Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/748x0NP8hzP0BX1K2Vh7l6NpS4s.roa
File: 748x0NP8hzP0BX1K2Vh7l6NpS4s.roa (raw, json)
Hash identifier: 5iWakvMkeWrDkoravi5RTzxlWzOW+KmCh7mwfA8M+0k=
Subject key identifier: EF:8F:31:D0:D3:FC:87:33:F4:05:7D:4A:D9:58:7B:97:A3:69:4B:8B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191BB8D435AAEED80E23E54FED8091905D9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/748x0NP8hzP0BX1K2Vh7l6NpS4s.roa
Signing time: Wed 04 Sep 2024 05:41:22 +0000
ROA not before: Wed 04 Sep 2024 05:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 31.56.160.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 05:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:8d:43:5a:ae:ed:80:e2:3e:54:fe:d8:09:19:05:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 4 05:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef8f31d0d3fc8733f4057d4ad9587b97a3694b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f1:70:04:71:4d:70:88:2f:c2:94:fc:b4:e3:
c7:1f:4f:b1:34:96:e4:69:51:74:3b:3f:b8:ea:71:
0d:37:19:13:6a:e1:b2:26:03:bc:d3:2a:41:34:ea:
83:d5:2f:9c:35:e5:b9:6c:81:2a:86:87:61:91:ae:
2d:11:92:5d:1b:22:66:d7:43:3f:16:82:21:07:f8:
58:05:25:f8:0e:91:eb:f6:6c:42:d2:d5:4c:e6:5f:
7d:65:cd:17:5a:c4:92:03:c6:af:dd:60:ea:24:c5:
af:78:57:7c:06:07:5b:45:97:16:98:60:92:06:ef:
ec:89:96:e2:59:c9:aa:2a:4b:40:27:31:14:a3:5d:
e7:77:da:34:6a:e0:40:32:47:5d:6f:94:a1:87:72:
ff:a6:57:cf:1c:1f:c8:c3:d0:a8:74:e3:87:f3:4e:
d7:4a:63:8f:c4:be:c8:d3:57:7e:67:81:07:69:dc:
62:12:c0:96:09:a9:54:39:d5:28:71:5d:7c:4b:eb:
bc:75:1f:14:24:ff:bb:5a:06:17:ee:c1:a2:43:e0:
20:4c:67:11:5d:6c:84:71:42:e0:fd:b2:96:70:89:
0e:70:ad:25:49:a8:73:be:6b:ee:ca:71:54:14:34:
38:15:18:9b:87:74:3f:a6:24:4c:6c:bb:84:eb:98:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8F:31:D0:D3:FC:87:33:F4:05:7D:4A:D9:58:7B:97:A3:69:4B:8B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/748x0NP8hzP0BX1K2Vh7l6NpS4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.160.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:e9:68:f4:67:72:2c:f1:e3:c2:4d:72:e4:f1:66:69:48:c5:
28:00:ac:cc:4f:04:dc:57:74:75:6a:a7:1c:18:55:f4:6b:47:
95:fa:54:6a:0d:78:dc:db:4f:f4:43:a6:00:78:8c:a9:26:58:
c2:06:c3:a5:62:b5:ae:35:68:61:89:01:12:80:a8:93:64:fa:
b2:00:4e:6c:c4:1d:53:ba:4e:6b:9f:5a:2b:b0:92:1a:78:e4:
d5:4b:b0:fc:5e:53:35:32:fc:ba:bf:b2:c3:fe:8f:fb:6a:7d:
d8:48:de:3a:1d:48:9f:af:93:59:ac:11:c0:f3:88:35:60:2c:
6b:2d:aa:cf:4a:4c:10:d8:2c:40:a0:59:20:73:81:a4:c2:cd:
d5:2f:14:c9:63:5e:53:72:d9:0f:4f:8a:ce:25:a5:f7:b1:5b:
90:7c:08:dd:c5:7f:fd:d8:39:df:5d:09:ee:43:82:d1:24:bd:
af:91:f5:91:bb:ab:aa:e3:da:61:19:0c:24:89:16:73:f4:79:
ca:54:b4:10:78:45:a2:b0:48:43:0d:ec:ce:c7:f5:aa:4e:51:
d1:54:9d:17:7e:b8:e8:44:96:b8:42:92:0c:16:d7:a5:65:13:
b3:e7:b3:58:e8:c6:e3:38:ab:12:d4:ad:f6:7d:22:9a:70:a8:
1d:7d:b2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:06 2024 by rpki-client on console-ams.rpki-client.org