Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/FVC6al0MDGa6nrdFBDf6hpPVu8c.roa
File: FVC6al0MDGa6nrdFBDf6hpPVu8c.roa (raw, json)
Hash identifier: lwVfCJ2wLmqT05NEdFiypKLwXOf7ZfJR7gW9XD4eez8=
Subject key identifier: 15:50:BA:6A:5D:0C:0C:66:BA:9E:B7:45:04:37:FA:86:93:D5:BB:C7
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01864FF2B2D05E81318607A39EF5EEEECE8E
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/FVC6al0MDGa6nrdFBDf6hpPVu8c.roa
Signing time: Tue 14 Feb 2023 12:42:30 +0000
ROA not before: Tue 14 Feb 2023 12:42:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 31.25.95.0/24 maxlen: 24
31.25.92.0/22 maxlen: 22
31.25.92.0/24 maxlen: 24
31.25.94.0/24 maxlen: 24
31.25.93.0/24 maxlen: 24
185.49.104.0/22 maxlen: 22
185.118.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:f2:b2:d0:5e:81:31:86:07:a3:9e:f5:ee:ee:ce:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Feb 14 12:42:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1550ba6a5d0c0c66ba9eb7450437fa8693d5bbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:f5:34:68:41:33:2d:cd:48:46:51:27:6b:
5c:40:79:f2:f3:60:d7:3a:ae:4e:3f:92:75:2e:97:
13:04:57:81:1a:ae:1d:33:55:8b:f0:e7:9b:66:4a:
bd:9b:90:8c:d7:82:d4:82:d1:e9:2f:91:1b:28:de:
ec:c1:76:01:db:92:e8:2e:eb:65:c4:84:b0:26:93:
6b:97:3a:87:1d:46:e7:ad:3b:0f:86:2b:95:ca:21:
c1:d4:5f:e9:4b:7e:25:31:fe:e3:6e:2c:2b:ba:a4:
db:77:53:70:65:e2:16:18:cf:f4:04:dc:55:b1:98:
20:c9:a7:e8:c1:8f:97:97:73:e4:4c:d8:a9:46:d0:
15:70:79:6d:6e:5f:09:3a:8d:75:3f:82:b6:20:55:
3e:8a:a9:b4:a8:4f:99:f0:43:d2:92:30:4f:46:3a:
f0:7c:85:3d:c8:68:ca:ec:0c:d6:77:44:42:71:9c:
4a:b6:23:cd:f1:01:1d:15:9f:c8:ba:19:21:5a:63:
9a:52:d6:a6:79:25:6b:2b:74:3d:2a:10:3c:8f:c2:
9a:86:e4:3b:ff:04:e8:da:6b:7c:4e:fd:42:ef:34:
7f:c3:62:05:8b:af:cf:03:04:34:4f:40:b1:bd:f6:
d3:1e:fb:b9:08:47:49:06:4b:48:c1:8b:d3:ba:ed:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:50:BA:6A:5D:0C:0C:66:BA:9E:B7:45:04:37:FA:86:93:D5:BB:C7
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/FVC6al0MDGa6nrdFBDf6hpPVu8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.92.0/22
185.49.104.0/22
185.118.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:14:93:97:5a:07:40:c7:dd:0c:98:30:5c:9c:87:28:f6:29:
5d:83:9d:80:5d:28:aa:b1:5c:8d:06:73:94:4a:9a:58:94:4c:
6d:cd:b1:28:cc:1b:a8:41:8e:3f:c4:bd:37:53:9a:2d:e5:aa:
21:d3:41:e3:dc:7c:61:4c:b2:e0:43:a3:ab:b9:74:70:1e:f9:
69:a2:f1:f3:9f:a2:ae:2c:3b:75:66:42:80:72:a4:98:ae:a0:
91:89:51:6f:1f:25:b0:57:6a:17:c4:0b:21:0d:d7:2a:28:96:
bd:d8:e8:47:2b:82:18:f8:b0:d3:50:e2:2a:4e:87:58:1a:d4:
de:c4:6c:43:7b:54:1c:33:df:f7:ae:d0:1b:d0:ed:6d:24:27:
f1:68:08:33:30:78:fc:34:57:dd:85:b4:b3:60:da:98:5b:b5:
be:ae:18:7e:8f:11:f5:30:97:57:0f:97:87:b8:f0:04:db:17:
60:85:d2:eb:bb:b4:83:77:70:53:62:e7:df:c4:45:39:be:b5:
3e:2d:10:c4:67:4d:59:d3:02:0b:f3:0c:cb:e3:4e:41:f1:62:
75:1d:8e:d4:cf:02:54:8d:15:cd:07:83:32:1f:3f:cc:11:90:
50:a3:9d:a0:42:52:11:59:90:f8:4c:7e:7e:6d:92:c7:41:86:
a6:b3:a4:ea
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYZP8rLQXoExhgejnvXu7s6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjMwMjE0MTI0MjMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTUwYmE2YTVkMGMwYzY2YmE5ZWI3NDUwNDM3ZmE4NjkzZDViYmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbX1NGhBMy3NSEZRJ2tcQHny82DX
Oq5OP5J1LpcTBFeBGq4dM1WL8OebZkq9m5CM14LUgtHpL5EbKN7swXYB25LoLutl
xISwJpNrlzqHHUbnrTsPhiuVyiHB1F/pS34lMf7jbiwruqTbd1NwZeIWGM/0BNxV
sZggyafowY+Xl3PkTNipRtAVcHltbl8JOo11P4K2IFU+iqm0qE+Z8EPSkjBPRjrw
fIU9yGjK7AzWd0RCcZxKtiPN8QEdFZ/IuhkhWmOaUtameSVrK3Q9KhA8j8KahuQ7
/wTo2mt8Tv1C7zR/w2IFi6/PAwQ0T0CxvfbTHvu5CEdJBktIwYvTuu2YZwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBVQumpdDAxmup63RQQ3+oaT1bvHMB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xL0ZWQzZhbDBNREdhNm5yZEZCRGY2aHBQVnU4Yy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1
Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAIfGVwD
BAK5MWgDBAK5dgwwDQYJKoZIhvcNAQELBQADggEBAKkUk5daB0DH3QyYMFychyj2
KV2DnYBdKKqxXI0Gc5RKmliUTG3NsSjMG6hBjj/EvTdTmi3lqiHTQePcfGFMsuBD
o6u5dHAe+Wmi8fOfoq4sO3VmQoBypJiuoJGJUW8fJbBXahfECyEN1yoolr3Y6Ecr
ghj4sNNQ4ipOh1ga1N7EbEN7VBwz3/eu0BvQ7W0kJ/FoCDMwePw0V92FtLNg2phb
tb6uGH6PEfUwl1cPl4e48ATbF2CF0uu7tIN3cFNi59/ERTm+tT4tEMRnTVnTAgvz
DMvjTkHxYnUdjtTPAlSNFc0HgzIfP8wRkFCjnaBCUhFZkPhMfn5tksdBhqazpOo=
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:42 2024 by rpki-client on console-fra.rpki-client.org