Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1F8mkU0GaZF1hFcY9mGzgay-KXw.roa
File: 1F8mkU0GaZF1hFcY9mGzgay-KXw.roa (raw, json)
Hash identifier: x8FVD1PEy2BJnY6PqvlBuVm/m6ryW4LzNBD1X4g8VpI=
Subject key identifier: D4:5F:26:91:4D:06:69:91:75:84:57:18:F6:61:B3:81:AC:BE:29:7C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192A3B2CE683D06CBEECBA17C814A8F70BA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1F8mkU0GaZF1hFcY9mGzgay-KXw.roa
Signing time: Sat 19 Oct 2024 07:34:17 +0000
ROA not before: Sat 19 Oct 2024 07:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.192.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.232.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.44.0/22 maxlen: 24
31.58.52.0/22 maxlen: 24
31.58.60.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 10:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a3:b2:ce:68:3d:06:cb:ee:cb:a1:7c:81:4a:8f:70:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 19 07:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d45f26914d06699175845718f661b381acbe297c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:8e:52:4c:3e:da:83:20:22:75:76:f0:34:
b7:2f:e6:98:d0:a3:39:7b:ba:92:ff:65:87:f2:2b:
d1:51:23:c5:a1:23:99:70:f7:40:1b:1e:4f:54:3c:
af:27:11:ce:5f:7a:3a:b5:7d:0c:7e:64:43:d2:f7:
9f:cb:4d:2b:c9:42:38:4a:7d:92:c9:18:f1:ac:88:
90:6a:af:42:f7:42:36:f7:2b:6c:e0:45:d1:0b:ca:
f1:50:b1:c7:9a:36:a2:0a:22:5c:fc:76:38:46:4b:
11:4f:9d:e7:43:48:4a:72:e9:d2:54:61:49:72:5f:
53:43:a8:84:91:27:e8:e9:7c:ff:45:d2:82:27:2b:
82:41:ef:ae:c6:83:b5:22:fa:99:53:bc:1f:33:dc:
7c:e0:e0:dd:ec:22:7b:72:a3:90:40:98:67:b3:2a:
77:f5:c6:dd:88:32:99:7c:8b:c0:24:da:ad:06:e0:
41:45:f9:94:91:93:e8:03:6d:09:6e:bf:13:55:50:
ad:69:85:8c:ab:2b:78:3d:99:25:5b:c5:cc:f4:20:
8e:1f:d4:f4:14:17:8a:85:67:b7:6e:4f:13:68:2c:
05:2c:84:c8:b2:30:06:11:2d:e2:8c:48:c5:7d:76:
c0:bc:83:69:5f:46:80:46:ce:39:0e:fe:16:c5:9a:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:26:91:4D:06:69:91:75:84:57:18:F6:61:B3:81:AC:BE:29:7C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1F8mkU0GaZF1hFcY9mGzgay-KXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.176.0-31.56.239.255
31.58.36.0/22
31.58.44.0/22
31.58.52.0/22
31.58.60.0/22
31.59.36.0/22
31.59.44.0/22
Signature Algorithm: sha256WithRSAEncryption
61:0f:fe:08:87:57:56:53:8d:c4:cf:2c:0b:7c:fb:50:4c:de:
ed:85:60:a6:07:e3:05:56:d6:8a:d7:2b:e3:4d:b8:95:3e:17:
50:f9:05:b0:14:17:99:87:b8:d1:95:98:1c:2e:bc:b5:d3:a0:
55:f4:df:50:1f:d5:94:42:3d:45:69:49:17:73:9e:02:df:30:
f6:e7:d6:25:f1:65:35:13:1e:d8:20:43:20:a9:36:0b:18:e8:
10:14:40:23:d4:99:31:52:f3:33:ec:76:a1:a3:a2:d0:31:61:
bc:b0:1b:0b:7a:24:62:c9:00:58:73:8a:f6:9b:63:19:95:68:
12:6e:71:fa:a3:04:b2:eb:0f:bd:df:ce:33:e8:2b:bb:60:30:
73:72:f5:be:c5:74:f9:71:e8:12:a4:ee:e9:7a:a8:0d:4b:75:
b2:6c:5d:01:84:e0:e8:d0:55:ad:b2:7f:00:6d:4b:1e:aa:c5:
10:0f:a2:17:85:15:42:38:f9:94:57:81:18:03:28:f9:e5:18:
00:8f:01:8b:36:7f:25:44:64:56:c2:40:67:52:eb:c7:b2:99:
1a:18:b4:3a:6a:a5:42:29:a0:0d:86:79:c6:34:12:ea:19:9e:
2b:6f:72:4e:b4:87:c5:57:b8:d1:82:15:d9:f4:e6:7e:33:60:
26:78:e0:89
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZKjss5oPQbL7suhfIFKj3C6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDE5MDczNDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDVmMjY5MTRkMDY2OTkxNzU4NDU3MThmNjYxYjM4MWFjYmUyOTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+eOUkw+2oMgInV28DS3L+aY0KM5
e7qS/2WH8ivRUSPFoSOZcPdAGx5PVDyvJxHOX3o6tX0MfmRD0vefy00ryUI4Sn2S
yRjxrIiQaq9C90I29yts4EXRC8rxULHHmjaiCiJc/HY4RksRT53nQ0hKcunSVGFJ
cl9TQ6iEkSfo6Xz/RdKCJyuCQe+uxoO1IvqZU7wfM9x84ODd7CJ7cqOQQJhnsyp3
9cbdiDKZfIvAJNqtBuBBRfmUkZPoA20Jbr8TVVCtaYWMqyt4PZklW8XM9CCOH9T0
FBeKhWe3bk8TaCwFLITIsjAGES3ijEjFfXbAvINpX0aARs45Dv4WxZqhQQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFNRfJpFNBmmRdYRXGPZhs4Gsvil8MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMUY4bWtVMEdhWkYxaEZjWTltR3pnYXktS1h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBAQfOLAD
BAQfOOADBAIfOiQDBAIfOiwDBAIfOjQDBAIfOjwDBAIfOyQDBAIfOywwDQYJKoZI
hvcNAQELBQADggEBAGEP/giHV1ZTjcTPLAt8+1BM3u2FYKYH4wVW1orXK+NNuJU+
F1D5BbAUF5mHuNGVmBwuvLXToFX031Af1ZRCPUVpSRdzngLfMPbn1iXxZTUTHtgg
QyCpNgsY6BAUQCPUmTFS8zPsdqGjotAxYbywGwt6JGLJAFhzivabYxmVaBJucfqj
BLLrD73fzjPoK7tgMHNy9b7FdPlx6BKk7ul6qA1LdbJsXQGE4OjQVa2yfwBtSx6q
xRAPoheFFUI4+ZRXgRgDKPnlGACPAYs2fyVEZFbCQGdS68eymRoYtDpqpUIpoA2G
ecY0EuoZnitvck60h8VXuNGCFdn05n4zYCZ44Ik=
-----END CERTIFICATE-----
Generated at Mon Oct 28 14:24:43 2024 by rpki-client on console-ams.rpki-client.org