Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1rQrZZVM7zSCElJ50ZNqn1_3lxM.roa
File: 1rQrZZVM7zSCElJ50ZNqn1_3lxM.roa (raw, json)
Hash identifier: lgdwiQ4VSfsoNFEWPeNqvcyI2Pt923BvT5eSOwL8dNU=
Subject key identifier: D6:B4:2B:65:95:4C:EF:34:82:12:52:79:D1:93:6A:9F:5F:F7:97:13
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191BEC27DFF15AD7096D0A6C7CCB6289A4B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1rQrZZVM7zSCElJ50ZNqn1_3lxM.roa
Signing time: Wed 04 Sep 2024 20:38:22 +0000
ROA not before: Wed 04 Sep 2024 20:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 07:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:be:c2:7d:ff:15:ad:70:96:d0:a6:c7:cc:b6:28:9a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 4 20:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6b42b65954cef3482125279d1936a9f5ff79713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:3c:6b:a8:8f:3d:e5:d6:d3:dd:73:ca:71:
a0:50:3c:f7:4f:7b:24:24:99:3b:38:42:bb:c9:d8:
e9:b5:29:d3:6e:1a:69:15:c1:09:6d:9c:10:55:ac:
df:6f:6e:f0:39:a9:ea:7a:3e:15:e9:5b:a8:31:da:
af:b6:e7:9f:39:0c:f9:98:53:60:d7:f6:de:13:a3:
3c:5b:23:03:1b:26:25:67:41:a6:3d:70:c4:92:2c:
08:41:fb:f7:52:ca:0a:5b:be:08:80:a1:c2:83:1f:
9b:80:70:f3:d7:94:00:8f:af:ca:4d:0a:c6:ae:43:
e7:63:a3:ca:95:15:4c:a7:b2:37:11:7a:78:e4:7b:
ac:b1:bb:21:a2:86:de:71:a0:bd:46:53:75:94:ad:
4d:c3:f4:e1:00:25:18:73:ba:77:11:1d:a8:65:15:
65:f0:7e:7a:49:92:94:1c:6e:58:99:6c:85:89:a7:
0f:ba:7c:fe:24:11:98:19:73:81:7f:ba:e6:ef:b5:
2f:15:86:00:da:57:ea:10:6b:8e:d3:0b:52:aa:68:
ee:d0:55:8e:1b:74:cd:d7:4a:79:d3:07:f1:61:5d:
3b:ce:31:35:2d:07:e0:ab:f6:75:8e:2c:29:e3:4b:
f1:a9:1f:b0:43:77:1a:31:05:97:3a:97:7d:a0:9c:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B4:2B:65:95:4C:EF:34:82:12:52:79:D1:93:6A:9F:5F:F7:97:13
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1rQrZZVM7zSCElJ50ZNqn1_3lxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
Signature Algorithm: sha256WithRSAEncryption
60:43:2f:f9:c7:39:44:cf:42:f2:f3:4e:aa:40:fb:96:69:74:
a6:1e:ac:16:56:d9:89:b7:7b:31:ac:cf:bb:d1:b3:08:f8:57:
43:d9:b9:61:cf:84:3e:7e:de:cf:57:a4:56:5e:78:4a:5a:00:
53:a1:b9:14:f2:27:e7:c3:a6:56:8c:0d:4a:3c:02:62:61:d7:
ee:3e:27:9e:91:19:36:b9:d0:36:34:15:bf:54:cd:45:77:e7:
ad:a6:68:95:d7:49:4b:58:59:39:40:7d:ca:f6:6a:c7:2c:ee:
47:9b:a2:87:6b:e4:76:92:1f:33:56:5d:6b:7f:0a:51:cf:4b:
7f:de:88:08:ff:2c:76:86:5b:21:0f:44:97:21:0d:be:35:2e:
f1:82:9f:86:77:da:bc:79:85:14:44:7c:3d:5b:b6:85:c7:c8:
d5:8c:3c:f6:04:d9:b6:db:8b:36:d2:91:05:4e:1a:cb:35:ed:
fe:1e:80:98:f0:b8:43:1c:a9:4d:29:27:ec:90:81:cd:bc:bc:
8e:4b:ab:38:07:f8:89:e4:47:1f:55:9e:fe:da:e5:0b:65:a2:
ac:f1:67:67:b3:e6:06:e6:63:61:78:43:5c:4e:44:78:d1:b3:
f2:11:d0:7d:cc:93:ba:53:d7:60:be:de:f9:6d:8d:98:59:0d:
a6:d2:d4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 09:59:51 2024 by rpki-client on console-ams.rpki-client.org