Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FNVTeUabPEXr2w0KNoH_DlPd_lw.roa
File: FNVTeUabPEXr2w0KNoH_DlPd_lw.roa (raw, json)
Hash identifier: Mq5AR5EVe2QyFzrbIvuJatBE0K/2mX10Rvg7ncLBuWI=
Subject key identifier: 14:D5:53:79:46:9B:3C:45:EB:DB:0D:0A:36:81:FF:0E:53:DD:FE:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01922A4662A8C64891B34C6A3215C36FF35E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FNVTeUabPEXr2w0KNoH_DlPd_lw.roa
Signing time: Wed 25 Sep 2024 17:41:48 +0000
ROA not before: Wed 25 Sep 2024 17:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 16:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2a:46:62:a8:c6:48:91:b3:4c:6a:32:15:c3:6f:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 25 17:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14d55379469b3c45ebdb0d0a3681ff0e53ddfe5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ef:1c:35:b3:8c:2f:d7:a7:67:c1:b4:eb:26:
d4:1b:69:72:9c:4e:8c:04:5f:5e:04:f6:49:44:6b:
db:17:a7:e9:81:08:19:4b:24:da:eb:a9:60:a7:5f:
24:6f:c1:c4:b8:ba:e6:f7:55:95:f0:94:8d:59:30:
ed:7a:d3:db:e0:08:a7:0b:7f:d0:29:f5:e2:de:19:
54:99:95:d9:7b:e5:52:59:51:0f:c5:82:0e:ce:ad:
57:b9:72:4e:d1:d9:9f:66:17:9f:90:5c:ff:2e:9b:
7a:a9:89:32:27:d1:12:c4:5d:98:ea:5e:dc:8f:4b:
2f:15:b6:83:73:d0:88:76:13:56:5a:3c:9e:96:77:
e0:7a:11:3c:07:5a:08:97:33:cc:90:b4:de:10:c8:
ba:1b:4c:91:a5:99:24:4a:a7:55:03:70:e9:42:36:
11:7b:f6:49:58:da:ec:e8:74:36:e0:2e:f5:d7:2d:
58:8e:8b:8d:41:31:cc:65:84:e2:33:71:d8:7b:c7:
85:e3:75:7c:60:e8:14:b8:85:f5:fd:b7:00:72:46:
b9:40:1b:08:58:04:f3:23:b2:d5:51:26:d8:0b:12:
26:2d:59:ba:1f:f9:cf:1e:ff:3f:11:e7:38:92:bc:
b5:8e:73:a4:df:a8:ce:23:de:13:a3:73:80:43:20:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D5:53:79:46:9B:3C:45:EB:DB:0D:0A:36:81:FF:0E:53:DD:FE:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FNVTeUabPEXr2w0KNoH_DlPd_lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.64.0/24
31.56.160.0/21
31.57.176.0/21
Signature Algorithm: sha256WithRSAEncryption
13:93:de:6d:c1:f9:61:c3:7b:b9:16:2b:b6:f3:6e:66:01:ad:
af:99:22:59:2b:29:97:08:44:83:d1:7e:03:1e:01:66:ab:cc:
8d:89:1a:6c:c8:b6:18:4d:76:aa:11:67:d1:21:4a:20:e6:44:
21:82:1f:f5:a8:7b:29:4f:cc:96:3f:b5:c9:44:79:75:fd:7e:
a4:56:98:d3:6f:7e:1f:82:d8:4c:fe:6b:58:3d:e4:3b:86:d0:
3e:ef:e8:31:02:43:41:70:a2:92:50:be:b6:91:23:e9:8e:4a:
4c:e8:8c:7a:62:05:5f:2f:66:4e:ec:14:d8:ee:d6:8c:94:70:
8e:9e:f7:d2:80:3b:0b:c1:e4:c4:7c:85:e1:09:a1:cd:b9:3f:
91:09:2f:28:75:e7:91:94:af:87:84:ae:b9:84:ca:a9:49:7f:
c0:95:7f:a2:cd:61:f7:82:85:78:81:dc:6d:8b:0b:a2:6f:f8:
cb:07:b9:01:e8:5f:67:41:15:d3:c0:40:93:5d:b9:95:56:af:
a6:c9:ad:da:48:59:73:ea:00:88:82:4a:55:14:10:6e:dd:8d:
ef:8d:ae:8c:09:82:12:6e:7e:a2:e8:42:fc:38:2c:5b:0b:f8:
6d:7b:6c:c8:87:18:e1:d2:02:86:33:51:d4:af:5d:18:1f:78:
b1:26:92:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:50:43 2024 by rpki-client on console-fra.rpki-client.org