Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ssKY-49h4KN_X3wo_8RK9ScS03k.roa
File: ssKY-49h4KN_X3wo_8RK9ScS03k.roa (raw, json)
Hash identifier: iKlZ4bEbbSgi6iATvirZDsuA8HmBwRMNjcUMC5f/KK8=
Subject key identifier: B2:C2:98:FB:8F:61:E0:A3:7F:5F:7C:28:FF:C4:4A:F5:27:12:D3:79
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018DC1B9975653B3C02E22DE8F2B17C74D3C
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ssKY-49h4KN_X3wo_8RK9ScS03k.roa
Signing time: Mon 19 Feb 2024 14:16:21 +0000
ROA not before: Mon 19 Feb 2024 14:16:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34984
IP address blocks: 31.169.80.0/24 maxlen: 24
31.169.83.0/24 maxlen: 24
31.169.86.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 11:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:b9:97:56:53:b3:c0:2e:22:de:8f:2b:17:c7:4d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Feb 19 14:16:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2c298fb8f61e0a37f5f7c28ffc44af52712d379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:9e:d1:05:99:9a:02:f6:e6:b2:8d:a6:1d:
97:40:ba:69:1c:08:ba:b5:96:13:e6:5d:76:a0:5c:
06:72:28:fc:06:cd:1a:45:7c:a0:61:78:35:f4:a5:
31:5f:54:6d:22:e7:61:9b:2e:18:d5:21:1c:41:80:
cd:7a:70:8b:28:ec:e9:46:b2:2f:8e:c9:28:51:4b:
6c:1b:d0:d3:cc:ab:df:5c:36:88:36:2c:66:77:a7:
71:94:82:71:1d:7d:e1:80:43:ab:24:e1:1b:dd:5d:
67:21:d0:50:cf:50:84:c4:c5:6a:d8:66:67:71:11:
38:7a:e5:c5:45:78:af:a0:cf:e0:67:50:d3:23:a5:
21:9f:13:a1:52:c7:d6:f3:aa:da:2e:1e:bc:fc:14:
9c:b9:01:28:a0:3e:78:9c:06:f2:60:a5:17:d2:3b:
bc:19:67:19:56:73:9d:8c:f2:3d:18:ae:26:3e:3c:
8c:f4:1f:f2:7b:8e:1e:71:e1:b8:7f:f2:24:84:ed:
0b:a8:c5:1b:dc:d1:85:a1:77:c6:b5:df:1f:df:04:
29:52:96:cc:e3:9f:e0:88:d0:75:7f:39:15:ef:70:
07:5d:7f:75:e4:e9:9a:86:0c:59:d4:47:9f:a9:c6:
35:80:d7:9b:d9:0c:f8:f4:a7:76:9e:95:0b:96:49:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C2:98:FB:8F:61:E0:A3:7F:5F:7C:28:FF:C4:4A:F5:27:12:D3:79
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ssKY-49h4KN_X3wo_8RK9ScS03k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.80.0/24
31.169.83.0/24
31.169.86.0/24
31.169.88.0/24
31.169.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bd:6f:9e:68:93:e1:a7:a8:d5:98:ff:89:fe:01:14:13:41:
27:a3:2d:83:ac:c0:4f:06:26:d3:85:c1:08:3b:ad:df:94:55:
f6:00:7c:cd:e0:5c:60:16:42:12:60:a6:d2:0f:20:c6:14:47:
4d:12:f0:ad:0c:a0:f1:b0:f7:21:92:8c:e0:1f:49:3b:5c:79:
1c:5e:59:34:3a:ab:34:2a:51:85:32:4d:25:9d:cb:d0:28:05:
cc:c8:8b:bb:33:fe:d7:ad:50:1f:6c:5f:95:69:72:33:05:a0:
1b:89:cf:45:64:0f:87:51:bd:6c:9e:0b:87:3b:2e:7d:cd:80:
9b:7c:ad:73:e6:06:9c:2e:c5:a1:da:8a:8e:49:78:86:0d:f4:
ed:d2:c3:d2:73:2b:d9:c5:5f:c2:6e:60:ac:0c:b3:46:4a:61:
ec:18:6c:78:cd:d8:9f:90:c4:62:10:47:90:fe:eb:a7:f9:0e:
22:64:de:4e:ce:6d:77:74:4b:b4:ed:b6:d1:e9:7e:29:e1:9b:
e2:ee:4e:43:56:ee:c3:89:ac:4d:70:bd:eb:8a:8d:97:35:75:
d8:98:c6:cb:28:42:ac:6a:b4:63:2a:f0:74:1c:d1:0c:f8:4d:
db:c4:95:18:0c:6d:b0:83:29:8a:39:b6:bd:5a:f9:72:bf:0d:
b4:88:99:ec
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY3BuZdWU7PALiLejysXx008MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw
ZmM2MmEwHhcNMjQwMjE5MTQxNjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmMyOThmYjhmNjFlMGEzN2Y1ZjdjMjhmZmM0NGFmNTI3MTJkMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UGe0QWZmgL25rKNph2XQLppHAi6
tZYT5l12oFwGcij8Bs0aRXygYXg19KUxX1RtIudhmy4Y1SEcQYDNenCLKOzpRrIv
jskoUUtsG9DTzKvfXDaINixmd6dxlIJxHX3hgEOrJOEb3V1nIdBQz1CExMVq2GZn
cRE4euXFRXivoM/gZ1DTI6UhnxOhUsfW86raLh68/BScuQEooD54nAbyYKUX0ju8
GWcZVnOdjPI9GK4mPjyM9B/ye44eceG4f/IkhO0LqMUb3NGFoXfGtd8f3wQpUpbM
45/giNB1fzkV73AHXX915OmahgxZ1EefqcY1gNeb2Qz49Kd2npULlkmfTQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLLCmPuPYeCjf198KP/ESvUnEtN5MB8GA1UdIwQY
MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt
MjYxNzBkYTRhMGIxLzEvc3NLWS00OWg0S05fWDN3b184Uks5U2NTMDNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx
LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAH6lQAwQA
H6lTAwQAH6lWAwQAH6lYAwQAH6laMA0GCSqGSIb3DQEBCwUAA4IBAQAtvW+eaJPh
p6jVmP+J/gEUE0Enoy2DrMBPBibThcEIO63flFX2AHzN4FxgFkISYKbSDyDGFEdN
EvCtDKDxsPchkozgH0k7XHkcXlk0Oqs0KlGFMk0lncvQKAXMyIu7M/7XrVAfbF+V
aXIzBaAbic9FZA+HUb1snguHOy59zYCbfK1z5gacLsWh2oqOSXiGDfTt0sPScyvZ
xV/CbmCsDLNGSmHsGGx4zdifkMRiEEeQ/uun+Q4iZN5Ozm13dEu07bbR6X4p4Zvi
7k5DVu7DiaxNcL3rio2XNXXYmMbLKEKsarRjKvB0HNEM+E3bxJUYDG2wgymKOba9
Wvlyvw20iJns
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:47 2024 by rpki-client on console-ams.rpki-client.org