Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Fk-dskLX-_qy02KFRqeUKkrvoCw.roa
File: Fk-dskLX-_qy02KFRqeUKkrvoCw.roa (raw, json)
Hash identifier: J69a3gIDaeGmep9oGs9Sr+QUAOZjoNLgy/FinEw6SXE=
Subject key identifier: 16:4F:9D:B2:42:D7:FB:FA:B2:D3:62:85:46:A7:94:2A:4A:EF:A0:2C
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B93C5EBE249B9A8810AEF7E8577AAF
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Fk-dskLX-_qy02KFRqeUKkrvoCw.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213145
IP address blocks: 31.155.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3c:5e:be:24:9b:9a:88:10:ae:f7:e8:57:7a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=164f9db242d7fbfab2d3628546a7942a4aefa02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d5:37:d0:a7:40:76:2e:9f:e1:83:2b:06:fb:
58:54:ed:d2:03:ad:a0:fd:76:53:33:71:8e:10:44:
c4:81:d4:ab:18:04:5e:86:0f:61:25:be:39:24:2d:
d0:8f:28:74:57:d3:46:3b:eb:cd:91:a2:dc:83:aa:
dc:83:0e:95:83:10:73:7f:03:7b:4e:13:fa:27:e7:
68:86:76:c5:79:c5:2c:51:17:fb:61:32:cf:f9:39:
4c:71:45:8a:b3:c7:f4:1b:23:af:38:fd:40:88:b6:
d1:32:9f:2f:39:ec:68:de:a9:ed:14:9a:fb:9a:1d:
5f:c5:1f:6b:bc:a4:c9:c0:6f:88:dd:07:c7:59:fc:
87:fb:c9:ca:9d:50:69:5f:9f:dd:0d:25:17:29:03:
b0:db:47:30:5f:5d:f3:a5:00:ab:31:e4:64:d2:96:
2b:a2:0c:6c:51:77:ce:c0:82:a5:7b:2b:7d:47:9c:
a2:4f:4a:c6:ea:45:a7:1d:20:aa:ea:83:ec:81:3a:
77:12:76:3d:64:97:22:ac:fd:b2:6e:7d:55:a8:14:
33:db:0c:69:13:96:7d:ff:8e:06:c7:7a:9d:37:02:
33:20:2d:3c:a0:ac:a4:41:52:d0:87:e1:61:54:79:
2e:5f:d8:66:df:a4:f6:b9:72:2b:81:ca:83:71:2c:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4F:9D:B2:42:D7:FB:FA:B2:D3:62:85:46:A7:94:2A:4A:EF:A0:2C
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Fk-dskLX-_qy02KFRqeUKkrvoCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.155.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:63:ba:36:2b:4a:c9:67:29:86:ef:b7:ea:a3:0b:9c:b3:9f:
dc:54:ac:bd:1a:ba:7b:25:4d:2e:53:a5:e4:dc:6d:8e:69:49:
73:2e:ca:0e:28:ed:26:c9:b8:0b:b6:dd:b8:b1:a8:73:f6:e4:
47:c3:95:69:a4:cf:80:a3:db:6f:34:dd:5b:d4:50:e3:71:9d:
13:89:3f:4b:45:16:71:22:0a:ed:4a:a4:59:d0:fa:c6:6d:36:
1e:b1:46:ec:07:bc:6f:7e:15:bb:9c:95:d0:9d:bf:08:91:be:
70:bf:18:e7:54:55:cf:bf:1a:80:a3:dd:8f:2d:45:2d:99:9c:
f5:e2:59:13:09:65:cc:8a:73:82:e7:e7:75:f8:4f:9f:80:a0:
3d:63:f8:46:83:e9:d8:8e:f9:26:9f:d1:29:71:21:0b:e6:6d:
17:9f:d6:85:0d:be:c0:23:f2:81:55:f7:07:ae:7c:07:76:25:
97:33:80:3f:8f:64:3f:28:a5:0d:13:92:91:b8:e3:cc:43:89:
43:71:73:16:24:1f:4a:1e:e2:e4:25:12:9a:b7:fb:f3:95:63:
b5:9c:0a:ab:5b:1e:70:26:8e:2d:33:95:88:d1:a3:3b:98:a3:
e4:6f:40:cd:d3:e7:7e:64:4b:94:9b:ef:19:18:2c:34:08:56:
85:33:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:11 2025 by rpki-client