Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/Fe_rTMXKC7u4bXFq7Zn0anh-wbM.roa
File: Fe_rTMXKC7u4bXFq7Zn0anh-wbM.roa (raw, json)
Hash identifier: w7O7/WNxF1VJBoVkqbxc+lHanN/M6uKfwyUyEDTq86Y=
Subject key identifier: 15:EF:EB:4C:C5:CA:0B:BB:B8:6D:71:6A:ED:99:F4:6A:78:7E:C1:B3
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 018CC727019D6E735784846C39D6A7D13A61
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/Fe_rTMXKC7u4bXFq7Zn0anh-wbM.roa
Signing time: Mon 01 Jan 2024 22:31:11 +0000
ROA not before: Mon 01 Jan 2024 22:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210541
IP address blocks: 31.42.112.0/21 maxlen: 21
31.42.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 15 Apr 2024 14:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:01:9d:6e:73:57:84:84:6c:39:d6:a7:d1:3a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jan 1 22:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15efeb4cc5ca0bbbb86d716aed99f46a787ec1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:de:f6:b5:db:a9:63:d8:b5:ef:23:cc:00:
b8:c7:78:00:e8:73:21:0a:9b:b5:91:d6:b3:62:75:
98:52:2f:e7:9d:42:d7:35:28:b6:93:3b:04:df:63:
a0:73:48:fb:b3:8f:76:51:c4:e2:d9:86:d2:61:8f:
f5:15:e9:b7:44:8b:36:6e:76:10:47:67:8d:8e:9f:
45:be:9a:0c:02:b5:2c:cb:6b:f6:86:ea:1a:09:72:
d2:da:53:70:80:2a:6f:bf:42:16:36:c7:10:a0:3c:
34:52:24:14:cb:4b:5f:b0:ff:01:cf:fe:df:bb:57:
c7:01:0d:8a:45:42:e6:e5:37:42:5b:5a:2d:62:1c:
4d:c0:17:85:28:ef:b2:eb:af:2b:a2:53:be:b8:ab:
62:84:65:2c:ef:bc:a6:74:0b:20:d8:b1:18:3e:73:
c0:d5:28:df:bb:2e:2e:fb:b4:61:e1:91:1f:c2:52:
f4:dd:a8:f8:37:15:62:47:a5:bb:a5:6d:f0:9d:22:
e9:73:80:4a:b7:00:20:de:c7:d7:08:df:43:72:71:
e6:d5:88:28:df:0e:19:50:c5:e6:bb:2e:3a:69:20:
62:64:24:23:6c:a9:2b:bb:06:5e:c4:a0:31:bf:b5:
60:12:16:d3:7d:86:3b:2c:6b:0c:46:b7:5c:9b:b7:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:EB:4C:C5:CA:0B:BB:B8:6D:71:6A:ED:99:F4:6A:78:7E:C1:B3
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/Fe_rTMXKC7u4bXFq7Zn0anh-wbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.112.0-31.42.123.255
Signature Algorithm: sha256WithRSAEncryption
56:1b:a2:93:a7:05:bf:92:28:0f:95:7c:d7:a4:b9:93:3d:2b:
e3:3e:25:ac:db:ca:63:16:f8:af:30:49:97:61:da:b8:aa:56:
0c:07:5a:48:c3:10:48:db:d2:7b:0a:81:7f:78:cd:d3:73:02:
3c:e1:ed:b7:cc:16:33:6f:e9:43:bd:64:d1:c0:84:4d:ae:20:
29:df:4c:47:a1:86:a5:de:3b:06:75:de:a7:f0:45:0d:21:98:
f2:d6:a9:d3:cd:b6:dc:bf:45:7b:30:c4:51:1e:94:4b:1d:b4:
80:3e:b9:20:a5:31:2a:15:aa:c0:b0:cc:ae:12:81:b3:1f:ab:
9b:85:31:26:3c:f9:e3:33:35:7a:80:47:b1:a3:bf:5f:18:a5:
b6:04:20:d3:57:ad:f7:0d:9e:e3:1b:6d:16:ae:6e:ff:e6:cf:
02:99:53:4d:34:b0:e2:cb:6f:97:a4:82:87:2c:a6:a4:c6:45:
20:27:c6:47:50:cf:ac:54:2a:58:80:49:00:40:0d:37:92:89:
4d:f7:6d:a8:6a:2e:74:8a:0c:48:24:d8:f5:a1:cf:20:75:bf:
1e:47:c4:4e:6a:76:d2:62:c2:43:2a:8f:7a:57:64:2c:b2:cc:
4d:02:3a:20:aa:fa:b4:6c:c0:55:63:8c:ca:57:c5:c3:05:a2:
61:bd:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:22 2024 by rpki-client on console-fra.rpki-client.org