Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/FAb7-lS48c-7rUbGzg8_FZx0V8k.roa
File: FAb7-lS48c-7rUbGzg8_FZx0V8k.roa (raw, json)
Hash identifier: MFNKRaNLR9avJYXNhCU27+LZy0mehhSXGjnn5E56Pbw=
Subject key identifier: 14:06:FB:FA:54:B8:F1:CF:BB:AD:46:C6:CE:0F:3F:15:9C:74:57:C9
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01862C8BCFF49E515C799582F57CC7C2B465
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/FAb7-lS48c-7rUbGzg8_FZx0V8k.roa
Signing time: Tue 07 Feb 2023 15:43:25 +0000
ROA not before: Tue 07 Feb 2023 15:43:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 31.40.196.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
141.98.48.0/22 maxlen: 22
188.119.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 08 Feb 2023 13:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:8b:cf:f4:9e:51:5c:79:95:82:f5:7c:c7:c2:b4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Feb 7 15:43:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1406fbfa54b8f1cfbbad46c6ce0f3f159c7457c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:d6:9e:e2:1b:09:ea:7f:76:4b:e2:71:97:
94:d1:24:c7:2e:f6:92:19:94:ef:c1:5b:93:b6:08:
bb:79:61:8e:66:76:b4:38:3e:30:d1:84:ce:ce:be:
07:42:65:3b:de:e4:d7:56:95:ae:f4:4d:64:7d:a5:
c2:c9:ef:8c:72:8d:1c:fa:6e:06:09:43:be:7a:71:
0f:7c:b9:5a:14:70:79:79:a1:57:79:54:43:e9:92:
a9:95:37:8d:ec:a7:ca:98:7e:12:94:93:ca:b0:87:
5b:df:03:1c:37:f5:c4:ae:07:d1:a4:0e:08:b3:d6:
52:90:3c:e9:66:ac:b5:42:6d:92:53:35:fd:93:de:
ba:ca:e6:f7:e7:ce:f0:1e:d8:b5:60:92:d1:86:f8:
25:4f:57:06:2e:25:4d:60:e4:39:d8:33:ec:62:05:
ae:73:52:d7:73:ec:e3:05:84:41:48:34:eb:61:4c:
b2:9b:97:6d:62:d9:56:a8:df:2b:7b:c9:82:b1:60:
fb:6b:84:43:fd:92:16:0f:fa:30:d5:79:d3:fe:53:
2d:6e:56:cc:95:23:31:81:88:a8:8a:a7:34:f2:ba:
34:d3:c6:6e:a4:19:a3:3d:9f:a1:4a:85:1c:fa:32:
24:c1:c4:50:56:19:b4:a3:c5:c2:4d:26:b4:cc:04:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:06:FB:FA:54:B8:F1:CF:BB:AD:46:C6:CE:0F:3F:15:9C:74:57:C9
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/FAb7-lS48c-7rUbGzg8_FZx0V8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/22
141.98.48.0/22
188.119.68.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
06:54:89:4c:bf:38:a0:b4:80:50:c5:43:71:b1:48:d2:fd:f3:
0c:35:6d:e4:6c:01:60:12:56:67:dc:28:ab:14:7b:18:75:d3:
b5:68:fc:ea:c9:c3:4b:0b:df:21:95:34:4e:78:31:03:0a:f9:
90:53:25:61:51:de:dc:70:18:d0:4d:0b:29:42:14:92:7c:25:
05:cd:96:74:5d:f9:21:d1:fc:62:97:70:e8:a5:b7:aa:4d:ce:
aa:22:25:27:57:f1:08:ba:fe:87:0b:5c:f1:42:a3:a6:c5:7a:
2f:25:c2:a5:9c:c8:6f:50:94:00:a7:58:2a:26:5d:12:74:99:
6f:1c:f8:75:ab:30:d9:81:b0:4c:d4:91:c9:02:fe:9c:01:a3:
3c:12:19:fd:54:fe:d7:fe:e0:8f:a3:0e:f7:68:1e:5b:fa:e2:
74:26:71:e5:4a:d5:f9:95:34:b5:63:86:93:08:8f:b4:eb:64:
fb:89:d0:2d:6d:9e:f2:2c:d7:d7:19:71:8c:d2:5a:d5:f5:05:
74:d2:9e:f3:b0:96:a4:0b:5c:99:b5:18:18:55:d6:c2:f1:6c:
22:4d:ba:1c:a0:ee:eb:d2:ff:41:3b:04:54:3b:93:77:9c:34:
11:52:2d:37:6f:a4:f5:d9:f5:68:2d:a6:c3:1c:5c:c5:47:9f:
0f:e4:3d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org