Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7lU8bYaeqf5vOi4kNXz4e58_AMg.roa
File: 7lU8bYaeqf5vOi4kNXz4e58_AMg.roa (raw, json)
Hash identifier: U6ZgoeSalq394K+uxxHaC4pdLG5XAkWsnz/JxvfmhgQ=
Subject key identifier: EE:55:3C:6D:86:9E:A9:FE:6F:3A:2E:24:35:7C:F8:7B:9F:3F:00:C8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191561CE4D40F81B3470C974A7D9E8F5F8F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7lU8bYaeqf5vOi4kNXz4e58_AMg.roa
Signing time: Thu 15 Aug 2024 12:56:59 +0000
ROA not before: Thu 15 Aug 2024 12:56:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 14:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:1c:e4:d4:0f:81:b3:47:0c:97:4a:7d:9e:8f:5f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 15 12:56:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee553c6d869ea9fe6f3a2e24357cf87b9f3f00c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:cd:b3:aa:52:88:ce:b3:9b:9b:1a:93:8b:
bb:5b:e3:47:39:68:c2:cc:b2:7c:5e:72:54:ab:09:
c9:fc:4b:69:69:6b:aa:a0:8c:f8:a5:60:f2:c2:a2:
c7:08:ae:e5:39:0f:60:e2:c7:8d:b4:3f:9f:0d:e0:
98:e4:6c:7d:ac:8c:f1:4c:45:7c:1c:20:91:32:cf:
fe:1b:12:bd:a2:3a:2c:cc:e3:74:28:cb:87:5b:46:
af:28:43:2c:25:61:65:08:63:18:96:55:d2:4d:92:
07:d2:8b:24:4e:c7:88:9e:da:b7:a8:4b:40:b6:08:
a5:8d:b0:f6:4f:c0:73:30:a5:f8:f9:4f:58:67:ce:
ad:ca:3e:7a:44:c5:42:90:d4:c3:49:75:2e:9c:ae:
b2:dd:a1:f5:aa:2e:e6:51:2b:28:ad:2d:28:81:b9:
b5:1e:c2:4c:45:29:12:6e:20:7b:8a:dc:72:a5:10:
a7:28:d4:3c:c4:05:ba:cd:30:e9:2d:99:fd:75:04:
83:5b:8f:b1:23:1a:e9:68:79:b1:82:63:66:dd:36:
b6:37:ff:ee:6e:9b:e1:dd:47:f6:7c:10:00:1e:0c:
6a:0b:94:0d:60:1e:cd:71:a9:6d:5f:16:13:9b:0a:
7a:db:f3:cc:12:38:fe:09:b9:5a:7b:4c:7f:1d:c5:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:55:3C:6D:86:9E:A9:FE:6F:3A:2E:24:35:7C:F8:7B:9F:3F:00:C8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7lU8bYaeqf5vOi4kNXz4e58_AMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.63.0-31.56.64.255
31.56.69.0/24
31.56.72.0/24
Signature Algorithm: sha256WithRSAEncryption
16:93:93:0e:90:06:39:0c:34:37:d2:c0:c6:f9:e0:4a:0d:35:
15:c8:b1:c2:5c:da:2a:e3:e7:d7:0a:82:46:c8:e4:90:18:1f:
4c:8e:f8:97:76:e7:d4:90:e4:25:da:62:8e:15:9c:16:d3:a0:
5c:05:85:9b:a6:a5:29:cc:1c:65:9c:63:17:36:43:74:ae:be:
8f:d9:a9:7a:6f:09:34:54:10:2e:2d:8c:cc:71:50:02:56:b7:
e9:01:27:b8:2c:16:01:37:f4:a7:17:d4:89:e4:f3:25:cf:07:
e4:a5:a4:dc:d8:fa:ab:e0:73:d4:cf:eb:f4:e3:d2:70:49:4f:
8f:0c:e2:f2:b2:51:2f:8b:0b:22:97:bd:ea:8e:28:65:be:90:
77:4e:66:27:de:df:9f:f9:bd:d8:50:d7:e9:61:d8:2a:e5:95:
d7:04:fc:18:a7:06:87:a7:b2:19:00:09:d7:66:56:fa:33:c3:
3e:2b:41:be:09:61:71:18:10:52:82:5d:59:cd:60:ef:d5:61:
e9:9f:3e:51:ce:d4:07:a5:f8:98:9b:9b:a2:13:3d:23:43:93:
ab:3e:9b:6e:0b:03:d8:bc:71:22:b0:6c:e6:80:fa:e7:1f:ed:
38:c4:c5:f9:be:40:f1:00:d1:bb:9c:53:4d:39:47:18:23:04:
86:83:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 17:39:36 2024 by rpki-client on console-ams.rpki-client.org