Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-zj4a2QWfNco6Zd1_wxEyAzmqJQ.roa
File: 1-zj4a2QWfNco6Zd1_wxEyAzmqJQ.roa (raw, json)
Hash identifier: D2R0YHMUPUKtwMuXEE0kAvSmkiCh7kSolFvyytL8pXU=
Subject key identifier: FB:38:F8:6B:64:16:7C:D7:28:E9:97:75:FF:0C:44:C8:0C:E6:A8:94
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191987E5913A7BF71E98004D6D1352777AD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-zj4a2QWfNco6Zd1_wxEyAzmqJQ.roa
Signing time: Wed 28 Aug 2024 10:18:22 +0000
ROA not before: Wed 28 Aug 2024 10:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 20:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:7e:59:13:a7:bf:71:e9:80:04:d6:d1:35:27:77:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 28 10:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb38f86b64167cd728e99775ff0c44c80ce6a894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:00:d7:17:79:9e:2b:4b:10:9c:80:33:f7:
29:ec:4c:57:26:cf:7d:b6:22:81:ee:98:4f:05:96:
14:16:86:66:49:af:6f:70:21:86:04:11:dc:f4:23:
a3:91:80:29:ad:0d:a0:7f:51:20:d4:1d:ef:85:0f:
ad:23:9f:60:81:f4:65:3c:13:69:b9:2b:1c:e5:0e:
d6:62:b3:33:be:21:49:b3:4a:ea:6e:fc:6f:e3:ee:
e6:7a:f2:ff:f8:3e:80:18:bd:46:3f:43:d1:67:06:
63:92:24:76:d6:84:fe:28:47:d9:2f:e3:1f:b0:78:
28:b4:81:a2:d3:ec:76:81:92:c5:3e:0f:9d:f2:e0:
22:55:f9:95:74:93:f5:46:d4:0e:b0:80:04:cd:05:
02:3c:47:b5:2c:64:a8:d5:11:98:76:1e:33:71:2b:
f5:d0:3f:e0:47:9b:7d:e0:cd:62:77:ce:ff:70:05:
9b:f2:db:b5:b7:05:d8:07:61:e5:61:65:0a:01:57:
cf:3c:e8:bc:85:07:80:43:3d:3f:79:59:53:08:a5:
02:36:fc:fc:a3:8d:96:15:51:c8:89:63:03:8e:23:
87:b2:4c:cf:2c:18:6b:b8:13:b9:67:64:f8:da:f4:
71:30:a9:0a:86:41:67:5a:d3:53:82:19:62:07:65:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:38:F8:6B:64:16:7C:D7:28:E9:97:75:FF:0C:44:C8:0C:E6:A8:94
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-zj4a2QWfNco6Zd1_wxEyAzmqJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
Signature Algorithm: sha256WithRSAEncryption
69:86:b3:30:91:0b:5a:c4:f6:22:2c:4a:b7:82:48:f1:79:fe:
83:33:9d:1b:30:d7:20:bc:30:b6:be:0b:49:d1:30:69:5f:bd:
98:b0:f8:16:cc:59:c4:a2:67:fd:d2:d6:f5:8e:b5:84:ab:20:
04:c1:ec:e7:0e:2f:fb:7b:4c:f9:ee:48:8e:c1:b0:42:69:c3:
3a:7d:b6:22:b7:78:32:4a:15:9e:6a:3a:0b:3e:3b:83:ef:40:
ca:1c:bc:70:1a:44:9b:6c:b2:cb:1c:1d:6b:bc:3b:ec:2b:6c:
9f:a6:52:2a:5e:19:c1:ee:82:7c:06:27:14:77:5f:c9:07:23:
9e:bd:de:f6:18:12:a8:d9:2b:20:11:d7:de:a1:f7:7a:15:32:
cc:b8:11:73:7a:27:d3:05:d3:07:4c:d6:4d:36:1f:4a:d3:7e:
79:3f:62:b8:2c:3e:fb:c0:1c:7c:e4:5e:ca:ab:9b:9c:bb:4f:
cf:e6:ab:0f:6e:ed:e1:50:b0:8d:bf:05:cb:51:bd:5b:18:e5:
42:8c:58:a2:36:3c:d3:05:5c:f7:e5:96:bb:ce:f0:0d:bd:a2:
a4:9a:13:5e:76:d7:75:c0:0b:77:91:41:71:2c:dc:5f:d7:9c:
97:75:a1:ac:08:a7:e8:84:4d:98:62:34:c3:bc:e1:23:fb:5e:
65:88:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 21:50:34 2024 by rpki-client on console-ams.rpki-client.org