Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/AI3qrrjkQMFiTGy8iBX0onFRxs4.roa
File: AI3qrrjkQMFiTGy8iBX0onFRxs4.roa (raw, json)
Hash identifier: q3VmdXWl05eWq0kToZYGmxqg5ajo081cZXa4PVcZCCM=
Subject key identifier: 00:8D:EA:AE:B8:E4:40:C1:62:4C:6C:BC:88:15:F4:A2:71:51:C6:CE
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018DB81AD1879A76E8A39084259C30D422A4
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/AI3qrrjkQMFiTGy8iBX0onFRxs4.roa
Signing time: Sat 17 Feb 2024 17:26:21 +0000
ROA not before: Sat 17 Feb 2024 17:26:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 31.56.0.0/24 maxlen: 24
31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
31.56.3.0/24 maxlen: 24
31.56.4.0/24 maxlen: 24
31.56.5.0/24 maxlen: 24
31.56.6.0/24 maxlen: 24
31.56.7.0/24 maxlen: 24
31.56.8.0/24 maxlen: 24
31.56.9.0/24 maxlen: 24
31.56.10.0/24 maxlen: 24
31.56.11.0/24 maxlen: 24
31.56.12.0/24 maxlen: 24
31.56.13.0/24 maxlen: 24
31.56.14.0/24 maxlen: 24
31.56.15.0/24 maxlen: 24
31.56.16.0/24 maxlen: 24
31.56.17.0/24 maxlen: 24
31.56.18.0/24 maxlen: 24
31.56.19.0/24 maxlen: 24
31.56.20.0/24 maxlen: 24
31.56.21.0/24 maxlen: 24
31.56.22.0/24 maxlen: 24
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.25.0/24 maxlen: 24
31.56.26.0/24 maxlen: 24
31.56.27.0/24 maxlen: 24
31.56.28.0/24 maxlen: 24
31.56.29.0/24 maxlen: 24
31.56.30.0/24 maxlen: 24
31.56.31.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.33.0/24 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.36.0/24 maxlen: 24
31.56.37.0/24 maxlen: 24
31.56.38.0/24 maxlen: 24
31.56.39.0/24 maxlen: 24
31.56.40.0/24 maxlen: 24
31.56.41.0/24 maxlen: 24
31.56.42.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.45.0/24 maxlen: 24
31.56.46.0/24 maxlen: 24
31.56.47.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.49.0/24 maxlen: 24
31.56.50.0/24 maxlen: 24
31.56.51.0/24 maxlen: 24
31.56.52.0/24 maxlen: 24
31.56.53.0/24 maxlen: 24
31.56.54.0/24 maxlen: 24
31.56.55.0/24 maxlen: 24
31.56.56.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.58.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.60.0/24 maxlen: 24
31.56.61.0/24 maxlen: 24
31.56.62.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.65.0/24 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.70.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.73.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.78.0/24 maxlen: 24
31.56.79.0/24 maxlen: 24
31.56.80.0/24 maxlen: 24
31.56.81.0/24 maxlen: 24
31.56.82.0/24 maxlen: 24
31.56.83.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/24 maxlen: 24
31.56.91.0/24 maxlen: 24
31.56.92.0/24 maxlen: 24
31.56.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Feb 2024 23:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b8:1a:d1:87:9a:76:e8:a3:90:84:25:9c:30:d4:22:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 17 17:26:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=008deaaeb8e440c1624c6cbc8815f4a27151c6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:5f:98:b9:94:f1:ee:41:06:f0:0d:47:23:
80:12:11:2d:36:cf:86:17:b5:40:05:6e:aa:bb:50:
96:31:8e:5c:4e:ef:22:1d:0f:92:ce:f6:8d:0d:3e:
3b:bc:f2:39:82:ab:d8:9c:1b:3e:40:15:b0:a5:9b:
5e:f9:55:0a:5c:15:39:88:af:1d:e6:76:40:63:5a:
50:67:f5:cf:c4:e3:cc:74:50:f8:3b:f9:40:b3:1a:
5b:0d:ab:64:be:4b:9e:92:9f:ec:b6:16:df:4f:d7:
29:25:e3:c0:fe:92:45:fc:10:75:af:bc:df:59:9e:
c0:3d:4c:66:61:8b:35:a0:81:2f:f4:2a:52:62:29:
3f:44:ed:1d:03:59:e4:c3:5d:7d:4c:0d:bf:41:6e:
57:d0:ca:2f:98:07:90:97:88:71:7f:e8:7a:5d:94:
18:40:f3:f2:32:b8:09:e7:2c:84:80:83:db:9a:49:
fd:5e:04:78:40:da:02:dc:1e:56:ee:c2:e7:1b:4f:
34:f5:ba:5c:9c:72:77:ae:5b:19:6e:aa:49:d7:bd:
10:93:10:90:45:c9:3d:f7:39:a4:a0:09:b2:60:c0:
49:c2:d9:24:72:87:b3:15:86:2c:ac:a9:7c:bb:f3:
dc:58:1f:a2:da:b6:d5:ed:50:47:c5:09:76:09:ec:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8D:EA:AE:B8:E4:40:C1:62:4C:6C:BC:88:15:F4:A2:71:51:C6:CE
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/AI3qrrjkQMFiTGy8iBX0onFRxs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.93.255
Signature Algorithm: sha256WithRSAEncryption
56:98:cb:35:20:42:9d:65:25:c3:4f:11:48:b3:59:48:e6:a0:
12:27:91:d9:af:72:6d:d0:58:27:f3:55:71:9b:69:f3:17:a4:
c5:76:51:0c:21:7b:5f:6d:25:6e:49:f4:1a:97:c6:93:37:ab:
3f:3a:5c:7a:c8:34:8f:9c:bf:7f:85:1c:67:62:62:b2:89:77:
46:af:e1:66:00:5a:f4:c1:9f:95:85:d8:80:d5:db:08:c7:5a:
c0:de:a4:59:5b:04:ea:d9:c7:4f:da:b7:27:6c:11:43:8c:3e:
2d:92:72:3e:ef:64:f0:da:49:6d:02:e7:53:2f:39:95:67:c2:
7a:22:e0:3a:78:c7:e9:a3:60:3b:44:59:10:5f:15:d3:16:1d:
7e:91:29:7e:8b:76:3c:c0:2b:33:0f:3d:f7:f7:f2:a7:a3:28:
d0:c8:5e:f0:87:25:4d:7d:03:b5:7c:7d:04:8d:4f:7f:74:ca:
26:aa:5f:bb:94:4b:be:5e:2a:7e:f4:49:ab:5d:c1:35:22:b5:
6c:5e:5d:1a:b0:91:60:42:e0:ee:b2:85:1b:05:14:71:dc:2d:
7f:9f:15:2e:01:d3:d3:34:98:2b:f3:a6:91:28:d8:14:43:a2:
78:e9:40:0b:67:22:31:a9:3b:c9:4c:5f:2f:88:1c:96:5a:a8:
cc:b0:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 18 00:40:29 2024 by rpki-client on console-fra.rpki-client.org