Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/Fz9Y9x_DD7EO3Js0PFHcl3r2E3Y.roa
File: Fz9Y9x_DD7EO3Js0PFHcl3r2E3Y.roa (raw, json)
Hash identifier: cJ9TEYj6rqAFuFaJ44APZkDxddiywogdvrUoEtd+Mc0=
Subject key identifier: 17:3F:58:F7:1F:C3:0F:B1:0E:DC:9B:34:3C:51:DC:97:7A:F6:13:76
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 018F0519331FB92991EBCF10F40EF19BA985
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/Fz9Y9x_DD7EO3Js0PFHcl3r2E3Y.roa
Signing time: Mon 22 Apr 2024 09:18:08 +0000
ROA not before: Mon 22 Apr 2024 09:18:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15596
IP address blocks: 31.42.119.0/24 maxlen: 24
31.42.120.0/22 maxlen: 23
Validation: Failed, certificate revoked on Mon 29 Apr 2024 08:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:19:33:1f:b9:29:91:eb:cf:10:f4:0e:f1:9b:a9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Apr 22 09:18:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=173f58f71fc30fb10edc9b343c51dc977af61376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:ee:f8:0f:90:e4:98:b0:1d:2e:1f:16:b4:
42:f0:0d:c5:19:05:2d:f7:c4:57:87:c5:83:d6:b7:
ca:1f:a4:2b:b8:95:fd:7e:e0:1f:86:c1:87:62:e9:
ac:ad:65:a0:4c:bd:f8:1e:a1:58:69:0f:de:01:8a:
32:bc:53:f8:88:f8:19:b8:cb:01:db:d3:87:d1:ef:
3b:a5:1c:a3:13:d3:23:7e:3e:88:3b:fa:05:52:2d:
eb:d8:8b:b3:ba:aa:01:78:8c:cf:8d:ef:33:ca:fb:
19:98:ba:b8:fa:76:eb:a7:cd:52:de:07:ac:42:9b:
7b:f2:d3:e5:8e:55:d2:9e:0b:10:5d:a2:c5:86:1b:
05:79:59:db:93:38:a3:31:49:99:f9:33:ec:38:5a:
67:c4:96:2a:0d:d3:02:20:30:13:6c:a3:83:e1:07:
74:37:92:b3:ee:cc:0f:11:0a:71:a2:71:01:a0:6b:
9a:20:46:a8:11:44:00:3e:51:73:2a:81:b8:59:6c:
11:0d:cc:e4:a7:ee:d2:c8:22:22:98:ff:eb:10:d7:
8b:1d:f9:dd:02:aa:f0:3f:e7:4c:ed:59:02:fa:1d:
71:31:3f:79:82:a1:8d:ce:35:7e:0a:23:52:ce:c4:
02:93:46:f7:4d:35:ef:94:a1:36:84:7e:0d:0d:fa:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3F:58:F7:1F:C3:0F:B1:0E:DC:9B:34:3C:51:DC:97:7A:F6:13:76
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/Fz9Y9x_DD7EO3Js0PFHcl3r2E3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.119.0-31.42.123.255
Signature Algorithm: sha256WithRSAEncryption
30:09:5d:ca:11:12:d7:ac:00:3f:92:bb:da:1b:d2:fa:19:3c:
09:ba:bf:7f:cc:7b:ac:f4:a7:9b:2a:74:58:ef:72:4e:4c:d4:
93:e1:d7:81:b1:06:d2:24:2a:eb:0f:10:26:95:6a:3f:93:37:
18:ed:7b:25:9a:18:73:ed:fb:27:1d:d5:ab:63:69:8f:96:df:
7f:25:3d:a5:e3:5b:f4:14:31:71:69:e2:1c:87:0e:98:73:20:
ce:7f:22:00:05:29:2a:a7:fb:86:4b:3b:b8:5e:8d:da:aa:a1:
67:7e:f1:fe:19:f9:d2:e0:d9:49:e2:96:83:46:f4:98:a1:ce:
82:1e:27:8e:09:0b:a1:ab:d3:23:8f:d9:8a:d0:b0:38:c6:ba:
bd:19:31:47:33:a0:81:ca:58:6f:e6:f1:5e:ed:4a:6d:ab:ac:
04:35:6b:bd:71:55:22:88:fe:d8:8e:de:f0:f4:01:4c:0d:db:
ac:f6:2f:08:dd:5e:86:36:da:a0:06:e1:4f:ba:8b:ca:53:c5:
d4:fc:b7:a7:0b:db:76:75:d9:53:b8:bf:6c:f0:08:c8:a4:76:
d6:a2:8c:c7:95:df:27:fc:1e:80:b7:75:c0:98:46:47:c4:1e:
62:c0:03:0b:3d:0c:4e:bf:15:79:0b:44:a7:c1:b4:85:ff:84:
8e:f1:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:22 2024 by rpki-client on console-fra.rpki-client.org