Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/48jt6oQKGSu_O_6W0NYvQQ82qMQ.roa
File: 48jt6oQKGSu_O_6W0NYvQQ82qMQ.roa (raw, json)
Hash identifier: tyGxm66qRG/GIyaaNzJFbvYJxghSHXT5j9NNGZv36gs=
Subject key identifier: E3:C8:ED:EA:84:0A:19:2B:BF:3B:FE:96:D0:D6:2F:41:0F:36:A8:C4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01910904F2CB49CEE1C8F2F88F2E9A5E654A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/48jt6oQKGSu_O_6W0NYvQQ82qMQ.roa
Signing time: Wed 31 Jul 2024 13:40:04 +0000
ROA not before: Wed 31 Jul 2024 13:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 13:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:09:04:f2:cb:49:ce:e1:c8:f2:f8:8f:2e:9a:5e:65:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 31 13:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3c8edea840a192bbf3bfe96d0d62f410f36a8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:7e:ed:17:78:00:4d:92:61:d5:95:99:c8:
72:0d:d3:f5:d7:86:30:13:4b:4e:24:4d:2f:41:d2:
f2:bd:60:7a:71:90:ca:dc:6a:1e:52:ef:53:4f:a9:
cf:df:55:22:34:39:80:3d:50:8d:db:6a:c8:45:80:
5a:5a:2c:77:7b:97:ca:af:e4:33:22:d2:e0:90:a7:
ad:61:35:94:f2:f5:67:e4:38:ba:f7:d7:55:b6:bf:
5b:bd:de:4c:d9:94:5f:0a:be:2d:d1:58:d8:ab:51:
cb:3f:d1:d5:92:2e:2e:08:91:ad:6b:24:dc:34:02:
97:00:ab:8f:48:1a:72:57:1e:6d:ae:19:cb:d3:eb:
f0:98:cd:b1:cd:0d:0e:7e:c9:89:03:0f:96:f0:82:
29:16:ed:c5:ee:27:18:29:8a:68:36:50:48:c0:53:
81:8d:41:dc:cd:1c:2a:49:ff:c4:6f:20:87:0a:ac:
ea:65:f2:96:18:c8:b1:f0:08:43:6c:54:dc:65:d6:
bc:ef:dc:cc:e4:67:4a:d5:6e:9a:ec:36:8d:17:f7:
d7:2d:89:b4:fe:e3:9c:86:39:7c:b6:58:36:e9:87:
f3:b1:f2:02:1f:f4:17:4f:1a:a6:92:86:4a:74:87:
55:5d:43:fd:b8:90:a4:6b:fd:df:2a:a8:71:63:ff:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C8:ED:EA:84:0A:19:2B:BF:3B:FE:96:D0:D6:2F:41:0F:36:A8:C4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/48jt6oQKGSu_O_6W0NYvQQ82qMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0-31.56.2.255
31.56.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:7a:70:c2:54:98:0f:be:95:ac:6d:7c:cc:ba:db:6a:97:b3:
71:d3:4a:dd:c0:a6:5e:28:c6:8c:b6:2f:1d:38:ca:b7:64:5e:
a8:53:21:84:45:b8:33:b6:9e:32:25:66:48:5a:38:46:7d:ea:
d2:41:ce:c3:bf:b0:27:79:ce:60:ac:c7:ac:01:82:0d:a3:fb:
dd:54:a9:dd:f0:97:78:00:05:99:32:de:4e:8b:7e:77:7a:4f:
d5:4c:ba:07:7f:b9:e3:30:bd:81:f1:85:39:5e:15:a5:81:32:
f4:a9:b5:86:72:08:27:95:b2:c1:94:9c:b4:a7:ee:53:af:b8:
80:32:00:b4:71:44:77:9d:1c:f1:83:0b:e8:b2:01:77:a9:6e:
0b:37:2e:68:24:e9:cd:29:e9:5b:c1:21:79:3d:00:25:7e:1d:
aa:3c:7c:46:fa:91:c2:b0:70:66:d1:04:81:f4:13:bc:8c:5f:
35:d8:de:2b:e2:46:0c:e0:7d:2e:ad:36:f5:84:65:d9:39:29:
28:fc:bd:f6:07:c5:81:b8:25:dc:cd:1e:e6:08:7c:13:7b:e7:
79:5a:4e:19:92:e2:b0:fa:b6:94:d2:50:32:61:92:9f:a7:90:
ae:86:ae:b7:73:a7:6a:43:2c:de:09:80:d1:88:1a:76:07:38:
60:1e:ef:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 2 17:51:18 2024 by rpki-client on console-ams.rpki-client.org