Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9CEAncIIBAY7ix4cPD1xe3iNCJc.roa
File: 9CEAncIIBAY7ix4cPD1xe3iNCJc.roa (raw, json)
Hash identifier: G/c1YkxLpBoWiyX5hwj+cn8RzFqjlAPFzdd1X/tA4rw=
Subject key identifier: F4:21:00:9D:C2:08:04:06:3B:8B:1E:1C:3C:3D:71:7B:78:8D:08:97
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019120B73A8B9647B844E24B54608C2D7221
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9CEAncIIBAY7ix4cPD1xe3iNCJc.roa
Signing time: Mon 05 Aug 2024 04:06:04 +0000
ROA not before: Mon 05 Aug 2024 04:06:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 31.56.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 18:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:20:b7:3a:8b:96:47:b8:44:e2:4b:54:60:8c:2d:72:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 5 04:06:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f421009dc20804063b8b1e1c3c3d717b788d0897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:5a:84:22:e3:af:7b:cd:77:21:b6:73:5f:
b5:e5:06:01:e2:d7:54:a0:66:33:cf:e2:86:5c:62:
ff:30:1a:2c:df:5c:b5:6e:18:4e:b9:30:f9:b1:5f:
97:b9:45:17:c1:45:17:8d:03:98:3e:87:dc:b8:e3:
dc:86:94:89:75:4d:97:ef:41:2f:a5:f1:1f:d5:53:
10:65:16:d3:8d:29:65:b6:da:90:e9:be:63:1e:5b:
05:86:ce:e1:8c:6e:e2:1d:98:cf:8c:f4:e7:66:32:
bd:e0:dd:29:85:27:be:4d:ca:c7:2d:a5:7c:24:81:
e4:18:2c:37:47:5c:5e:3c:e5:a8:9b:3a:2c:36:dd:
bd:25:77:8c:0a:5d:0c:76:0d:ee:b2:c5:d3:37:f1:
2d:d4:7c:f0:11:ed:ef:79:b9:b8:96:c6:04:31:3c:
b7:c6:72:f7:a6:68:2d:d7:8f:06:aa:56:ad:19:a9:
28:e6:a2:55:9c:ed:ea:af:ef:db:b1:6f:6e:14:86:
5f:a3:00:4a:4f:bc:6a:f3:aa:cd:bc:1e:46:f6:5f:
08:d6:ea:55:32:1d:12:fe:8e:67:9f:ae:ed:83:e1:
31:5e:a2:6b:4b:40:92:c3:48:41:26:b5:65:29:30:
23:f8:59:91:54:69:d1:59:98:5c:ee:24:95:e4:2a:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:21:00:9D:C2:08:04:06:3B:8B:1E:1C:3C:3D:71:7B:78:8D:08:97
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9CEAncIIBAY7ix4cPD1xe3iNCJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.39.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1b:78:a0:4d:24:bd:9c:b1:51:fc:90:b7:74:fc:fa:91:d7:
30:20:3e:80:9e:11:d9:1e:22:bb:74:dc:91:2c:a0:d4:2b:5a:
02:67:8f:9f:b7:e1:75:50:54:5a:e9:6a:db:54:74:90:b3:46:
af:7e:4d:34:d9:68:a8:59:ef:89:9c:0d:6d:b3:1a:0e:e4:a5:
63:d4:43:12:6f:28:dd:59:8a:9d:dc:3e:5a:61:bb:75:8e:7b:
32:2d:bc:ef:e8:72:5b:35:dc:e3:36:0c:b6:66:7b:57:34:1c:
c9:9a:1a:66:b2:99:80:47:cd:9b:03:04:94:18:8a:87:f1:24:
7c:4f:d5:73:5b:ff:8c:14:12:a7:83:7d:57:87:a6:82:db:38:
3e:74:52:57:67:b2:25:bd:cf:c7:42:cb:8d:e0:76:48:f4:cf:
5e:9c:e6:fb:13:6d:04:3a:12:25:42:20:b2:f1:48:c8:d5:98:
2a:6a:45:eb:c7:c1:3f:57:b8:de:f0:33:87:e8:97:90:28:96:
86:bc:6a:f6:51:3e:35:f6:32:44:68:c9:09:09:0a:c6:7c:a5:
17:1a:5b:d3:d5:59:03:57:f0:82:89:a0:f4:69:5f:9d:2e:50:
aa:d5:51:ab:79:d9:c5:01:ae:8b:45:72:f7:3d:c2:98:b2:c1:
f3:15:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 20:45:21 2024 by rpki-client on console-fra.rpki-client.org