Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1udMNuwjj_7IslWx1Pw2gmPjA28.roa
File: 1udMNuwjj_7IslWx1Pw2gmPjA28.roa (raw, json)
Hash identifier: AbDHaKohIx3RbiKHvtM8e/CTTdrsoQoTzK5oZebXfbQ=
Subject key identifier: D6:E7:4C:36:EC:23:8F:FE:C8:B2:55:B1:D4:FC:36:82:63:E3:03:6F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019161B0CFAF844B7DA1B04B1B252905D323
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1udMNuwjj_7IslWx1Pw2gmPjA28.roa
Signing time: Sat 17 Aug 2024 18:54:22 +0000
ROA not before: Sat 17 Aug 2024 18:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214828
IP address blocks: 31.56.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 05:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:61:b0:cf:af:84:4b:7d:a1:b0:4b:1b:25:29:05:d3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 17 18:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6e74c36ec238ffec8b255b1d4fc368263e3036f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:b5:2f:cb:bc:f8:36:7c:83:c5:af:48:d6:
d3:ce:c1:90:4c:72:3a:93:60:7e:c7:41:a9:47:70:
3c:d8:2a:19:23:1a:eb:18:c7:9e:2c:63:e6:f8:c0:
3d:8e:93:e1:92:37:b4:8b:ec:fc:8f:9a:a0:c8:1e:
ca:b4:fe:f5:79:02:be:75:f1:d5:83:10:b3:43:32:
70:45:6e:14:22:e0:32:f0:db:25:b3:3f:3e:5e:93:
2f:5e:9b:79:ca:37:84:13:06:6d:5c:e5:54:4f:89:
01:d1:03:26:62:14:b7:e5:3e:ba:f3:2b:2f:61:98:
11:7f:ed:c3:4e:d3:40:fe:85:f9:7d:f5:62:c3:e3:
bc:3b:e4:86:49:c9:97:fb:30:7c:86:96:2e:cc:cb:
8e:f5:f9:ae:38:f8:64:be:74:ae:46:a5:e0:63:4e:
e5:97:cb:73:c1:b4:c2:7f:f1:4e:b7:8d:6e:30:a1:
aa:40:fc:64:ba:73:ed:ad:fe:a0:83:75:ff:89:82:
fb:fb:28:bb:aa:9b:bc:4d:25:12:51:96:81:b7:a4:
92:05:9c:51:07:48:f1:ec:6d:5e:ed:29:ec:ed:10:
92:d7:d2:c2:02:16:80:6b:48:5c:51:48:13:4a:22:
34:76:98:00:19:4a:98:eb:53:e9:92:53:e7:95:19:
cd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:4C:36:EC:23:8F:FE:C8:B2:55:B1:D4:FC:36:82:63:E3:03:6F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1udMNuwjj_7IslWx1Pw2gmPjA28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.85.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3b:e8:fd:87:83:70:17:da:11:28:d5:53:96:5f:68:fe:95:
b7:05:cd:a4:36:8a:b9:00:ad:65:f2:ec:d2:47:67:5e:8d:f5:
61:e0:93:b4:a2:ca:88:32:3f:1a:56:2a:7d:cf:1e:1a:0f:fd:
6c:69:6a:14:ec:be:62:f2:ea:60:5b:2f:b4:c3:37:ca:b8:dc:
2a:f0:e0:40:2e:d5:c3:77:75:97:42:52:1a:be:75:4a:e6:e0:
29:c5:73:4b:32:7a:81:33:2a:a1:5b:a3:42:ab:fc:63:65:b1:
e4:19:fd:f5:bb:af:b6:55:e1:40:ba:24:cc:e6:c6:64:7f:33:
92:d4:96:17:83:2f:e9:dc:d5:4a:6a:0a:be:1f:ff:30:1d:d2:
59:a6:f6:cd:0e:11:83:24:65:ad:d7:7e:05:3d:e1:3e:01:f1:
18:bc:e4:15:81:a9:8d:78:4a:87:7e:9c:1b:65:5f:2d:8a:30:
71:75:c6:53:f4:8d:98:f8:82:f0:57:ec:14:2a:e8:6f:c4:7d:
cf:ea:fc:ce:23:84:64:56:53:85:c9:c4:b3:c1:52:5b:8f:db:
5c:43:ef:a4:7b:4e:ad:8f:96:c6:93:4a:cd:5b:74:1e:18:2d:
dd:af:87:cd:24:06:45:ae:f4:fc:ed:18:dc:c1:21:ab:8d:0d:
40:b3:cb:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFhsM+vhEt9obBLGyUpBdMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwODE3MTg1NDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmU3NGMzNmVjMjM4ZmZlYzhiMjU1YjFkNGZjMzY4MjYzZTMwMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QS1L8u8+DZ8g8WvSNbTzsGQTHI6
k2B+x0GpR3A82CoZIxrrGMeeLGPm+MA9jpPhkje0i+z8j5qgyB7KtP71eQK+dfHV
gxCzQzJwRW4UIuAy8Nslsz8+XpMvXpt5yjeEEwZtXOVUT4kB0QMmYhS35T668ysv
YZgRf+3DTtNA/oX5ffViw+O8O+SGScmX+zB8hpYuzMuO9fmuOPhkvnSuRqXgY07l
l8tzwbTCf/FOt41uMKGqQPxkunPtrf6gg3X/iYL7+yi7qpu8TSUSUZaBt6SSBZxR
B0jx7G1e7Sns7RCS19LCAhaAa0hcUUgTSiI0dpgAGUqY61PpklPnlRnNdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNbnTDbsI4/+yLJVsdT8NoJj4wNvMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMXVkTU51d2pqXzdJc2xXeDFQdzJnbVBqQTI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhVMA0G
CSqGSIb3DQEBCwUAA4IBAQCZO+j9h4NwF9oRKNVTll9o/pW3Bc2kNoq5AK1l8uzS
R2dejfVh4JO0osqIMj8aVip9zx4aD/1saWoU7L5i8upgWy+0wzfKuNwq8OBALtXD
d3WXQlIavnVK5uApxXNLMnqBMyqhW6NCq/xjZbHkGf31u6+2VeFAuiTM5sZkfzOS
1JYXgy/p3NVKagq+H/8wHdJZpvbNDhGDJGWt134FPeE+AfEYvOQVgamNeEqHfpwb
ZV8tijBxdcZT9I2Y+ILwV+wUKuhvxH3P6vzOI4RkVlOFycSzwVJbj9tcQ++ke06t
j5bGk0rNW3QeGC3dr4fNJAZFrvT87RjcwSGrjQ1As8sY
-----END CERTIFICATE-----
Generated at Thu Oct 17 07:20:44 2024 by rpki-client on console-fra.rpki-client.org