Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/2FWzhibIo-mr7DvOK012rYdMX_4.roa
File: 2FWzhibIo-mr7DvOK012rYdMX_4.roa (raw, json)
Hash identifier: 87EeVJUeLhDKqRU+U0o2yG2+V0XfFDcTwCWatHuUXmE=
Subject key identifier: D8:55:B3:86:26:C8:A3:E9:AB:EC:3B:CE:2B:4D:76:AD:87:4C:5F:FE
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 018829A364F791D41A3ED512138482BD04DD
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/2FWzhibIo-mr7DvOK012rYdMX_4.roa
Signing time: Wed 17 May 2023 12:15:54 +0000
ROA not before: Wed 17 May 2023 12:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47595
IP address blocks: 31.177.86.0/23 maxlen: 24
31.177.92.0/24 maxlen: 24
2a02:2090:a800::/48 maxlen: 48
2a02:2090:9800::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:a3:64:f7:91:d4:1a:3e:d5:12:13:84:82:bd:04:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: May 17 12:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d855b38626c8a3e9abec3bce2b4d76ad874c5ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:2f:08:68:a8:a2:61:9c:46:8e:30:67:8b:
38:af:96:c3:61:28:26:bc:f8:88:f4:a8:7d:47:37:
97:b5:d6:f1:dd:bf:54:99:0c:c5:fc:46:26:8f:80:
1a:a2:3a:20:81:9a:c0:a9:17:6f:6c:28:18:01:cd:
f1:62:5a:72:05:ae:df:da:2c:03:3b:81:34:3c:75:
43:3f:4a:5c:8f:19:99:d4:96:83:1a:a9:e8:02:0b:
eb:38:7b:32:47:ec:b9:6f:b9:7a:5e:db:e6:7c:d2:
ab:27:3c:12:dd:81:f5:d8:19:f9:d9:26:e9:a2:e4:
3d:16:80:55:c7:ad:75:52:ad:e5:b4:23:98:cd:a2:
6d:12:da:d9:76:d4:66:fa:f1:c6:39:1f:0d:5a:2a:
e8:dd:a8:87:aa:fd:bc:a7:62:17:88:26:7f:b9:39:
c8:e2:a4:7e:7e:c6:05:e7:c0:0f:85:eb:26:ba:a9:
0a:2c:3c:7a:a7:86:5b:e7:89:74:9b:3b:f9:3c:6a:
29:9b:43:ea:4c:c3:7a:73:4e:d1:2b:c8:b5:97:fd:
fc:01:0f:2e:08:c7:88:4c:3f:9b:0a:9f:9a:c8:32:
ed:3f:6e:55:d3:db:27:a5:a2:97:6a:be:7d:48:b8:
9e:4c:c1:6e:55:31:d8:e7:4b:99:43:de:65:ae:e1:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:55:B3:86:26:C8:A3:E9:AB:EC:3B:CE:2B:4D:76:AD:87:4C:5F:FE
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/2FWzhibIo-mr7DvOK012rYdMX_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.86.0/23
31.177.92.0/24
IPv6:
2a02:2090:9800::/48
2a02:2090:a800::/48
Signature Algorithm: sha256WithRSAEncryption
55:00:f6:4e:81:a4:0e:12:d6:10:a8:79:3f:54:64:e5:b4:6d:
3b:92:5c:0a:c4:07:e3:43:9c:ea:1b:67:9c:38:3c:39:83:31:
c5:6b:b7:f3:32:1c:a8:7b:31:f4:9c:97:70:40:49:42:db:4d:
62:fa:c7:e4:1b:2d:ce:ff:49:60:1d:5f:93:26:00:fb:87:b7:
6e:d8:41:6d:60:28:b9:30:b7:33:bf:8c:70:3f:df:0b:a8:07:
47:e2:eb:78:f0:f9:7f:10:ab:a9:7c:b2:59:25:25:e2:31:a2:
ea:98:5d:e2:51:1a:eb:ad:59:f4:be:af:ac:6f:ab:a5:56:4e:
3c:30:f4:55:43:44:6a:e1:3b:da:eb:1e:57:5f:34:2a:ce:e6:
6a:1f:36:ab:cb:73:7c:30:e3:60:8f:1d:91:3b:c0:ba:24:e3:
c3:d4:b1:5d:04:73:28:41:ff:30:ba:94:a8:f4:27:42:93:04:
2b:c8:42:a6:6c:7a:37:fa:99:3d:e8:00:4e:7d:70:89:0c:f7:
69:b4:d1:ca:a8:47:49:7f:f4:39:8f:40:df:a7:34:f0:0c:14:
f3:91:52:db:7e:e4:03:fb:e2:c4:08:f4:ec:9c:18:fd:3c:f4:
1a:7c:f5:45:35:55:9e:da:85:cb:3d:84:0d:45:8c:71:f0:2f:
66:67:36:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:13 2024 by rpki-client on console-ams.rpki-client.org