Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9p1pdcg5IVhjGkzm6TFAXXi3b_A.roa
File: 9p1pdcg5IVhjGkzm6TFAXXi3b_A.roa (raw, json)
Hash identifier: pc0Hfku7H5cuMUOsRp9mryIICdIuGmh4l6U+m9wyn24=
Subject key identifier: F6:9D:69:75:C8:39:21:58:63:1A:4C:E6:E9:31:40:5D:78:B7:6F:F0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01932F833C2B6BC2BAFAAF3C09322BC65210
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9p1pdcg5IVhjGkzm6TFAXXi3b_A.roa
Signing time: Fri 15 Nov 2024 11:09:10 +0000
ROA not before: Fri 15 Nov 2024 11:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.62.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Nov 2024 21:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:83:3c:2b:6b:c2:ba:fa:af:3c:09:32:2b:c6:52:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 11:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f69d6975c8392158631a4ce6e931405d78b76ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:03:f7:ff:bf:e0:dd:67:38:4b:c7:22:31:
7c:9a:e9:7f:ad:07:ae:22:ab:18:b8:6a:01:05:e4:
b0:5a:fc:d4:65:8e:7b:71:36:0b:01:c4:e5:20:b5:
06:00:d0:7e:31:bc:f3:19:16:39:83:de:b4:83:96:
ea:c4:bb:e5:84:84:dd:84:0c:de:94:ea:3a:b3:34:
87:3f:50:4d:40:c5:3f:8b:78:4e:fe:d8:50:5b:d8:
01:35:ea:d5:64:87:89:3b:91:f7:bf:fb:ee:5f:da:
74:d4:44:16:f6:5c:67:f0:cc:00:26:d4:76:16:eb:
84:43:77:b3:20:f1:91:ff:df:bb:d7:6b:39:1b:29:
69:b7:6b:a3:1c:34:63:bd:26:11:b8:55:84:4c:07:
b1:b3:25:1b:c4:3d:a3:a7:b5:36:8a:c6:82:6e:38:
5e:11:d5:8f:26:50:28:cb:70:39:c1:7b:2c:55:5f:
e9:bc:40:a8:94:52:31:d4:5c:72:8b:c4:03:d6:a1:
f9:7a:bd:cd:12:c4:c8:40:e6:d3:78:8f:97:80:02:
69:39:2c:1e:89:0f:52:10:9e:ed:3a:11:4d:ee:20:
66:3d:cb:83:a6:51:49:38:b4:59:ae:5c:0f:62:74:
a8:4b:5a:1c:14:be:02:d1:5a:dd:bf:56:1d:76:13:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9D:69:75:C8:39:21:58:63:1A:4C:E6:E9:31:40:5D:78:B7:6F:F0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9p1pdcg5IVhjGkzm6TFAXXi3b_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.48.0/24
31.56.57.0/24
31.56.62.0/24
31.56.85.0/24
31.56.89.0/24
31.56.120.0/22
31.56.127.0/24
31.57.132.0/23
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:0d:f7:44:a5:f1:8c:56:66:60:f7:f3:e7:c8:e7:ed:d9:88:
99:2b:72:2e:82:8e:94:a7:05:cd:b3:95:b7:63:99:ae:aa:82:
7a:91:f1:46:e0:89:c7:d0:a6:f3:74:7c:67:67:c4:98:d5:f5:
42:66:a3:e0:a5:14:0a:60:d3:72:0d:89:fc:bf:c4:c5:7e:e9:
0d:4a:f1:84:3f:26:f3:67:78:8d:c7:9d:ec:d6:a4:bf:8e:80:
fc:b2:96:d2:a0:b5:2d:8b:ba:0d:71:fc:9c:2f:b0:94:12:5c:
5f:d0:6e:e9:b7:df:cd:ca:30:9e:f4:cf:67:9a:27:d5:09:d4:
05:2f:9e:23:da:43:02:6b:b9:da:22:68:2b:68:2c:8b:16:6d:
02:7d:ed:0d:15:0d:b3:b2:ed:dd:bf:09:43:72:f3:9d:13:91:
69:50:89:ce:2c:c0:9a:1e:59:7b:24:fc:10:f0:43:a3:ed:2d:
84:3d:ad:c4:fc:26:af:12:46:61:b3:bf:22:ac:7b:1c:33:92:
3f:ac:9b:dd:be:56:f9:f3:df:7d:df:41:01:b4:92:e2:ea:05:
0f:0b:d9:36:28:4c:6f:37:2a:cf:8a:8b:59:92:35:a3:82:8c:
1b:df:5e:c2:ba:fa:8d:0c:24:00:1c:76:d1:73:d6:7c:30:b4:
97:9e:3a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 23:26:49 2024 by rpki-client on console-fra.rpki-client.org