Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1BGGbbRYThdANBj-37O38rxHjBY.roa
File: 1BGGbbRYThdANBj-37O38rxHjBY.roa (raw, json)
Hash identifier: uCoCBo64fddokpGLnewCBIzybeAuxT9BRujS3KePQrU=
Subject key identifier: D4:11:86:6D:B4:58:4E:17:40:34:18:FE:DF:B3:B7:F2:BC:47:8C:16
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019142C185DF4FBFCBB78772F18A089E8B91
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1BGGbbRYThdANBj-37O38rxHjBY.roa
Signing time: Sun 11 Aug 2024 18:44:24 +0000
ROA not before: Sun 11 Aug 2024 18:44:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 18:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:42:c1:85:df:4f:bf:cb:b7:87:72:f1:8a:08:9e:8b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 11 18:44:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d411866db4584e17403418fedfb3b7f2bc478c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:a4:4e:ce:b6:d2:0f:07:c1:1a:0c:70:a9:
a7:cd:98:30:68:e9:a9:43:bf:83:fd:20:6f:a7:3d:
fc:5d:f9:ba:94:2f:bf:ab:2f:0b:67:fe:93:e9:b4:
d9:5e:fd:0c:7b:89:d7:8f:39:1c:ad:bd:b2:31:b5:
63:11:74:6a:62:ab:42:c2:76:74:a7:4a:6f:c3:06:
09:ab:fe:17:07:f1:e2:5d:bf:30:f3:4b:03:6b:95:
0a:65:97:6b:e4:29:72:dd:af:14:bf:11:f8:d0:1c:
87:9f:7c:20:31:9a:c9:a2:91:45:d2:32:30:8a:aa:
07:36:23:e0:1f:fd:5d:59:14:be:bb:ca:b9:56:42:
37:12:e2:81:00:81:2c:d0:61:23:18:af:59:81:3a:
1f:dc:88:7b:e4:66:f0:18:88:0f:ce:eb:62:6b:f4:
59:a2:d4:c3:00:e8:54:11:b8:6c:df:11:1a:c5:f4:
54:93:58:65:30:d9:c7:c9:e3:be:af:2b:91:01:bf:
e2:f1:6f:d2:28:4a:b7:29:23:4e:34:8c:1e:55:2b:
2c:b1:f3:94:b9:a6:bb:71:d7:36:14:82:f5:1b:f9:
52:a0:92:62:0c:0a:fd:14:5d:c5:0d:0b:af:0e:50:
11:d2:57:05:cd:a9:8a:78:33:8f:0f:cd:c9:85:0b:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:11:86:6D:B4:58:4E:17:40:34:18:FE:DF:B3:B7:F2:BC:47:8C:16
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1BGGbbRYThdANBj-37O38rxHjBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.63.0/24
31.56.69.0/24
31.56.72.0/24
Signature Algorithm: sha256WithRSAEncryption
67:36:50:c9:52:83:dd:da:f0:21:58:27:ee:2b:d7:10:bf:a0:
0a:17:1c:80:5f:b8:1b:df:7e:ee:99:f0:24:35:0d:f3:92:a1:
90:37:f3:2e:13:cd:a3:ee:3d:ed:85:29:f8:b3:65:3c:20:7e:
3b:0c:82:3b:46:fa:9b:ae:00:70:ec:bf:54:39:04:33:06:9a:
d5:e5:2e:18:a9:b3:91:87:7d:9e:e1:6f:d0:8c:0a:5b:67:a9:
72:97:a9:6a:b7:5f:cd:8d:59:78:e2:71:c1:66:19:d0:d4:f3:
05:21:3e:1d:33:84:a7:56:86:9a:a3:fc:66:63:23:8d:6c:b6:
d9:74:2d:10:86:5d:66:a5:ce:93:93:1f:f0:ce:fe:18:e9:7d:
87:25:b0:76:af:4c:ed:e7:57:ae:39:04:c0:36:b1:61:0a:38:
e6:1a:c1:d8:fc:7e:de:ea:23:6a:fa:26:38:e8:db:1c:86:4f:
6b:b5:50:97:f8:28:b0:1e:a3:31:e0:d5:1c:f6:6c:c1:2d:a2:
db:b0:4f:1e:17:02:b5:1f:85:17:03:27:de:01:60:75:9d:39:
9e:77:58:a1:66:21:0d:ca:7b:62:2e:0c:64:c9:87:28:bb:23:
f5:b6:a1:01:a8:17:92:9b:b3:d8:5e:5e:38:f0:10:c1:37:6b:
ad:3c:21:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 22:07:14 2024 by rpki-client on console-ams.rpki-client.org