Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FmX2-6wuXyrp7z3urvXfqan5cGM.roa
File: FmX2-6wuXyrp7z3urvXfqan5cGM.roa (raw, json)
Hash identifier: Wen734odST2XZc/50dfZ4L455J7F9bvx7jc6zEz9u7s=
Subject key identifier: 16:65:F6:FB:AC:2E:5F:2A:E9:EF:3D:EE:AE:F5:DF:A9:A9:F9:70:63
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193E8AAFDAD30911EFB561832944248732A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FmX2-6wuXyrp7z3urvXfqan5cGM.roa
Signing time: Sat 21 Dec 2024 10:02:20 +0000
ROA not before: Sat 21 Dec 2024 10:02:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201233
IP address blocks: 31.56.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e8:aa:fd:ad:30:91:1e:fb:56:18:32:94:42:48:73:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 21 10:02:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1665f6fbac2e5f2ae9ef3deeaef5dfa9a9f97063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:b1:13:bf:c1:76:2a:ed:e8:b9:42:f3:12:
b4:88:3c:f1:d9:d8:9b:0e:fd:52:f0:8d:2d:e2:12:
b8:d7:d7:ab:d7:43:45:07:a6:ce:f4:7f:bf:04:bc:
ab:99:be:01:22:bd:9e:00:15:b1:a8:63:01:7a:ce:
8f:76:d8:68:35:49:bc:af:6a:c1:d6:97:82:a6:20:
f8:3b:b3:0f:fb:b9:92:1c:ae:af:bd:b8:03:08:e0:
e0:43:d7:3d:bc:45:59:da:04:68:dc:fc:6a:ba:63:
aa:28:04:19:8d:2d:e6:88:f6:aa:45:30:9a:99:8a:
e4:19:a6:3f:42:fd:94:25:a4:88:82:6d:53:bd:d0:
16:d4:47:38:6c:ad:f3:65:89:d3:ba:cb:46:6d:a3:
99:52:41:a3:5b:b4:79:71:4c:23:69:a0:29:bf:88:
30:c5:7d:59:b6:75:d0:ea:dd:b2:cb:cb:4e:cb:df:
54:e8:fc:26:05:a5:9b:75:7c:ab:1a:3c:cc:3e:4f:
88:43:1a:35:5d:85:f6:08:fe:c2:59:f3:8f:e5:cb:
b0:7f:d6:23:8e:79:cc:0a:d5:13:af:7b:1a:df:a7:
27:aa:5d:23:cf:84:f8:09:b9:c6:48:82:d2:9b:50:
da:3a:77:ad:74:a6:b6:5c:0c:6f:ba:96:db:79:00:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:65:F6:FB:AC:2E:5F:2A:E9:EF:3D:EE:AE:F5:DF:A9:A9:F9:70:63
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FmX2-6wuXyrp7z3urvXfqan5cGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.64.0/24
Signature Algorithm: sha256WithRSAEncryption
19:38:1e:ac:37:4a:ce:83:39:00:0d:a9:55:72:38:b4:53:88:
75:30:63:15:17:28:83:f1:45:da:29:63:58:df:70:41:ed:8b:
ed:8e:61:7e:f2:95:b5:98:c7:a2:ea:e2:c6:f7:27:a7:ee:d5:
d8:a3:0c:8e:94:f8:c6:bb:3a:d8:64:ee:0b:da:eb:a5:eb:e3:
9f:54:57:58:91:60:e8:bb:90:60:35:30:0f:9e:99:87:76:29:
29:c2:0c:ec:91:91:f7:0f:73:9a:4e:8e:6a:64:c4:b6:0f:2a:
7c:cb:e7:fc:c0:3f:94:b8:08:06:ed:d5:05:c6:21:3d:c8:9b:
ca:04:63:08:a9:2f:ec:88:26:e8:d9:76:64:63:f8:a0:2c:ca:
2d:5a:96:e2:a9:d1:33:62:c9:1d:3b:d6:77:70:00:1b:c3:36:
50:52:0b:19:63:7c:7f:0f:7f:34:af:5d:ad:d2:75:fb:8b:7f:
0f:ca:9d:24:79:15:df:6c:20:ea:53:b9:93:0f:6f:b1:e1:9f:
f4:3b:98:9e:45:c3:94:c1:87:38:94:d7:62:b7:30:7c:1d:e1:
a3:bd:55:d6:5f:e6:14:38:3b:3f:26:b1:7b:62:c3:1a:7c:3a:
c7:a4:29:4b:1c:9a:cc:6c:59:41:31:b1:34:83:40:c6:c2:cb:
ee:2d:c1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:16:54 2025 by rpki-client