Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4ZzapoS6uogdkqUSmOqt5NfkqzA.roa
File: 4ZzapoS6uogdkqUSmOqt5NfkqzA.roa (raw, json)
Hash identifier: qnf9DFd7kpgwwUNqbLcqCwTnvQsRj9JMyBU6dhoboik=
Subject key identifier: E1:9C:DA:A6:84:BA:BA:88:1D:92:A5:12:98:EA:AD:E4:D7:E4:AB:30
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191AD508C3595191387F475539CD11C341F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4ZzapoS6uogdkqUSmOqt5NfkqzA.roa
Signing time: Sun 01 Sep 2024 11:20:22 +0000
ROA not before: Sun 01 Sep 2024 11:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215362
IP address blocks: 31.56.35.0/24 maxlen: 24
31.56.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 09:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ad:50:8c:35:95:19:13:87:f4:75:53:9c:d1:1c:34:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 1 11:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e19cdaa684baba881d92a51298eaade4d7e4ab30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:37:c9:c9:e4:72:94:ef:04:fe:63:75:66:
31:84:1f:9e:20:6d:08:51:6b:67:6d:39:29:03:66:
75:62:8c:f5:ca:e3:9f:31:34:d0:8a:f3:f9:95:ab:
f9:af:8b:85:c2:7d:b7:4c:c2:c8:11:fc:24:5c:a0:
6f:c9:cd:ab:95:b8:5b:8c:3d:b4:29:bd:a0:97:e0:
75:5d:2e:7f:2f:ca:9f:ee:fd:b6:ff:e3:14:ed:63:
79:85:99:5f:ed:9b:ae:5f:88:61:0d:af:fd:17:c1:
d4:47:50:6b:a6:a6:55:b7:c7:9e:b7:88:7b:dc:f6:
21:e5:e3:45:85:00:f4:51:c4:28:dc:7a:bd:c2:36:
99:48:bc:fb:fc:30:94:24:85:c3:3c:c9:d3:be:ab:
6a:c7:2f:40:8a:c5:91:0a:0b:75:f9:b5:54:b7:85:
a9:50:2d:15:b1:5c:33:4c:b7:57:57:7a:c5:55:83:
ff:7a:24:df:60:83:ec:db:e3:7f:db:28:e3:b5:07:
94:e8:d1:f0:4f:19:47:ba:f2:f7:7e:a9:d1:b9:8b:
2d:83:0c:2a:97:7b:de:08:fc:02:4b:96:cc:7b:5e:
8f:00:f5:14:04:22:e2:02:af:7d:52:48:2e:01:7d:
19:99:c5:d7:9b:6c:b6:86:89:04:d1:56:fb:6a:12:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9C:DA:A6:84:BA:BA:88:1D:92:A5:12:98:EA:AD:E4:D7:E4:AB:30
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4ZzapoS6uogdkqUSmOqt5NfkqzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.35.0/24
31.56.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:18:e3:b4:c9:b0:d4:86:b8:b6:cf:5d:c2:f6:02:8e:21:6f:
5c:37:0e:b6:88:3f:d8:30:eb:54:5c:5c:57:8c:e2:e1:d8:a8:
9f:8f:7f:7c:d0:c9:6a:39:29:e8:f1:9d:47:fe:d9:0e:40:f2:
19:47:d8:14:ae:bd:9a:ac:3c:09:88:f3:9d:24:31:dd:3d:16:
fc:21:f3:70:e0:51:38:7e:a7:55:31:22:c4:61:5f:60:c9:04:
2f:1b:e1:b9:01:d9:64:0a:ab:16:e1:12:97:4b:ec:e2:8e:e6:
88:0e:9a:21:a4:11:c3:2c:b2:47:37:bd:3d:8b:f1:87:cc:31:
75:37:de:4b:4e:78:e6:c0:02:25:27:f8:4b:c4:23:8a:00:4d:
15:7d:c6:21:51:94:bd:da:ff:2b:b7:58:de:87:e3:aa:82:77:
cc:97:e5:69:91:25:53:95:93:0d:dd:f3:00:d0:c3:d0:78:ba:
ba:07:b0:78:d9:7b:91:e6:01:fe:e2:1a:f5:e5:97:4c:5d:8a:
4d:1b:c2:e1:19:82:dd:49:a6:22:96:ed:eb:b2:08:4d:cc:60:
45:5c:3d:34:c8:55:50:f3:e4:6f:ae:cf:f0:fb:68:f2:ee:a4:
ca:f2:11:3a:fa:3e:90:de:35:6a:ec:a8:e2:73:61:2b:51:ff:
98:43:fa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 12:42:42 2024 by rpki-client on console-ams.rpki-client.org