Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/7fx1GRe2hzwHzOyKMVdEvZpuTG8.roa
File: 7fx1GRe2hzwHzOyKMVdEvZpuTG8.roa (raw, json)
Hash identifier: OTYlO7psI4Vd/XjoVGAUr+FrjuqRm1uk+2XAyg0rV9Y=
Subject key identifier: ED:FC:75:19:17:B6:87:3C:07:CC:EC:8A:31:57:44:BD:9A:6E:4C:6F
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 01921F789407EE0A5BF4FD793D86B5CA7449
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/7fx1GRe2hzwHzOyKMVdEvZpuTG8.roa
Signing time: Mon 23 Sep 2024 15:20:48 +0000
ROA not before: Mon 23 Sep 2024 15:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44493
IP address blocks: 31.192.232.0/24 maxlen: 24
31.192.234.0/24 maxlen: 24
31.192.235.0/24 maxlen: 24
31.192.236.0/24 maxlen: 24
31.192.237.0/24 maxlen: 24
31.192.238.0/24 maxlen: 24
31.192.239.0/24 maxlen: 24
2a03:a0e0::/32 maxlen: 32
2a0a:eec0::/48 maxlen: 48
2a0a:eec0:2::/48 maxlen: 48
2a0a:eec0:3::/48 maxlen: 48
2a0a:eec0:4::/48 maxlen: 48
2a0a:eec0:5::/48 maxlen: 48
2a0a:eec0:6::/48 maxlen: 48
2a0a:eec0:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 27 Sep 2024 13:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1f:78:94:07:ee:0a:5b:f4:fd:79:3d:86:b5:ca:74:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Sep 23 15:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edfc751917b6873c07ccec8a315744bd9a6e4c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:d9:f9:f8:b7:5d:6a:92:39:cc:13:9d:49:
31:13:71:4a:71:a9:1f:2d:47:44:98:35:f1:e9:70:
8e:ae:6b:81:b2:3b:49:a7:11:8c:1c:4f:7e:7a:83:
7a:5b:98:be:13:e8:e5:95:88:fd:b0:4d:33:fc:91:
83:a0:a3:6c:ea:ba:3e:3e:47:28:df:0c:6a:94:35:
f4:85:d0:3b:c1:4e:70:92:5e:85:52:06:e2:1c:45:
07:0e:5d:e0:35:3e:20:30:b8:30:19:e4:ef:6b:c9:
cb:ad:e8:63:48:ee:b1:e6:54:52:e3:e4:46:35:60:
ca:44:f9:b2:94:ad:2f:7d:d5:15:c5:55:69:9a:cc:
07:5c:7a:63:9b:08:87:93:2f:4c:93:47:f0:38:10:
cc:7e:46:5b:ce:0e:61:dc:77:94:19:c2:75:8a:b4:
fb:ab:23:9b:ce:dc:df:92:33:ed:ab:79:ea:e8:28:
6c:5b:c2:15:4d:72:d1:60:58:2c:5a:c7:d9:00:aa:
b8:59:a3:7c:9c:38:0b:73:b9:2e:dd:8d:34:c2:28:
37:f8:9f:86:b1:55:c8:20:fe:ca:b5:0e:c9:1b:c9:
f6:e9:73:ab:ce:15:20:4a:8b:98:6f:eb:57:f9:bb:
cd:fd:3a:f3:18:0b:7d:7d:5b:be:cd:15:8b:a5:93:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FC:75:19:17:B6:87:3C:07:CC:EC:8A:31:57:44:BD:9A:6E:4C:6F
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/7fx1GRe2hzwHzOyKMVdEvZpuTG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.232.0/24
31.192.234.0-31.192.239.255
IPv6:
2a03:a0e0::/32
2a0a:eec0::/48
2a0a:eec0:2::-2a0a:eec0:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8b:5c:06:6d:47:b5:54:8e:61:d5:19:23:d0:5c:26:77:f1:8e:
b1:ca:3e:43:9e:34:13:d8:8a:75:fa:9c:21:65:3f:09:7c:2d:
10:c4:ec:99:11:29:5b:38:bb:d7:cf:94:ec:f3:c6:ac:b1:3b:
34:c4:af:ca:65:16:4e:0a:25:b8:19:73:b1:1c:2f:25:d1:66:
15:8f:34:d6:32:ed:a6:8e:52:b9:dd:25:bb:9a:19:56:aa:35:
75:e4:d1:b7:a4:1d:30:40:98:4a:35:1a:cb:96:ec:40:e4:7b:
99:a4:15:78:ac:0a:44:4f:e1:20:cf:8a:9c:12:b2:80:db:44:
99:1d:80:db:f4:8c:c6:1d:1f:e3:b4:d4:97:d4:96:47:39:dd:
58:a4:1f:f7:6e:3d:fd:18:ed:ec:87:0a:d9:f8:6c:67:02:4a:
63:9a:8c:df:73:74:7b:8f:63:69:be:ef:ac:8e:75:4a:3e:b2:
59:1f:ee:8a:ea:58:87:4e:ba:4d:c7:3e:6d:7a:df:8c:9f:74:
2c:d1:1d:fa:99:e9:ce:ee:79:f3:07:a7:b4:33:9a:fa:4d:25:
3f:82:41:fd:07:80:43:c9:2b:52:0f:6f:3e:bf:8c:95:ef:01:
88:18:3e:42:64:52:f4:88:63:6b:c1:74:89:93:e5:2e:2b:f9:
3d:ce:e7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 15:32:02 2024 by rpki-client on console-fra.rpki-client.org