Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/F_8RGfzorrZVQ7KmgCyiKcl9FJk.roa
File: F_8RGfzorrZVQ7KmgCyiKcl9FJk.roa (raw, json)
Hash identifier: xsx+Nek5FuHqdtbcJwqo5LcLW4aH07UnSh7SuC5Q+r4=
Subject key identifier: 17:FF:11:19:FC:E8:AE:B6:55:43:B2:A6:80:2C:A2:29:C9:7D:14:99
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01927774BBF907C858AA2063F9D79BCC2088
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/F_8RGfzorrZVQ7KmgCyiKcl9FJk.roa
Signing time: Thu 10 Oct 2024 17:23:11 +0000
ROA not before: Thu 10 Oct 2024 17:23:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 31.133.80.0/22 maxlen: 24
31.133.80.0/24 maxlen: 24
31.133.81.0/24 maxlen: 24
31.133.82.0/24 maxlen: 24
31.133.83.0/24 maxlen: 24
31.133.84.0/22 maxlen: 22
31.133.90.0/24 maxlen: 24
31.133.91.0/24 maxlen: 24
176.103.224.0/22 maxlen: 22
176.103.232.0/22 maxlen: 22
176.103.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 20 Nov 2024 11:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:77:74:bb:f9:07:c8:58:aa:20:63:f9:d7:9b:cc:20:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Oct 10 17:23:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17ff1119fce8aeb65543b2a6802ca229c97d1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:93:2d:be:84:0a:ce:ec:cf:75:17:ff:7a:
57:09:bc:e2:75:de:a0:b3:74:6c:33:99:e9:02:5a:
31:24:2d:a9:5c:51:93:53:ff:0d:63:80:46:4c:2b:
5d:04:83:da:fe:f7:80:64:48:74:a1:1b:b4:99:0a:
18:b3:c8:85:97:5c:2d:c1:78:59:f9:11:4a:ea:2b:
f6:d0:2c:6c:74:3a:2e:9d:b0:a5:a0:e2:da:c3:fe:
e9:c0:29:84:80:91:d2:b8:98:77:cd:10:2a:a4:c1:
0f:18:03:8d:4b:01:5e:c9:62:69:f0:2e:70:49:f9:
06:fa:0e:55:12:32:4b:f8:a0:86:a6:b9:5c:29:39:
6e:99:e8:b5:b3:34:4f:cc:3a:3c:62:b0:12:f7:e6:
9f:a1:f8:3e:3a:d1:7d:f0:14:6d:c1:de:28:c6:94:
26:bc:af:ee:0f:f4:05:83:6c:99:b7:59:72:51:10:
60:f4:92:e8:cb:d9:b1:31:1a:ab:17:cf:8f:fa:28:
1f:48:5b:b1:f7:5f:ed:d9:6e:b6:9c:ef:1a:41:fe:
bb:ef:c3:cb:07:3a:a2:a5:c8:f6:08:a3:56:14:a1:
bd:e0:a9:31:59:b5:7f:5a:5a:53:5f:fe:bc:85:52:
ea:0a:28:6a:33:ae:09:46:92:c0:fd:5b:34:94:4c:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:11:19:FC:E8:AE:B6:55:43:B2:A6:80:2C:A2:29:C9:7D:14:99
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/F_8RGfzorrZVQ7KmgCyiKcl9FJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/21
31.133.90.0/23
176.103.224.0/22
176.103.232.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:7b:72:4f:e0:1b:99:23:cf:a9:b5:2e:a2:c9:a6:00:36:52:
7d:4c:14:57:28:d1:92:17:6d:d7:12:d7:39:76:a4:0a:f9:f1:
41:48:5d:bd:ea:06:67:de:9d:0d:27:8c:89:a7:d4:bc:55:f2:
73:af:39:fb:7a:e6:9f:7f:b6:f3:54:fc:ab:31:3e:3a:bd:66:
3e:00:58:bb:45:83:35:06:22:99:87:dd:0f:6a:ad:8e:9c:08:
d0:fa:f4:8a:b9:68:b1:17:18:86:b1:1b:a5:5c:a0:4e:8b:75:
c2:9a:45:cb:77:28:de:68:4c:42:bc:c6:0c:ce:6a:f9:64:07:
7a:38:c1:93:60:57:71:8d:53:43:e7:4f:a0:d3:5f:8f:f6:4c:
b4:c3:7e:0a:28:1c:80:72:b3:e9:9a:39:ec:df:97:07:0f:ea:
fe:7c:45:c7:c7:f9:dc:48:4a:7a:a8:2d:01:23:de:e3:65:85:
af:29:98:d4:ed:54:fa:6e:99:de:35:40:42:58:45:ac:45:80:
d7:37:af:2a:3b:ad:91:65:99:41:f4:d2:2a:2c:81:56:1c:a9:
8a:97:69:ed:61:d2:28:17:1d:2c:8e:7a:a2:25:7a:2e:75:b1:
fe:e5:81:8c:99:c4:45:77:c3:da:d3:f1:d1:1f:0b:eb:5a:26:
3a:17:43:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:03:35 2024 by rpki-client on console-fra.rpki-client.org