a:17:6d:95:f5:1d:4c:55:be:0e:f5:36:
32:a2:15:07:4c:52:9e:49:aa:70:50:6e:85:75:a6:74:b2:e5:
fa:dc:21:f1:5a:d9:e6:c8:14:4e:3e:1b:8a:e5:c0:dd:65:11:
3b:f3:80:b3:16:56:7a:17:e4:3a:37:11:cd:b1:42:6d:54:21:
8d:75:af:5c:92:4a:e1:3f:af:4d:18:3e:8c:e5:14:48:9b:aa:
76:50:b2:ef:ae:bd:46:35:2c:c4:3a:2c:b3:db:94:56:d0:59:
b5:61:3c:34:d2:0d:29:67:8c:40:8d:9f:bd:c5:3f:34:af:f4:
11:7b:a0:5c:56:af:57:3f:90:8e:c5:88:7a:5f:02:63:5e:8b:
9e:f4:30:00:cc:a5:95:f6:33:4a:3e:53:80:f8:4b:65:79:6a:
cb:66:fe:40:02:a1:a8:a3:05:bc:e1:9f:b5:54:e6:3c:25:01:
2e:0f:fb:35:09:65:27:e1:26:d1:c3:b8:98:c0:a5:b3:42:93:
ed:0c:c0:3b:f8:c9:b3:ac:4e:69:d4:ba:6e:8a:9e:ca:76:8b:
ec:ab:00:04:58:88:34:2b:8e:5f:45:1e:81:66:92:d6:bf:e3:
69:3e:03:9b:9e:f6:d5:3c:73:0c:fb:ce:ec:96:85:04:de:b6:
6d:36:91:d4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVyjKnPsPKuFvR4XEFcG+thMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw
ZmM2MmEwHhcNMjMwMTAyMTI1NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjViOTZlMTdjM2QyOGFiZTIxMGZiOTIxMDgyMzEwYTg1MTMyNDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxgbtyRsJ6HDa044Qiu3SUorjm75
kWmbT0Lr3ywgad2MlGglvm5sKq6iM4+0CrXRlfHfGCMy55oyUoninCwGeDnfDLCi
WkZ5rJ9yjPAl6rSODht52slQXZYwmbdGyz+SjficRC46MDxkBdsYTPBxToSYEtCX
SOqqMazGk2Jeh9FClVuVVmKWQauvST4mQUvhrcqsh6htKMM7Y3qT1z1hn9zAyKx6
IajYWv2v86cP9DTA6kYSbDegrC3nNa0r2dIzu2cPM75vqEKwA4BZ0mUip7jSI58v
/wUP/7DzzNZdXTWaA4Eb8aQmpjgoQgS9G8xjrMI+47ldXArfsoH9jrb2bQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIZbluF8PSir4hD7khCCMQqFEySUMB8GA1UdIwQY
MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt
MjYxNzBkYTRhMGIxLzEvaGx1VzRYdzlLS3ZpRVB1U0VJSXhDb1VUSkpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx
LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH6lLAwQA
H6lVAwQAH6lXMA0GCSqGSIb3DQEBCwUAA4IBAQA4bYpK+AOaF22V9R1MVb4O9TYy
ohUHTFKeSapwUG6FdaZ0suX63CHxWtnmyBROPhuK5cDdZRE784CzFlZ6F+Q6NxHN
sUJtVCGNda9ckkrhP69NGD6M5RRIm6p2ULLvrr1GNSzEOiyz25RW0Fm1YTw00g0p
Z4xAjZ+9xT80r/QRe6BcVq9XP5COxYh6XwJjXoue9DAAzKWV9jNKPlOA+EtleWrL
Zv5AAqGoowW84Z+1VOY8JQEuD/s1CWUn4SbRw7iYwKWzQpPtDMA7+MmzrE5p1Lpu
ip7KdovsqwAEWIg0K45fRR6BZpLWv+NpPgObnvbVPHMM+87sloUE3rZtNpHU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:56 2024 by rpki-client on console-fra.rpki-client.org