Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/218Y9rEvVxboUdFhbEwB-XYjBUk.roa
File: 218Y9rEvVxboUdFhbEwB-XYjBUk.roa (raw, json)
Hash identifier: WsALu1wIVnkXY1Wkh7CLvVA/Vu4TXp7uJPfiIz+2QmY=
Subject key identifier: DB:5F:18:F6:B1:2F:57:16:E8:51:D1:61:6C:4C:01:F9:76:23:05:49
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191576FA3DE946C86348EB10EDDBE3E2712
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/218Y9rEvVxboUdFhbEwB-XYjBUk.roa
Signing time: Thu 15 Aug 2024 19:06:59 +0000
ROA not before: Thu 15 Aug 2024 19:06:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214375
IP address blocks: 31.56.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 11:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:57:6f:a3:de:94:6c:86:34:8e:b1:0e:dd:be:3e:27:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 15 19:06:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db5f18f6b12f5716e851d1616c4c01f976230549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:11:8d:60:ca:d1:d3:6c:a5:86:83:e5:e6:
a5:f6:4f:de:8a:08:4e:6b:34:1a:09:44:61:60:60:
24:a1:1e:17:70:55:df:b7:9b:63:13:1d:86:61:0c:
24:cf:d0:df:fb:6d:0e:bb:38:dd:e4:36:e4:a9:6d:
f2:3c:aa:1f:97:1d:31:f3:27:b5:1e:06:5c:ec:f0:
b4:4d:24:9a:74:d1:9b:58:ef:b6:c2:3f:0a:a2:a4:
18:18:57:c1:a0:b1:46:70:0e:79:fc:ff:d2:ca:15:
8c:ec:df:61:13:d8:e8:51:cf:90:c4:60:ff:a3:1d:
14:3f:6f:8b:36:ee:4c:b5:0c:db:eb:5a:77:1d:86:
02:d3:54:9b:d4:a7:57:46:ac:46:68:00:60:b0:24:
76:b6:70:d8:63:1e:9d:bb:8d:1a:92:e0:b6:36:85:
1a:85:39:ad:23:de:97:4d:e9:8f:1e:a4:c1:e2:82:
e9:1d:96:2b:fe:ef:f3:2a:57:1d:30:98:7b:6f:a7:
ed:d8:0f:77:56:ed:e9:52:b6:24:7e:07:06:1d:de:
5d:1e:27:c2:50:8c:57:3b:0f:05:cb:20:05:14:bd:
87:38:a6:38:bf:93:7d:7b:dd:97:75:f0:3f:74:4c:
1d:fc:70:40:8e:7e:b6:7a:51:7c:87:40:e9:b2:77:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5F:18:F6:B1:2F:57:16:E8:51:D1:61:6C:4C:01:F9:76:23:05:49
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/218Y9rEvVxboUdFhbEwB-XYjBUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:39:cd:28:f7:d7:80:cf:fd:9f:31:08:72:da:d6:3b:79:bb:
96:18:a5:9a:be:da:9c:55:e5:77:6f:93:0e:1a:e2:92:ee:3f:
61:10:9c:a4:50:a2:9c:df:1b:cd:e1:58:43:9f:af:cc:7d:f2:
82:e4:ce:88:86:70:b4:b2:a3:ee:d8:93:ae:e4:80:9d:bb:5a:
21:c3:30:3a:bb:b9:e5:3c:f6:c2:34:8d:52:d5:d0:a3:5d:7d:
d8:86:f6:34:af:8e:6d:f1:58:58:62:13:a9:0d:d8:22:35:a6:
6d:ab:47:9d:f1:72:ad:3c:59:4d:80:d1:b0:b0:7d:e9:14:a3:
59:28:05:50:c5:5c:49:03:d4:f5:f2:28:dd:ad:ab:a3:31:83:
66:87:96:f2:2a:b2:18:e1:b6:4c:e0:b3:a8:9f:ae:2c:7f:a5:
40:ef:0d:1e:17:c2:40:40:fe:b6:59:07:c9:ce:52:e2:d0:b3:
b3:15:21:7e:c8:8f:e9:5f:e3:2d:45:48:22:47:b3:76:9d:68:
ff:80:d9:2c:92:56:9b:ca:b9:06:35:76:e5:1a:ac:72:dd:5f:
dd:7e:dc:7b:b1:2e:88:66:8f:94:7d:73:0d:32:f2:d0:d4:88:
9d:7b:ab:dd:b1:76:72:36:a0:b5:29:a6:04:45:41:77:b3:d1:
d6:63:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 14:13:42 2024 by rpki-client on console-fra.rpki-client.org