Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A54-JuVeuDR747epr-b9Kk2860Q.roa
File: A54-JuVeuDR747epr-b9Kk2860Q.roa (raw, json)
Hash identifier: 6jAKz0hRoiCUNh/MBUHNqFEdbRh3DSGSNIO5kPGtbZc=
Subject key identifier: 03:9E:3E:26:E5:5E:B8:34:7B:E3:B7:A9:AF:E6:FD:2A:4D:BC:EB:44
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01925B92EED014A2F8C7375298260E7E408E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A54-JuVeuDR747epr-b9Kk2860Q.roa
Signing time: Sat 05 Oct 2024 07:26:48 +0000
ROA not before: Sat 05 Oct 2024 07:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.64.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 13:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5b:92:ee:d0:14:a2:f8:c7:37:52:98:26:0e:7e:40:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 5 07:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=039e3e26e55eb8347be3b7a9afe6fd2a4dbceb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:05:b9:ad:cb:b9:9c:35:69:ca:cd:f4:0d:
bc:43:06:51:50:61:55:1f:87:08:d7:3d:c9:f8:ad:
05:37:8b:f6:60:63:f7:4a:8e:35:31:9f:04:f8:ca:
eb:7e:3a:4a:01:ae:01:b7:8d:5c:7b:6d:a1:da:53:
11:5b:50:57:62:24:7b:54:e7:b1:51:b7:64:11:ee:
7a:d6:b9:33:f4:33:c9:8c:a0:3a:ab:8b:70:4f:aa:
c3:1d:51:d3:df:a8:c5:e8:5d:10:ed:c2:0f:5b:4b:
f1:32:89:a1:cf:4d:d1:a0:9f:e8:13:99:78:b1:06:
6a:3a:60:20:64:57:a4:d4:36:3b:37:6e:2d:26:c1:
c5:b7:b1:27:d2:83:b0:14:9e:2a:eb:fd:ac:bb:69:
3e:6d:b5:af:00:b1:dc:0b:26:c9:55:63:64:12:76:
e0:44:06:02:9b:0c:75:90:14:1f:81:86:27:21:06:
c9:98:7c:04:5b:6c:2e:c1:eb:30:e4:e5:94:da:e9:
93:a3:1b:a3:7f:ef:42:46:ba:3a:1f:23:e7:f7:9e:
f0:be:38:1a:e7:52:02:45:36:6f:1d:70:41:38:74:
d0:7b:19:0d:87:57:b9:d5:2c:ea:19:18:5b:56:e4:
f7:58:ab:a2:50:92:3a:ef:26:eb:50:6f:41:a5:04:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9E:3E:26:E5:5E:B8:34:7B:E3:B7:A9:AF:E6:FD:2A:4D:BC:EB:44
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A54-JuVeuDR747epr-b9Kk2860Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
31.57.64.0/21
Signature Algorithm: sha256WithRSAEncryption
25:33:ed:5b:e9:e8:1e:43:8c:30:e8:2c:4c:f2:a1:3b:05:40:
49:f0:c1:55:02:5b:7f:fa:ae:d4:b8:9f:a5:88:dd:e9:f2:c6:
85:fb:11:4c:46:f0:49:f8:c9:46:1c:78:9b:c0:a5:cd:b8:65:
f3:eb:1a:12:48:09:0e:ce:97:a7:ef:b3:f8:48:fc:ff:da:ed:
47:b5:64:51:49:e5:43:57:cb:ed:d8:bf:2e:5c:42:42:b5:54:
68:85:e8:a6:a1:a6:92:63:42:91:b5:e3:cd:46:67:9e:80:e9:
bb:43:d6:bc:17:17:43:89:89:10:4b:0e:78:2a:fd:5e:16:20:
59:01:3a:85:75:a8:34:aa:71:42:d3:28:6f:8c:da:68:a6:3b:
84:e7:e2:44:e6:ee:be:ac:53:b1:30:75:86:c0:2a:84:61:89:
3a:4c:ac:1c:e6:28:50:3a:b1:4b:83:bb:95:9f:ef:53:bb:16:
2d:20:f1:25:50:4a:21:66:fd:92:69:c1:6d:11:b4:38:09:fb:
dd:52:90:f2:57:5b:e0:51:71:33:31:89:4a:e7:8c:43:20:42:
60:3f:47:3d:aa:23:ee:c0:33:60:89:39:0e:c9:7d:35:ff:b7:
9b:48:1a:d8:58:df:9c:6e:b8:c2:93:76:97:c2:ae:11:0f:e6:
86:84:cc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 15:40:34 2024 by rpki-client on console-fra.rpki-client.org