Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/FkXprMrXkrd2gqyP5-BHXfcWI3Q.roa
File: FkXprMrXkrd2gqyP5-BHXfcWI3Q.roa (raw, json)
Hash identifier: ydxrxfulGfMzOZLNT0igmHsyqQIiiQD7f77xXkqX2PI=
Subject key identifier: 16:45:E9:AC:CA:D7:92:B7:76:82:AC:8F:E7:E0:47:5D:F7:16:23:74
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018BB5DC96863D5B59F1F027B2AF910A0368
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/FkXprMrXkrd2gqyP5-BHXfcWI3Q.roa
Signing time: Thu 09 Nov 2023 20:53:34 +0000
ROA not before: Thu 09 Nov 2023 20:53:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 31.40.196.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
212.107.4.0/22 maxlen: 22
188.119.68.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:dc:96:86:3d:5b:59:f1:f0:27:b2:af:91:0a:03:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Nov 9 20:53:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1645e9accad792b77682ac8fe7e0475df7162374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:28:2c:4b:76:e5:a2:6a:53:04:73:ff:28:
c0:81:40:e7:b7:a7:9f:7d:21:87:a0:29:b6:bd:2b:
bf:e5:64:29:d2:e7:82:1e:92:05:d1:b7:05:86:51:
12:26:b7:03:9d:7d:02:a6:7d:e7:a5:e5:c7:d3:d1:
0a:68:ae:c6:11:3b:ff:d4:05:a6:76:8a:de:ef:72:
f8:d1:96:d1:63:f9:35:6e:5b:3f:42:c6:8b:dc:5f:
f6:2d:8c:ea:7d:d1:a8:44:ac:27:00:7d:f2:b1:17:
e0:c7:72:ae:46:f2:5f:45:c2:3c:a0:91:80:18:2c:
e9:3b:6f:6d:f1:40:5e:0e:b7:5e:90:66:ee:8a:8c:
6f:cc:38:0f:cc:11:55:69:38:ec:9e:d7:15:de:1a:
cf:14:a6:0f:8f:c9:e7:1e:f5:de:88:c8:bb:7a:42:
21:c3:a4:bf:eb:0a:8a:ce:2d:8a:48:c7:32:19:e5:
86:98:db:3f:87:86:d8:ef:3e:be:37:08:a1:87:24:
13:26:55:99:ff:fe:e6:f9:45:93:43:1a:f7:49:28:
38:07:65:91:70:86:d3:75:00:85:f1:3e:d7:28:7b:
e9:24:30:ff:3b:e1:64:37:76:12:0d:53:2d:d9:4c:
69:e1:95:1f:65:8e:67:87:6d:46:0e:19:1e:bb:92:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:45:E9:AC:CA:D7:92:B7:76:82:AC:8F:E7:E0:47:5D:F7:16:23:74
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/FkXprMrXkrd2gqyP5-BHXfcWI3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/22
85.8.144.0/22
188.119.68.0/22
212.107.4.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:5f:43:5a:1b:a8:98:08:68:ce:16:8f:9a:45:ce:1b:b2:93:
a4:30:c6:47:ec:37:5e:cf:51:56:cb:10:93:ea:94:28:7c:f2:
44:e6:60:64:d4:c8:12:c9:c5:97:d0:95:e3:6d:92:9a:57:2b:
43:a4:ba:43:59:89:af:17:81:d0:d7:d3:9e:a2:47:c5:b2:56:
ad:1c:5d:1c:47:36:34:b5:f0:a5:ca:c5:ce:62:b5:94:f8:d6:
3d:bf:98:6d:19:9c:0f:1d:71:c5:79:85:3e:27:c4:28:b1:4a:
e9:bd:ce:b0:b7:55:05:42:25:37:c4:d1:8a:4e:06:71:fb:5a:
e4:6d:52:3c:c8:bc:63:12:7b:b4:2e:6d:76:48:a1:66:5d:cb:
bd:c8:80:18:dc:d6:e6:e6:0f:e4:b9:bd:6b:68:fb:ed:53:ee:
1d:89:1a:4c:68:22:15:bb:46:a6:a1:c0:c4:5d:a3:d7:ec:8a:
24:f0:d6:53:6e:c8:c8:b5:19:c0:ee:9f:85:b0:d1:7e:8d:bd:
de:26:a7:82:63:a9:05:d6:0b:34:d9:27:ad:46:c2:e8:8e:02:
9b:a2:5d:ef:7f:6c:fb:20:dc:43:a4:a0:76:97:8e:51:e9:11:
4d:f3:f6:a2:b4:a3:11:d8:f1:dc:a2:2c:f7:4f:ce:a3:78:61:
d8:4e:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org