Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o_CK27AqDNSjI_CZyqlNhvRoRYo.roa
File: o_CK27AqDNSjI_CZyqlNhvRoRYo.roa (raw, json)
Hash identifier: tzBkEuv630jyZLmtvfdBFwZ8E3vXupz9Z85ZTPVj0cA=
Subject key identifier: A3:F0:8A:DB:B0:2A:0C:D4:A3:23:F0:99:CA:A9:4D:86:F4:68:45:8A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 018FDF0266F4775E892D07BB129C8A70EEDF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o_CK27AqDNSjI_CZyqlNhvRoRYo.roa
Signing time: Mon 03 Jun 2024 16:50:27 +0000
ROA not before: Mon 03 Jun 2024 16:50:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215211
IP address blocks: 31.56.0.0/14 maxlen: 14
151.238.0.0/15 maxlen: 15
Validation: Failed, certificate revoked on Sat 15 Jun 2024 05:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:df:02:66:f4:77:5e:89:2d:07:bb:12:9c:8a:70:ee:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 3 16:50:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3f08adbb02a0cd4a323f099caa94d86f468458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:76:b0:4f:86:76:2f:51:cf:fa:04:4f:5c:
ac:eb:25:34:a4:3c:a5:1a:24:39:f3:0d:2a:ee:e1:
63:f2:85:ff:46:1a:a9:1b:46:2c:64:67:b0:0d:1b:
91:5e:06:b0:d2:9c:d1:65:05:cc:ae:bd:5c:3e:47:
d6:02:4e:92:df:56:67:23:70:e5:0b:d3:3a:22:3e:
95:21:6a:05:81:f2:e6:53:9c:47:76:4c:43:03:61:
b3:45:39:89:9d:b0:7c:fa:79:7b:36:78:5e:af:04:
28:59:9e:74:05:08:5a:28:f3:14:7a:d1:5b:5b:04:
ef:a2:68:06:2f:a7:63:c4:d6:62:04:14:18:13:db:
0d:7a:26:96:72:92:9c:db:02:9c:03:21:29:9f:31:
7e:fe:a7:41:c7:a3:a0:31:a9:d3:8b:64:83:3c:3f:
cd:b8:09:2d:48:bc:59:c7:4f:8b:f7:fc:b1:65:28:
18:25:13:99:f4:76:77:c8:32:5d:0c:8c:38:5e:19:
21:3f:3e:18:d4:69:1a:1d:e9:ff:fb:07:02:1b:98:
47:aa:e4:95:d5:2b:cc:79:9f:a8:3b:03:63:82:18:
a6:2d:8d:7e:3a:75:dd:0c:cd:83:05:a2:14:ab:26:
ed:5f:b9:b1:9b:46:33:6d:40:84:05:7f:16:b1:63:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F0:8A:DB:B0:2A:0C:D4:A3:23:F0:99:CA:A9:4D:86:F4:68:45:8A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o_CK27AqDNSjI_CZyqlNhvRoRYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/14
151.238.0.0/15
Signature Algorithm: sha256WithRSAEncryption
72:8b:d2:58:d9:00:36:2f:3a:7a:aa:f3:52:63:70:7c:50:2e:
a3:b2:2d:5c:c8:45:f2:87:55:ce:99:30:2d:af:cc:f2:9f:c3:
cf:aa:b0:2e:eb:2c:43:ea:8f:d2:8a:2e:47:df:d2:97:cc:44:
4f:1a:49:8e:ea:08:a5:ef:7e:7f:8d:35:8c:7c:53:0d:33:ae:
26:23:f0:2a:4a:3e:f5:55:9e:88:1d:f4:c9:b0:24:e1:cb:18:
4e:f6:67:0b:7c:6e:58:7d:98:66:21:29:34:60:de:73:dc:63:
b1:d6:35:20:0f:60:5b:f9:8d:17:6b:09:42:33:df:f8:29:63:
44:da:ca:f5:08:26:c9:ff:26:af:7a:5a:bc:5e:65:a6:69:d2:
a9:67:66:67:50:59:16:5c:b3:8f:74:bf:cf:f7:57:52:a6:02:
00:23:2d:69:7c:75:4d:12:d0:c3:e2:61:f6:02:50:e9:5d:f4:
90:13:45:ee:50:e3:db:2b:a4:a0:30:e4:5c:8d:53:88:44:37:
b2:4a:52:d3:25:da:72:5d:f6:81:a5:35:ff:3a:dc:bf:85:6a:
ff:eb:64:ec:b9:a0:cc:ad:19:e9:dd:1d:d0:b5:02:15:ee:17:
9a:64:13:12:c6:35:48:0c:36:0b:49:62:41:6e:5f:0a:4e:24:
4f:80:f6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 06:11:30 2024 by rpki-client on console-fra.rpki-client.org