Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/oq7yjPozxhONpJFmhr7Fau7FYY4.roa
File: oq7yjPozxhONpJFmhr7Fau7FYY4.roa (raw, json)
Hash identifier: rK5f88cPzAtZCRvVkoEf/4sNZ3sICZVm+MyHv49up2w=
Subject key identifier: A2:AE:F2:8C:FA:33:C6:13:8D:A4:91:66:86:BE:C5:6A:EE:C5:61:8E
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0185728CA94D300CE43919F299970796E0A7
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/oq7yjPozxhONpJFmhr7Fau7FYY4.roa
Signing time: Mon 02 Jan 2023 12:54:59 +0000
ROA not before: Mon 02 Jan 2023 12:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 31.169.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:a9:4d:30:0c:e4:39:19:f2:99:97:07:96:e0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 2 12:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2aef28cfa33c6138da4916686bec56aeec5618e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:67:75:80:bf:36:c9:8e:c7:45:b5:50:7f:
de:cf:26:b2:22:b7:2c:6d:0f:6a:db:55:10:d4:2d:
39:2e:e6:37:f3:02:da:ea:9e:a3:e9:04:fd:01:c1:
e0:24:93:90:1c:09:b0:8e:a5:89:d5:2c:27:b7:1e:
e5:76:7a:d8:e4:14:47:7b:e1:24:2d:9e:bb:86:0a:
4e:ab:35:c9:59:1d:70:46:20:35:3d:c9:65:ad:d8:
51:58:53:b3:0e:ac:1b:47:6f:59:a4:d4:f7:ba:25:
58:c1:04:37:f6:11:6a:45:a7:65:45:8a:4e:8d:0f:
18:83:4d:47:8a:e2:18:25:31:13:2e:44:8c:47:7d:
8c:1a:4c:16:4a:ef:5b:cc:b4:aa:31:cc:39:c9:08:
72:d2:9c:03:2b:cb:d2:f5:e0:1b:b8:9f:1f:11:4b:
7c:91:44:e7:71:16:20:2b:4e:11:cf:27:31:68:06:
6b:53:40:14:08:af:a3:33:02:f9:6d:c5:c2:e3:b6:
d7:0e:09:f7:7e:8a:32:15:26:ff:5b:89:bf:02:f7:
49:c6:2c:a3:44:5b:64:0f:4d:2d:37:16:e0:74:67:
46:60:0d:09:73:ae:0e:58:f8:d3:d1:20:90:b3:75:
eb:3d:90:7a:e7:e5:f4:5d:ca:16:f7:89:d6:15:c6:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AE:F2:8C:FA:33:C6:13:8D:A4:91:66:86:BE:C5:6A:EE:C5:61:8E
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/oq7yjPozxhONpJFmhr7Fau7FYY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.79.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a4:f1:bf:2d:a6:c8:01:3d:c9:f5:3c:3e:28:13:bc:ce:70:
26:bc:de:e7:c2:11:9e:a0:93:86:d1:d9:d8:2f:0e:c3:09:fd:
78:31:2f:5b:d6:66:30:e4:08:8a:c5:b2:ee:a0:34:21:ed:40:
54:38:b9:e9:9a:99:69:77:be:71:93:68:49:a7:99:42:ba:bf:
14:4c:10:ac:17:23:36:0f:d1:4a:0f:84:3e:f0:84:68:c3:bd:
bb:4c:70:de:8a:46:51:01:87:41:71:2d:d2:d1:c6:74:d8:ed:
44:03:be:f6:48:ee:aa:a1:e8:99:6b:07:a6:6f:06:59:ac:bd:
10:c8:75:b9:28:4a:26:62:ce:d7:92:0f:b7:22:44:80:97:bc:
9c:dc:a7:63:41:1a:fb:23:e1:03:cd:2d:17:5a:f3:90:49:a3:
6d:a3:fa:3d:f7:00:23:15:bf:a0:a8:b3:1d:c8:5f:a9:e6:c0:
39:c7:2f:0f:2e:cd:b1:a6:81:ac:2e:46:8c:2c:e5:1b:28:6c:
9e:e5:d8:20:f0:94:78:64:e5:f2:f7:44:e0:9b:cf:dc:65:32:
da:81:e6:5d:82:9f:f8:7a:e6:68:da:bd:14:4c:60:19:d8:ee:
3d:e6:be:b3:43:11:4b:e3:8e:6d:d5:49:e2:e5:70:c6:b7:64:
96:9f:3e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:39 2024 by rpki-client on console-fra.rpki-client.org