Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F783ctnW-qgOdFls5LM6Ti_mTCk.roa
File: F783ctnW-qgOdFls5LM6Ti_mTCk.roa (raw, json)
Hash identifier: ZI/9LuzZc1gRDR9NgDN4qd9JfyModz2WhKQ4/8ogZDo=
Subject key identifier: 17:BF:37:72:D9:D6:FA:A8:0E:74:59:6C:E4:B3:3A:4E:2F:E6:4C:29
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0190EF6C83E19A2670347925F9106FB6271E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F783ctnW-qgOdFls5LM6Ti_mTCk.roa
Signing time: Fri 26 Jul 2024 14:23:04 +0000
ROA not before: Fri 26 Jul 2024 14:23:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 17:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:6c:83:e1:9a:26:70:34:79:25:f9:10:6f:b6:27:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 26 14:23:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17bf3772d9d6faa80e74596ce4b33a4e2fe64c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:77:fd:76:6f:5d:45:05:ab:a3:4a:e4:5b:
f7:35:ff:70:53:ed:97:3b:ef:45:d4:68:0a:b4:27:
03:de:27:76:84:a2:85:a7:df:95:f6:ff:b4:ba:99:
6d:05:d1:2b:49:80:69:a6:67:89:b8:f2:be:25:07:
f0:8b:03:48:62:ef:dd:51:0d:18:0d:76:73:9d:7f:
8c:b9:a4:49:d7:a5:16:17:8d:59:e1:1d:b4:fc:87:
22:a6:56:a2:79:b0:1c:c0:1d:ff:74:0c:e8:ea:69:
d9:16:ce:8d:2d:4d:02:66:95:5c:00:ee:e3:2a:b9:
b0:71:d6:5b:82:96:93:b1:ff:91:d6:bd:d2:37:89:
f5:d1:ff:a9:7a:52:aa:d6:b0:96:08:18:21:6f:8a:
bc:a4:85:19:11:45:a0:db:1f:8d:85:f6:eb:23:72:
46:12:70:6f:36:db:0e:ca:40:9a:f3:cb:e6:6b:58:
4f:66:5b:df:95:12:31:c5:7e:90:f7:e5:7c:d1:a9:
12:8d:8b:f0:b7:83:a1:da:a5:d1:ad:29:6d:f6:8f:
6b:dd:b4:c5:ba:d3:eb:a2:7d:cf:c8:cf:f4:54:2d:
17:54:a1:fc:c7:e1:a9:02:89:df:1a:cc:af:0e:6a:
27:aa:ab:de:67:b9:31:c3:66:fa:29:6f:e5:1d:5d:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BF:37:72:D9:D6:FA:A8:0E:74:59:6C:E4:B3:3A:4E:2F:E6:4C:29
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F783ctnW-qgOdFls5LM6Ti_mTCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
Signature Algorithm: sha256WithRSAEncryption
45:6e:02:54:66:79:bc:96:c8:89:5d:52:e1:81:73:46:0c:e1:
80:90:92:03:8c:0e:df:a5:6e:15:46:03:b9:99:f7:a1:f5:80:
cb:f5:42:72:4d:c4:b0:27:9c:e2:64:30:89:58:cd:65:72:dd:
cc:c4:5f:04:5d:e3:dd:d5:86:f1:0f:fd:0b:d4:cf:0b:83:0f:
a6:ff:97:99:06:1f:f9:22:52:bf:38:c1:b6:bb:59:f5:be:d8:
94:18:44:8c:5e:a4:0e:d2:94:d2:ed:af:f0:e7:d7:d7:bf:91:
03:e5:e6:c2:94:b2:6f:42:92:73:b0:88:de:6b:a2:89:7e:2e:
03:d3:43:34:59:80:c5:f2:46:3e:98:54:43:cd:8f:f4:78:b6:
47:5d:e7:87:5a:95:af:03:ca:90:5b:a3:6c:7f:d1:f5:66:b9:
3a:9f:48:c9:70:d2:51:ff:b8:14:2c:05:af:9a:86:1e:f1:2d:
16:c7:47:d7:cd:97:af:40:25:44:ec:f0:9a:f4:12:e2:e8:af:
0b:b8:2f:d0:e6:e8:61:20:a5:6d:18:6d:ee:07:26:4e:5c:72:
b9:73:cd:d7:de:a0:84:47:05:0e:c6:e2:a3:6e:55:67:cc:93:
46:fe:62:85:10:da:25:a9:16:28:03:50:d3:da:57:9b:90:ab:
4e:d6:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 20:09:37 2024 by rpki-client on console-fra.rpki-client.org