Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1tMeMIb2NpFIF7dekIR1Dvv8C-E.roa
File: 1tMeMIb2NpFIF7dekIR1Dvv8C-E.roa (raw, json)
Hash identifier: WtW3C6w7cEbIJBmFgQRvgwawzt61z1djcEO3D/Gi+80=
Subject key identifier: D6:D3:1E:30:86:F6:36:91:48:17:B7:5E:90:84:75:0E:FB:FC:0B:E1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191ABF3BAF6986046E6890C8044D1752D88
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1tMeMIb2NpFIF7dekIR1Dvv8C-E.roa
Signing time: Sun 01 Sep 2024 04:59:22 +0000
ROA not before: Sun 01 Sep 2024 04:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.37.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 11:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ab:f3:ba:f6:98:60:46:e6:89:0c:80:44:d1:75:2d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 1 04:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6d31e3086f636914817b75e9084750efbfc0be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:07:f1:00:e8:38:d9:40:70:a1:35:d5:19:
ea:c1:ad:79:f0:3f:42:02:46:60:d2:22:fb:9b:22:
ce:13:c2:7a:1f:f1:07:6a:1f:8c:ab:af:a0:f3:24:
ca:07:e5:92:5c:17:81:1f:86:aa:f0:72:08:3e:44:
44:a9:f2:bf:ea:9d:be:f5:61:f1:cd:ec:a9:3b:54:
6c:03:64:d5:2f:85:8b:da:33:8d:84:da:74:8e:35:
4d:c6:e7:3f:8d:99:40:ba:b0:f7:eb:bf:af:28:0e:
6e:a7:9b:72:9c:de:b8:9d:01:06:a6:a9:f6:75:52:
30:80:93:4b:6f:e4:22:06:69:52:01:bf:4d:58:44:
32:92:7d:db:9b:26:93:64:05:97:97:50:05:50:a9:
32:7b:f6:f8:ef:fb:3a:b8:18:39:f0:c1:07:98:10:
de:36:f7:de:c7:d3:8e:f7:2b:6f:9a:7d:03:93:7b:
63:53:e8:c1:45:20:13:60:57:3b:bc:a7:d6:d6:14:
14:3a:7e:35:1d:f9:2d:52:16:2e:3e:05:79:1c:c2:
3b:fb:73:92:c3:f7:a7:08:d2:71:db:e3:da:7a:02:
a1:b6:77:65:69:b1:e2:27:9d:b3:25:9d:32:ce:4b:
a1:82:d0:b1:60:d6:a9:73:62:06:4a:d1:55:9a:f8:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D3:1E:30:86:F6:36:91:48:17:B7:5E:90:84:75:0E:FB:FC:0B:E1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1tMeMIb2NpFIF7dekIR1Dvv8C-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.37.0/24
31.56.89.0/24
31.56.112.0/21
31.56.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:68:0c:f8:9e:fa:c2:ea:ac:38:71:82:54:e0:44:a4:6d:4e:
b0:62:24:8c:7b:26:cd:aa:06:85:ad:94:a7:c7:07:83:38:b9:
10:a2:51:44:2f:42:0f:03:27:0f:bd:4e:ef:18:77:23:df:b7:
68:55:ea:b8:43:17:0d:ee:30:98:d4:c4:4f:8f:86:1c:36:ac:
b6:4b:03:59:52:47:b6:32:d3:1c:75:7b:9d:ec:29:62:59:bf:
47:2a:05:d8:72:38:fe:aa:d8:13:be:11:ac:25:97:fb:ff:6b:
9c:82:41:5a:22:72:af:9f:bc:b0:36:0e:1e:f2:92:4f:eb:b6:
5c:10:57:06:dc:a4:12:a5:d1:2a:10:d4:b2:ac:97:3d:60:ce:
9a:04:a4:74:86:6b:69:67:64:39:6b:3d:19:fd:dc:d3:e1:05:
ea:20:eb:e8:99:dd:40:9f:11:e3:2b:86:76:26:d3:26:72:43:
62:ee:9e:d8:34:79:0b:fa:d3:2f:6c:fb:97:47:c6:67:d8:b0:
64:52:d6:a6:3e:b5:d6:24:76:1e:e8:85:4c:63:92:a1:3f:bd:
3d:8f:b5:6d:50:d7:52:3d:60:cc:15:5b:1e:6d:cc:b9:89:f0:
6e:9a:f8:94:0a:e6:3a:1c:64:5b:3f:64:71:c7:9b:5c:a4:29:
a1:3b:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 12:45:46 2024 by rpki-client on console-fra.rpki-client.org