Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4YDAiovIjNtTmv2iqsTwHOLkeas.roa
File: 4YDAiovIjNtTmv2iqsTwHOLkeas.roa (raw, json)
Hash identifier: VFNEAdcigmBbnyQd3mDWbhhmjZ1lbl5eMiEu+qj3sBU=
Subject key identifier: E1:80:C0:8A:8B:C8:8C:DB:53:9A:FD:A2:AA:C4:F0:1C:E2:E4:79:AB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019209A9B13C36283B882C2FBCC105EE88E9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4YDAiovIjNtTmv2iqsTwHOLkeas.roa
Signing time: Thu 19 Sep 2024 09:42:48 +0000
ROA not before: Thu 19 Sep 2024 09:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.45.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 04:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:09:a9:b1:3c:36:28:3b:88:2c:2f:bc:c1:05:ee:88:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 19 09:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e180c08a8bc88cdb539afda2aac4f01ce2e479ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e9:c4:3f:15:a1:5a:4e:ac:4f:f3:12:12:ca:
76:3d:44:db:01:48:ac:95:ba:3b:e7:f1:51:7d:ef:
e4:be:d2:6d:e8:3c:26:4d:b0:89:0d:1e:25:7f:d4:
9f:d7:74:e9:ae:02:32:ac:6a:1e:f9:a1:2b:45:70:
8d:6c:aa:ee:87:7f:d6:45:21:cd:8f:39:b7:d4:08:
05:81:45:9b:67:fd:8c:1a:0e:89:ac:51:fe:6c:8f:
67:9c:c8:f0:6c:b4:5e:1c:bc:3a:3d:80:f2:f2:9f:
6b:73:d0:6e:94:9f:61:5d:d9:78:b5:2e:dc:49:7b:
63:a3:3e:f5:b6:d8:3b:95:08:47:aa:a2:dd:f5:21:
25:8a:90:c4:1a:e3:7f:a1:4d:d8:b6:10:97:47:68:
53:b9:49:81:54:65:8a:17:0d:4e:95:ac:7e:5c:3a:
eb:21:2a:22:10:c7:17:66:7a:b7:8b:5d:5c:24:dd:
b7:92:21:29:3b:74:1f:e1:f0:f5:c6:c9:90:9f:30:
39:b5:72:69:de:74:1c:15:6d:76:46:c1:58:51:91:
59:ae:15:a0:81:db:fe:14:f4:99:7b:70:8d:4d:ac:
f4:a2:8f:f3:c7:27:37:f3:51:85:ca:a8:0b:91:f2:
4c:0b:21:eb:89:03:39:61:58:28:17:ef:c9:9f:3b:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:80:C0:8A:8B:C8:8C:DB:53:9A:FD:A2:AA:C4:F0:1C:E2:E4:79:AB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4YDAiovIjNtTmv2iqsTwHOLkeas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.45.0/24
31.56.59.0/24
31.56.63.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.89.0/24
31.56.112.0/21
31.56.126.0/24
31.56.147.0/24
31.57.0.0-31.57.9.255
Signature Algorithm: sha256WithRSAEncryption
bc:09:37:28:44:7e:68:a9:a4:ef:63:9b:aa:76:c1:cd:ff:2e:
a4:c4:93:ce:31:e6:f8:df:f0:ea:7f:cc:20:f6:38:58:e0:0e:
f2:b7:1d:c2:7b:ea:3d:4a:a2:5a:55:8c:80:dd:62:c6:9b:1d:
5c:51:e2:ac:e3:4c:79:12:17:79:27:41:91:24:8b:cc:d1:5f:
d6:2a:aa:e2:ed:6a:2f:b1:fe:f7:29:45:7c:65:76:fb:b7:c6:
5f:e8:20:37:16:11:42:f3:9f:29:af:77:58:a7:75:9c:16:d3:
48:11:4b:a4:ae:82:75:c6:b0:5d:3e:fe:40:ee:35:ee:29:62:
4c:fe:07:a8:36:9e:0b:2a:a1:77:45:85:07:fd:c3:20:4b:29:
0e:9a:85:72:9c:a1:bd:bf:e9:81:7d:bb:05:a8:18:e2:a9:19:
5b:ea:1d:ed:a7:6e:1a:d2:a1:cc:5a:2b:81:41:d2:01:8e:ca:
13:78:ad:49:4f:96:1b:f2:23:d1:e5:54:90:7d:0f:6e:33:2e:
c9:30:b5:93:42:c3:0e:c6:05:ba:89:a8:01:0a:68:89:0a:9f:
58:14:ff:6b:f6:05:2a:bd:24:29:aa:a1:71:a9:5a:4e:c8:4e:
07:cd:f6:f2:b9:d0:e5:76:4d:85:16:6a:d3:62:2d:25:95:98:
11:a9:be:33
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgISAZIJqbE8Nig7iCwvvMEF7ojpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTE5MDk0MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTgwYzA4YThiYzg4Y2RiNTM5YWZkYTJhYWM0ZjAxY2UyZTQ3OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+nEPxWhWk6sT/MSEsp2PUTbAUis
lbo75/FRfe/kvtJt6DwmTbCJDR4lf9Sf13TprgIyrGoe+aErRXCNbKruh3/WRSHN
jzm31AgFgUWbZ/2MGg6JrFH+bI9nnMjwbLReHLw6PYDy8p9rc9BulJ9hXdl4tS7c
SXtjoz71ttg7lQhHqqLd9SElipDEGuN/oU3YthCXR2hTuUmBVGWKFw1Olax+XDrr
ISoiEMcXZnq3i11cJN23kiEpO3Qf4fD1xsmQnzA5tXJp3nQcFW12RsFYUZFZrhWg
gdv+FPSZe3CNTaz0oo/zxyc381GFyqgLkfJMCyHriQM5YVgoF+/JnzsqSwIDAQAB
o4ICWDCCAlQwHQYDVR0OBBYEFOGAwIqLyIzbU5r9oqrE8Bzi5HmrMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNFlEQWlvdklqTnRUbXYyaXFzVHdIT0xrZWFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAATBVAwQBHzgEAwQA
HzgnAwQAHzgtAwQAHzg7AwQAHzg/AwQAHzhDAwQAHzhFAwQAHzhIAwQAHzhZAwQD
HzhwAwQAHzh+AwQAHziTMAsDAwAfOQMEAR85CDANBgkqhkiG9w0BAQsFAAOCAQEA
vAk3KER+aKmk72ObqnbBzf8upMSTzjHm+N/w6n/MIPY4WOAO8rcdwnvqPUqiWlWM
gN1ixpsdXFHirONMeRIXeSdBkSSLzNFf1iqq4u1qL7H+9ylFfGV2+7fGX+ggNxYR
QvOfKa93WKd1nBbTSBFLpK6CdcawXT7+QO417iliTP4HqDaeCyqhd0WFB/3DIEsp
DpqFcpyhvb/pgX27BagY4qkZW+od7aduGtKhzForgUHSAY7KE3itSU+WG/Ij0eVU
kH0PbjMuyTC1k0LDDsYFuomoAQpoiQqfWBT/a/YFKr0kKaqhcalaTshOB8328rnQ
5XZNhRZq02ItJZWYEam+Mw==
Generated at Sun Sep 29 05:46:52 2024 by rpki-client on console-fra.rpki-client.org