Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3v72kNPbamLBdI_Gl6UtTdpfGbY.roa
File: 3v72kNPbamLBdI_Gl6UtTdpfGbY.roa (raw, json)
Hash identifier: nI2a694oF030Zb09Yeksf5GW+3C9M6ahy39g0xebbWw=
Subject key identifier: DE:FE:F6:90:D3:DB:6A:62:C1:74:8F:C6:97:A5:2D:4D:DA:5F:19:B6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191577F32EDBA536D918B64F9BE8D8E6125
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3v72kNPbamLBdI_Gl6UtTdpfGbY.roa
Signing time: Thu 15 Aug 2024 19:23:59 +0000
ROA not before: Thu 15 Aug 2024 19:23:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 273556
IP address blocks: 31.56.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 06:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:57:7f:32:ed:ba:53:6d:91:8b:64:f9:be:8d:8e:61:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 15 19:23:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=defef690d3db6a62c1748fc697a52d4dda5f19b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:bc:ff:fd:02:2c:dd:63:77:a2:9e:8c:65:
be:82:eb:87:88:61:94:86:a3:ad:7b:7a:59:71:23:
59:86:9a:a7:94:8e:72:05:89:70:b9:f6:eb:cc:55:
e3:2e:91:70:a0:fc:6a:6c:07:5f:45:ef:48:bc:19:
c1:02:e8:d9:18:dd:63:60:68:d3:e1:23:21:1c:5e:
9a:c6:9a:dc:58:27:92:36:07:db:a8:47:a6:33:dc:
70:ca:8f:cf:ad:3e:f0:6e:bb:36:c8:fe:60:41:ab:
81:1e:db:7f:8a:95:14:d3:db:7d:bf:3e:4c:eb:98:
69:73:98:d2:ff:46:45:24:4e:fa:d7:c7:df:97:9e:
36:e9:c1:db:5b:97:7a:02:a5:b4:e3:38:6b:04:21:
26:41:90:ae:90:f9:5d:c5:30:6e:ba:10:b7:c6:2d:
6b:cf:b7:5f:58:2e:8a:b2:93:3d:f9:bb:09:6f:1f:
44:20:97:e8:e9:76:ec:c7:29:f7:0b:61:7c:95:86:
a5:67:aa:bd:23:4f:16:3f:8e:8f:c1:e6:d3:32:8c:
27:38:dd:2e:26:38:f4:42:3f:26:ad:90:6b:e0:03:
a6:a1:4e:bd:d5:21:dd:ca:82:7b:12:3e:07:8e:72:
cf:aa:22:da:81:f2:3e:52:82:ef:dd:30:9f:91:de:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FE:F6:90:D3:DB:6A:62:C1:74:8F:C6:97:A5:2D:4D:DA:5F:19:B6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3v72kNPbamLBdI_Gl6UtTdpfGbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.120.0/22
Signature Algorithm: sha256WithRSAEncryption
81:a8:87:62:85:fd:de:7b:e8:34:b5:92:9e:74:31:6f:9f:1b:
5e:f1:21:e9:91:89:ca:75:f0:fd:67:9e:d5:41:4e:d2:db:a2:
92:84:fb:58:71:37:45:3a:10:04:51:38:35:8f:ac:88:7f:aa:
8b:3a:69:33:2e:1f:ad:9d:06:d5:61:28:1e:47:0c:7f:22:7b:
b2:5a:27:3d:f8:48:52:5b:3a:a4:23:b4:58:4e:2b:1c:9f:67:
a4:57:aa:24:02:7c:bd:1e:5f:88:b1:bb:71:f0:5d:2a:50:1b:
8e:ea:c9:27:27:7d:ae:45:b3:46:4c:be:01:1b:2a:2b:3c:1c:
aa:49:d0:a1:3f:e1:cc:1a:ac:55:24:0f:80:4d:10:93:fd:12:
6d:63:ce:80:a0:7c:72:c4:e0:22:28:24:a2:c8:fa:96:ec:bc:
50:49:8b:68:b5:5d:3f:89:90:29:88:09:33:79:4e:45:d4:41:
10:9d:b9:86:4c:d1:fd:96:21:79:13:80:42:e0:0f:7d:ff:f5:
b6:21:da:e0:f8:48:85:0e:84:78:5a:be:d2:9c:e2:70:b6:f1:
ed:53:14:ec:9d:c0:d2:10:41:de:a4:35:68:57:56:3a:b2:3e:
ca:75:10:10:be:21:1c:e6:b8:43:ee:40:8c:e2:f5:af:b7:89:
c0:84:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 07:36:30 2024 by rpki-client on console-ams.rpki-client.org