Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JFdf_I6zf0NFkt_EGmJlX8eYXEI.roa
File: JFdf_I6zf0NFkt_EGmJlX8eYXEI.roa (raw, json)
Hash identifier: jhV2GnGSovTmg6dUOmJHQGH5LJLP0zbcUhYILVGEINE=
Subject key identifier: 24:57:5F:FC:8E:B3:7F:43:45:92:DF:C4:1A:62:65:5F:C7:98:5C:42
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01901A59D9EC5A6D1C9CDAB7BFBA996051C5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JFdf_I6zf0NFkt_EGmJlX8eYXEI.roa
Signing time: Sat 15 Jun 2024 05:23:34 +0000
ROA not before: Sat 15 Jun 2024 05:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215211
IP address blocks: 31.56.0.0/14 maxlen: 14
46.224.0.0/15 maxlen: 15
91.98.0.0/16 maxlen: 16
151.238.0.0/15 maxlen: 15
Validation: Failed, certificate revoked on Sun 23 Jun 2024 11:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1a:59:d9:ec:5a:6d:1c:9c:da:b7:bf:ba:99:60:51:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 15 05:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24575ffc8eb37f434592dfc41a62655fc7985c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:7a:ac:8d:84:34:19:f8:7e:27:6d:83:54:
53:35:92:a9:63:86:20:7b:2e:81:8e:4f:3b:b9:99:
3d:52:f1:03:fc:a9:3d:89:68:fa:ea:2f:16:45:06:
30:62:8b:30:61:32:89:a0:99:81:94:90:6e:0d:ab:
d8:08:cd:da:50:5c:7f:0d:3f:b2:59:b9:1a:37:79:
6c:41:46:ce:22:83:5c:e5:f9:7f:eb:f8:89:82:e4:
61:77:35:35:d3:f9:a3:c0:8e:28:64:5b:58:a2:5e:
f2:15:ef:ce:1d:0d:67:5f:6c:18:72:da:e7:3c:38:
4a:cc:ae:10:94:dc:e6:47:93:35:eb:1f:70:8a:3f:
aa:8a:8c:97:c2:ca:71:da:11:b5:5a:7e:81:ac:d0:
a8:de:b1:8c:97:bc:a2:1d:38:10:c9:d0:d4:fb:1e:
7f:c2:96:7c:21:ec:aa:9b:9d:e8:5a:46:b9:62:3e:
dc:53:7e:3a:bf:0e:35:14:b5:90:7c:90:35:8a:cc:
c4:8f:94:fb:c0:9b:71:53:5a:3f:b2:99:f9:bf:d7:
26:3a:99:1e:13:fa:82:bf:5d:58:e0:96:4d:c9:f6:
ba:f8:4e:ae:ba:74:15:df:94:1b:69:fd:e7:18:f7:
80:40:a0:c5:4f:8f:8a:24:38:01:a3:ea:b5:12:d0:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:5F:FC:8E:B3:7F:43:45:92:DF:C4:1A:62:65:5F:C7:98:5C:42
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JFdf_I6zf0NFkt_EGmJlX8eYXEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/14
46.224.0.0/15
91.98.0.0/16
151.238.0.0/15
Signature Algorithm: sha256WithRSAEncryption
69:cc:b7:27:ca:49:b7:19:be:4c:62:29:ea:2f:99:31:49:6d:
78:82:c7:bc:f2:b3:a2:91:32:84:d5:7d:b6:4c:89:80:87:36:
6c:8f:2b:fb:6e:fc:2f:d2:87:c9:c0:4b:59:02:24:25:b0:34:
9f:c3:28:c4:99:7b:af:1a:60:d5:57:92:55:0c:0c:6e:d7:9a:
91:0d:a0:4a:1e:86:da:52:ee:10:09:a9:84:96:c8:0e:0a:a9:
8c:ec:00:a3:a1:4a:b1:f1:65:a6:8e:bb:2d:5e:f7:46:77:68:
d2:64:c5:a5:59:ce:46:26:9b:ad:97:11:51:cf:7e:13:56:8c:
10:0e:24:33:23:19:7d:2b:d4:d4:44:bd:d4:1d:e2:d2:46:d0:
74:74:86:ba:55:dc:b4:cc:65:7a:b5:0f:a3:50:30:ba:70:32:
ed:97:5e:62:b7:30:5c:c1:fe:d8:1b:ee:5e:93:64:11:5a:84:
fe:66:5b:c4:df:de:0d:8d:1a:b7:bc:43:65:9a:7e:39:1f:54:
b3:20:15:62:27:31:b4:58:dd:e1:f7:dc:40:58:3c:00:62:8c:
a0:53:99:c8:e9:44:31:fd:f6:d4:d2:2a:22:b1:f2:ad:c5:af:
b0:4c:ee:1c:fd:2d:ef:4e:e2:9e:65:b1:c8:f6:86:ca:36:fa:
b4:34:8c:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 23 13:19:53 2024 by rpki-client on console-fra.rpki-client.org