Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/FUJecZdya36GylOaLiB1YDYxP9A.roa
File: FUJecZdya36GylOaLiB1YDYxP9A.roa (raw, json)
Hash identifier: za5UvuhDmwkaceKW6QFkXk8VB9juXBhJUj9KOClDJRU=
Subject key identifier: 15:42:5E:71:97:72:6B:7E:86:CA:53:9A:2E:20:75:60:36:31:3F:D0
Certificate issuer: /CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Certificate serial: 018CC64B2FC9FAD3F3E2EF49175AA64BB10A
Authority key identifier: 7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/FUJecZdya36GylOaLiB1YDYxP9A.roa
Signing time: Mon 01 Jan 2024 18:31:05 +0000
ROA not before: Mon 01 Jan 2024 18:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12703
IP address blocks: 31.15.104.0/21 maxlen: 21
217.22.144.0/20 maxlen: 20
194.176.64.0/19 maxlen: 19
31.47.216.0/21 maxlen: 21
82.113.160.0/19 maxlen: 19
93.94.72.0/21 maxlen: 21
213.131.96.0/19 maxlen: 19
195.97.192.0/18 maxlen: 18
185.153.100.0/22 maxlen: 22
2a02:2b38::/32 maxlen: 32
2001:4dc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 09 Jan 2024 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:2f:c9:fa:d3:f3:e2:ef:49:17:5a:a6:4b:b1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Validity
Not Before: Jan 1 18:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15425e7197726b7e86ca539a2e20756036313fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:da:50:b0:fe:00:36:63:cd:1c:d6:ff:ce:
89:2a:8f:d6:47:36:c3:80:8e:b5:01:7b:ea:73:73:
de:84:4c:21:2f:1f:75:60:98:6b:5e:5e:ad:11:ec:
db:87:56:c4:7e:96:45:80:f2:13:0a:44:65:aa:f0:
67:97:b0:89:78:b7:8d:1f:03:e3:d2:19:41:9d:bb:
5e:e9:ca:3c:f2:95:90:16:0c:78:bd:34:ba:71:9e:
7a:12:4d:b6:7f:62:bf:98:a8:55:a1:dc:ab:f2:ca:
39:d2:13:ee:9f:cf:9e:8c:79:ba:d7:3d:a1:f3:56:
02:42:ed:50:62:40:51:c2:f7:b3:d8:01:14:64:7e:
37:87:29:47:c0:48:89:9b:77:05:7a:d1:bc:30:bb:
f6:e8:89:6a:6d:dc:30:e7:45:b5:cd:9d:c1:30:ed:
3d:99:16:2b:e8:72:25:93:38:46:36:8e:5a:77:14:
82:05:28:d5:58:6a:0a:db:94:e6:d6:9a:a6:2a:5e:
fd:96:df:0d:e0:70:7f:97:a8:b6:32:d3:86:0a:1d:
e4:a1:96:fb:cc:9f:c4:8d:3a:dc:1b:34:68:f7:f2:
85:51:8c:47:ad:a0:ab:8a:8d:46:cb:f4:b2:8e:34:
34:30:5f:a2:76:20:dd:4e:b4:ed:98:e2:c8:8e:1b:
8e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:42:5E:71:97:72:6B:7E:86:CA:53:9A:2E:20:75:60:36:31:3F:D0
X509v3 Authority Key Identifier:
keyid:7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/FUJecZdya36GylOaLiB1YDYxP9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.104.0/21
31.47.216.0/21
82.113.160.0/19
93.94.72.0/21
185.153.100.0/22
194.176.64.0/19
195.97.192.0/18
213.131.96.0/19
217.22.144.0/20
IPv6:
2001:4dc0::/32
2a02:2b38::/32
Signature Algorithm: sha256WithRSAEncryption
87:03:d7:d7:4a:e1:3c:36:e5:22:85:90:03:5c:3d:54:7b:4b:
ca:76:a3:4e:66:bf:b6:12:b5:32:af:50:67:be:c3:7f:4e:43:
6b:a2:87:b4:62:5b:ee:75:64:76:ef:e2:2c:a7:2b:98:e1:5e:
d8:52:88:3c:f5:56:a9:b9:d7:6e:6d:4e:a1:79:bd:85:fc:3f:
fb:e3:7c:ab:0c:cd:89:2b:92:14:96:92:d2:84:03:fe:e1:8e:
a4:89:23:0e:b7:e5:9c:0a:5f:b6:11:21:99:8a:e0:f3:a4:7d:
8f:bd:3a:ef:f5:f6:a3:29:66:8a:61:1a:3c:25:d5:14:2b:43:
bf:d7:ca:e8:17:9e:bf:dc:75:27:7e:2d:01:30:98:91:9b:3b:
84:a7:ac:af:a5:41:c9:10:09:ad:c7:89:be:73:c0:99:8a:c8:
a8:ae:8e:ea:27:12:eb:b6:33:e2:a8:12:7e:6f:0e:7a:ef:ac:
c4:9f:2c:b0:0a:38:04:ae:8a:ee:10:f3:ce:af:55:e8:46:59:
83:3c:96:c3:89:db:31:a3:a7:7e:e3:5f:32:70:b2:be:53:74:
b1:f0:f4:be:5c:b8:69:90:8d:08:d3:10:30:0d:93:69:4e:dd:
0a:ba:15:42:ed:b5:d3:40:6c:89:d3:a6:f8:90:f4:61:b8:1a:
a9:d4:21:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-fra.rpki-client.org