Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8KrMUNuYHtCgU0-Qne9U9fHGqe8.roa
File: 8KrMUNuYHtCgU0-Qne9U9fHGqe8.roa (raw, json)
Hash identifier: 4ANxhGDD1jgeJLtgvDRU7LxdTDPwKc8nAWK2jUbsFLM=
Subject key identifier: F0:AA:CC:50:DB:98:1E:D0:A0:53:4F:90:9D:EF:54:F5:F1:C6:A9:EF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019203CB5087B5D866629618FF64F82AD57C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8KrMUNuYHtCgU0-Qne9U9fHGqe8.roa
Signing time: Wed 18 Sep 2024 06:21:49 +0000
ROA not before: Wed 18 Sep 2024 06:21:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.45.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 09:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:03:cb:50:87:b5:d8:66:62:96:18:ff:64:f8:2a:d5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 18 06:21:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0aacc50db981ed0a0534f909def54f5f1c6a9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:b7:f9:d7:c3:58:eb:37:43:a8:bb:96:9d:
ab:9f:bd:b1:26:4d:6c:3d:7b:1e:e6:41:96:0c:31:
3c:32:8f:c8:99:0a:cb:a6:ca:1f:f5:8a:8c:c8:8d:
52:6e:06:e7:e9:33:78:d9:84:9a:16:91:47:d0:c3:
e6:39:5e:07:31:f0:21:de:7d:2a:b2:d4:5a:9e:c8:
fb:42:2c:ae:8c:3d:fd:3c:a8:5c:f3:aa:6d:8f:46:
7b:08:1d:99:c9:0e:0a:ea:c5:e9:ab:cb:7f:47:95:
01:91:b2:99:cc:85:56:af:09:c6:89:0f:87:fc:a5:
2c:1e:75:2d:95:40:78:e3:26:4d:b8:50:79:e7:67:
77:47:c1:6e:aa:ef:bb:65:f5:5a:30:dc:09:c7:91:
43:12:02:d0:b6:da:8a:7d:17:24:e9:46:20:54:43:
6c:a1:dc:26:3b:02:1d:d6:46:eb:92:7f:48:a6:57:
4d:f7:6f:05:e9:86:d2:d1:82:ce:13:6e:8b:c7:ae:
79:e4:4c:e1:02:31:f8:99:4f:4d:4a:64:c1:8d:d6:
b3:04:27:38:a1:81:b0:fc:5c:b2:5e:5c:32:cc:d3:
ec:56:c0:7d:df:36:70:97:18:52:ec:cc:82:b0:7a:
e5:21:42:16:9f:04:1d:7f:60:0c:04:ed:f5:e7:f5:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AA:CC:50:DB:98:1E:D0:A0:53:4F:90:9D:EF:54:F5:F1:C6:A9:EF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8KrMUNuYHtCgU0-Qne9U9fHGqe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.45.0/24
31.56.59.0/24
31.56.63.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.89.0/24
31.56.112.0/21
31.56.126.0/24
31.56.147.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fb:f5:5b:68:64:fc:3e:07:1a:42:13:05:7c:e8:7d:fc:6c:
d8:16:2f:10:50:3d:f0:1b:07:44:c1:42:a4:70:8d:df:ad:2e:
89:54:b6:5e:35:b4:40:51:9c:be:8d:ff:ac:f7:6b:36:d4:b7:
5e:9c:aa:f6:e3:66:7f:11:f0:82:72:01:f8:33:a7:72:8c:e1:
f5:43:4d:5a:3e:b6:2d:75:44:c5:07:05:69:78:85:9e:bb:18:
5c:63:9b:93:0a:b9:07:d6:fd:95:d6:4c:56:5a:dd:ad:dd:dd:
be:15:cf:be:bb:6e:26:dc:71:a3:dd:23:01:b6:42:c5:c3:eb:
69:80:b1:08:d0:7f:0e:3b:52:4f:b1:14:e6:d4:ac:42:25:1c:
fc:18:d9:fe:62:53:4c:da:68:b3:25:a6:74:4e:f4:57:e3:c1:
2d:aa:27:66:65:c8:b8:d9:70:c7:12:38:af:ad:c1:80:77:24:
1c:89:15:6c:43:21:3c:aa:b6:ba:c9:13:04:90:a9:2d:57:8d:
9d:7c:2b:1b:d5:4e:7c:a6:47:fd:77:82:9d:3f:11:26:25:af:
e9:53:d4:cb:45:91:e5:8b:cb:b5:cf:34:f1:5d:b8:32:87:16:
50:70:19:2f:5b:c1:90:da:98:6e:ba:92:58:75:6c:39:ae:c3:
17:7f:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 10:53:28 2024 by rpki-client on console-fra.rpki-client.org