Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/FnyJ94kxbiTVAAA-x1XF4BOhAA8.roa
File: FnyJ94kxbiTVAAA-x1XF4BOhAA8.roa (raw, json)
Hash identifier: 0VfiZj8mjpyCtCnUf5RWP/jguRE5GGWHVMHkA2jev9E=
Subject key identifier: 16:7C:89:F7:89:31:6E:24:D5:00:00:3E:C7:55:C5:E0:13:A1:00:0F
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 01856C0119B07C7132692A50CB2A6F822B4F
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/FnyJ94kxbiTVAAA-x1XF4BOhAA8.roa
Signing time: Sun 01 Jan 2023 06:24:49 +0000
ROA not before: Sun 01 Jan 2023 06:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48803
IP address blocks: 185.27.164.0/22 maxlen: 22
31.24.72.0/21 maxlen: 21
94.103.192.0/20 maxlen: 21
2a01:8e00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:19:b0:7c:71:32:69:2a:50:cb:2a:6f:82:2b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Jan 1 06:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=167c89f789316e24d500003ec755c5e013a1000f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:a9:3e:ee:22:a2:6f:5f:25:ce:53:21:3a:
d5:b5:7f:8f:31:e0:f6:03:1f:60:8e:d8:71:10:ea:
57:e4:cd:14:15:85:13:73:1e:f5:c6:9d:7e:c6:e5:
b0:ee:c3:7a:85:2f:21:36:33:14:37:4a:cf:a5:a0:
14:f4:67:6b:76:58:78:3e:01:54:d6:bf:b2:25:1b:
54:65:57:0c:1e:b8:14:c9:8d:02:7c:56:88:ad:cb:
d9:d7:77:f8:0c:c1:79:03:60:11:ca:97:0a:c7:59:
66:a3:55:a0:32:21:81:89:38:a4:9f:5a:d9:a3:14:
b3:08:51:7a:75:9e:88:ba:60:e7:51:ef:2b:70:b5:
52:0b:fa:0e:e2:3e:ba:93:cf:56:3f:97:ce:72:61:
0e:73:7a:f2:45:51:67:12:50:5f:a1:9b:c7:1a:bc:
bd:9c:bf:93:7b:75:e5:13:22:7b:3e:df:13:62:ad:
f8:69:52:02:21:9f:0a:a5:24:05:a6:f1:b5:c1:3a:
c0:b0:44:12:ee:6f:60:19:40:e1:ec:83:4d:4c:2b:
80:24:fd:47:b2:b2:70:26:45:78:c1:fa:6e:5a:61:
bd:9f:ba:d1:8d:b1:a0:75:b7:16:d5:0e:c1:9d:c5:
d6:6c:c1:18:5d:b9:8c:8d:fb:a8:59:2c:90:2b:b0:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7C:89:F7:89:31:6E:24:D5:00:00:3E:C7:55:C5:E0:13:A1:00:0F
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/FnyJ94kxbiTVAAA-x1XF4BOhAA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.72.0/21
94.103.192.0/20
185.27.164.0/22
IPv6:
2a01:8e00::/29
Signature Algorithm: sha256WithRSAEncryption
1b:d2:0b:dd:cc:fa:c0:47:55:0e:01:52:af:a7:f4:eb:d6:3d:
9f:c2:f6:38:3e:89:2c:e2:d0:3a:18:c1:0b:92:46:3a:ea:fe:
34:fa:a2:f6:d7:60:af:30:34:3e:c8:34:e0:64:30:d0:fd:ab:
38:4b:b1:07:aa:b8:f4:ea:98:f6:1f:41:fc:25:91:6c:44:92:
34:81:ce:c4:3f:e3:dc:af:65:98:9b:04:c7:e2:05:29:e5:7a:
07:1a:e5:2c:5d:96:63:33:c5:8f:2d:94:b6:40:7b:81:2a:94:
ff:60:e0:6c:32:b1:4b:b8:b5:91:bf:b2:8c:d3:7b:7c:af:fb:
6c:55:19:1b:01:2e:e3:8d:b4:d2:26:60:96:fe:0a:74:32:d3:
cb:a4:2b:72:dc:e6:67:23:c1:78:6d:dc:f1:f0:e1:de:21:8e:
35:12:ad:55:35:f9:1d:95:b3:e8:84:7d:fc:ff:ce:07:89:1c:
2b:4b:47:d4:16:f0:9a:69:47:9b:97:58:c9:31:5f:70:f5:21:
96:11:8a:0e:f0:84:e0:89:73:eb:c4:27:6b:f8:72:cf:5d:b1:
a4:83:e5:62:0d:1d:35:61:75:7a:df:d3:5e:17:3d:22:17:e6:
a1:55:7d:a3:e8:94:33:7e:a9:ed:c1:cd:92:17:82:08:f7:2e:
76:2b:a5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:20 2024 by rpki-client on console-fra.rpki-client.org