Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/57q3NYZtcvYkzjo9P7adOsys8aw.roa
File: 57q3NYZtcvYkzjo9P7adOsys8aw.roa (raw, json)
Hash identifier: 0VE0CivkxWFypaalVQsmXSbjcL8Lqxo5afwHlF5YMQM=
Subject key identifier: E7:BA:B7:35:86:6D:72:F6:24:CE:3A:3D:3F:B6:9D:3A:CC:AC:F1:AC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019123A24DE9210939B1D04E0B55C8DA0120
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/57q3NYZtcvYkzjo9P7adOsys8aw.roa
Signing time: Mon 05 Aug 2024 17:42:04 +0000
ROA not before: Mon 05 Aug 2024 17:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 31.56.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 10:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:a2:4d:e9:21:09:39:b1:d0:4e:0b:55:c8:da:01:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 5 17:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7bab735866d72f624ce3a3d3fb69d3accacf1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:1f:be:7c:e3:f7:93:39:17:83:33:ad:b3:
ff:30:55:7e:17:e6:35:b4:3e:d1:88:76:62:b6:3d:
a7:7f:8f:e3:22:db:0f:d7:22:96:93:80:cb:0d:f2:
41:0f:a0:60:97:9d:5a:63:06:f1:6f:2d:5e:50:1a:
7c:ec:7a:24:fd:99:66:4a:04:01:41:52:80:94:11:
51:07:4d:cb:26:9c:62:af:21:22:82:ea:ab:76:0a:
92:fa:e5:25:9f:61:14:00:6b:cb:e6:f4:fb:ac:66:
c9:17:0d:98:e1:7b:0b:1f:7c:09:ed:cc:ad:a3:bd:
75:e2:fa:5c:60:cd:20:3d:57:19:7a:70:d7:86:70:
c2:f5:fd:2a:aa:1c:43:8b:d9:94:e7:75:5d:79:fa:
9e:4f:81:60:1e:55:3e:28:17:1c:ae:2e:0a:43:59:
0f:01:7c:74:54:34:4f:76:cf:a1:5b:eb:40:cc:9f:
4f:c1:c0:3f:dc:68:78:d4:5a:88:15:dc:5e:5b:e7:
c2:92:03:0c:63:e8:db:b7:b0:1a:69:40:fc:62:c2:
5b:e2:a5:a7:b3:30:56:a1:5f:2d:a2:06:5e:87:4a:
01:21:75:f5:3d:df:b5:76:a8:a6:1d:5a:8d:90:7f:
6d:0f:26:9a:79:29:b1:7f:c0:04:56:ad:3d:66:da:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BA:B7:35:86:6D:72:F6:24:CE:3A:3D:3F:B6:9D:3A:CC:AC:F1:AC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/57q3NYZtcvYkzjo9P7adOsys8aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.37.0/24
Signature Algorithm: sha256WithRSAEncryption
63:04:77:e4:1f:65:9d:14:08:e8:1a:93:0b:db:36:43:35:0d:
7e:b9:97:34:1e:0e:28:c0:6c:88:64:fc:ac:99:a5:5a:3b:cc:
14:89:7e:41:95:ce:c8:7d:df:d1:ce:91:69:b2:62:b5:44:1f:
19:42:d9:9b:2f:92:d0:db:d1:6d:66:e6:f3:ab:de:0c:a1:6e:
8c:fa:47:3e:8d:f5:f6:ee:00:77:7c:0c:be:45:9d:cf:8c:bd:
5c:1e:51:9d:5f:12:08:7e:a2:d3:0b:8b:81:11:da:4a:c0:5e:
41:61:91:c0:23:bd:34:eb:1a:b9:af:b1:f6:0e:82:ec:55:55:
73:37:93:c8:11:d9:22:85:11:6a:80:b2:b9:47:29:96:59:c5:
99:44:19:c2:57:66:93:10:8f:30:61:35:60:b6:2e:de:ba:16:
b9:f7:9c:95:a9:26:48:59:01:a5:01:9f:42:dc:14:89:11:80:
c5:2a:25:bf:9d:7a:a8:9e:e0:a9:a7:f4:03:bb:6e:bc:43:5c:
54:74:07:06:28:35:44:1d:91:09:ce:94:eb:ef:4c:49:4d:ee:
5c:d7:83:a9:c7:81:ce:81:6d:4b:f3:29:f9:1d:ff:07:d2:00:
78:39:db:b5:fa:c1:08:d5:61:fd:4e:12:7e:90:9d:6d:2d:3c:
9f:a8:77:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 13:39:37 2024 by rpki-client on console-fra.rpki-client.org