Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3-K06aK9N-fJ8psCdcFdqlWiMVE.roa
File: 3-K06aK9N-fJ8psCdcFdqlWiMVE.roa (raw, json)
Hash identifier: JhEHsqZ/g8aU+0u1zeUvv3ND6jmfe/9fXIIT1h1hdBg=
Subject key identifier: DF:E2:B4:E9:A2:BD:37:E7:C9:F2:9B:02:75:C1:5D:AA:55:A2:31:51
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019113563E6270214CB24B5288C949AD49E8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3-K06aK9N-fJ8psCdcFdqlWiMVE.roa
Signing time: Fri 02 Aug 2024 13:45:04 +0000
ROA not before: Fri 02 Aug 2024 13:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 15:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:56:3e:62:70:21:4c:b2:4b:52:88:c9:49:ad:49:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 2 13:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfe2b4e9a2bd37e7c9f29b0275c15daa55a23151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:ef:87:9c:49:e4:8c:db:56:ac:04:b7:c0:
63:54:0b:d7:08:18:98:7a:9c:c5:12:85:7d:2f:14:
3c:d6:d1:ef:fd:ab:67:8e:a8:3a:bd:32:58:c4:e1:
5b:b0:75:1f:59:87:79:10:59:40:88:78:61:7f:2b:
f7:86:f5:b1:0e:47:27:c2:55:df:ca:6f:d4:5c:13:
a1:7d:69:a8:05:18:8d:c7:b5:14:a4:d8:20:90:97:
12:37:0b:5e:38:56:af:82:93:36:e2:50:5a:0d:b5:
9b:02:0e:60:42:8c:ea:c8:5a:bb:da:15:e7:1d:64:
11:28:74:1e:d9:e0:2d:6f:e3:93:68:e4:ce:c0:c6:
06:68:11:dd:e9:7d:a0:23:1c:ba:08:15:3c:36:1f:
1d:93:26:0a:38:d4:3f:01:f9:60:1f:b5:45:b5:51:
e3:d9:33:2d:c6:56:bb:b0:cd:ef:a7:86:89:5b:46:
4e:37:88:61:b9:da:4a:9d:ba:93:0b:2e:55:e7:a3:
76:7c:54:9e:13:70:dd:23:a0:92:23:5b:81:6b:0d:
8c:75:0a:c9:2e:16:97:69:21:f5:62:2e:6b:db:23:
04:d3:88:2b:0f:ac:48:dc:00:97:0f:08:f2:3c:60:
af:86:22:6a:4d:a8:40:91:63:ad:4a:56:e9:f9:0b:
ce:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:B4:E9:A2:BD:37:E7:C9:F2:9B:02:75:C1:5D:AA:55:A2:31:51
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3-K06aK9N-fJ8psCdcFdqlWiMVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.65.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:93:97:02:e4:78:f3:d9:bb:4c:7b:6b:45:a9:d7:15:32:7e:
78:20:86:78:d7:c0:80:a9:bf:36:22:2f:5d:ba:32:0f:23:ea:
eb:f4:b9:db:99:50:28:03:c5:36:64:d3:65:7c:fc:09:ce:bd:
bb:66:2a:17:c1:71:39:95:83:fe:bc:50:48:e7:dd:27:55:2a:
0f:77:43:89:e9:3a:74:bf:9a:3d:37:b6:d8:ac:2e:9f:e2:e9:
f8:c4:17:99:b3:3d:86:e6:43:43:58:11:91:c9:67:84:58:73:
cb:6c:61:4f:96:3f:f9:97:34:6b:63:40:a1:63:0b:49:08:f2:
b5:90:aa:87:35:b6:51:8c:99:59:e3:fc:3c:19:8b:be:0c:29:
2e:6c:95:14:d0:f5:21:28:1a:65:f9:11:d7:a2:3f:08:07:be:
59:00:b2:88:ec:b3:ae:1c:05:cf:5f:76:c8:d9:85:d4:2f:e5:
95:58:7b:06:5b:ce:83:e4:cc:11:6c:e7:91:af:57:5e:48:73:
85:89:99:fc:7c:d4:53:96:dc:af:e3:72:33:91:fe:84:fd:b3:
b1:f3:f6:58:ed:a8:5c:93:12:57:3f:b1:df:29:71:07:ee:92:
85:a1:24:4f:42:f3:df:f3:ab:41:4a:ac:66:aa:0e:f4:dc:4a:
32:6f:b5:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZETVj5icCFMsktSiMlJrUnoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwODAyMTM0NTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmUyYjRlOWEyYmQzN2U3YzlmMjliMDI3NWMxNWRhYTU1YTIzMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKjvh5xJ5IzbVqwEt8BjVAvXCBiY
epzFEoV9LxQ81tHv/atnjqg6vTJYxOFbsHUfWYd5EFlAiHhhfyv3hvWxDkcnwlXf
ym/UXBOhfWmoBRiNx7UUpNggkJcSNwteOFavgpM24lBaDbWbAg5gQozqyFq72hXn
HWQRKHQe2eAtb+OTaOTOwMYGaBHd6X2gIxy6CBU8Nh8dkyYKONQ/AflgH7VFtVHj
2TMtxla7sM3vp4aJW0ZON4hhudpKnbqTCy5V56N2fFSeE3DdI6CSI1uBaw2MdQrJ
LhaXaSH1Yi5r2yME04grD6xI3ACXDwjyPGCvhiJqTahAkWOtSlbp+QvOHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN/itOmivTfnyfKbAnXBXapVojFRMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMy1LMDZhSzlOLWZKOHBzQ2RjRmRxbFdpTVZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhBMA0G
CSqGSIb3DQEBCwUAA4IBAQC3k5cC5Hjz2btMe2tFqdcVMn54IIZ418CAqb82Ii9d
ujIPI+rr9LnbmVAoA8U2ZNNlfPwJzr27ZioXwXE5lYP+vFBI590nVSoPd0OJ6Tp0
v5o9N7bYrC6f4un4xBeZsz2G5kNDWBGRyWeEWHPLbGFPlj/5lzRrY0ChYwtJCPK1
kKqHNbZRjJlZ4/w8GYu+DCkubJUU0PUhKBpl+RHXoj8IB75ZALKI7LOuHAXPX3bI
2YXUL+WVWHsGW86D5MwRbOeRr1deSHOFiZn8fNRTltyv43Izkf6E/bOx8/ZY7ahc
kxJXP7HfKXEH7pKFoSRPQvPf86tBSqxmqg703Eoyb7V+
-----END CERTIFICATE-----
Generated at Mon Sep 2 18:41:22 2024 by rpki-client on console-fra.rpki-client.org