Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AFlt7mO-InOpl6Lk0GtJ22hujRU.roa
File: AFlt7mO-InOpl6Lk0GtJ22hujRU.roa (raw, json)
Hash identifier: Btg7FsJfpfXJKisI9+2nkcVBrpQhF2G5dINm50gCjMA=
Subject key identifier: 00:59:6D:EE:63:BE:22:73:A9:97:A2:E4:D0:6B:49:DB:68:6E:8D:15
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019161B2A3A3320F09FA5257B6E06AAF89A7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AFlt7mO-InOpl6Lk0GtJ22hujRU.roa
Signing time: Sat 17 Aug 2024 18:56:22 +0000
ROA not before: Sat 17 Aug 2024 18:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216099
IP address blocks: 31.56.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 05:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:61:b2:a3:a3:32:0f:09:fa:52:57:b6:e0:6a:af:89:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 17 18:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00596dee63be2273a997a2e4d06b49db686e8d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:b6:68:2a:bf:dc:0c:08:ca:e6:c9:7c:5a:
d2:0f:9b:9e:7e:0a:80:2b:3f:8c:0e:ad:e1:d3:3c:
4b:a1:85:ac:c3:13:da:be:84:33:0b:c1:26:3e:fc:
0e:fc:e9:43:3f:78:84:72:6a:38:bb:b0:87:91:ba:
75:78:1d:59:5a:87:6a:84:a0:68:06:8d:02:4a:0d:
45:84:11:3d:54:23:e9:d3:70:e1:64:13:5b:ca:9a:
ca:df:ba:2c:6a:b1:1c:60:75:0d:97:9c:91:12:9d:
3c:a6:e9:9c:60:5d:c3:cf:9a:80:bd:a3:01:53:95:
81:17:c6:cb:9b:db:39:58:ba:cd:de:30:31:64:51:
27:25:cf:ea:75:8d:0f:14:8d:78:21:aa:16:b9:85:
5d:77:60:ef:0a:93:ca:14:2f:96:cb:46:4a:e6:7c:
2f:3f:be:70:83:07:eb:d9:a2:dd:33:78:e8:8c:b2:
ec:f5:74:52:f6:97:84:43:cc:80:86:8b:4c:da:f7:
d6:c2:76:9b:a3:ed:98:cf:66:8c:c2:c3:d6:23:3b:
e2:c4:e7:5f:e4:84:66:e0:fb:13:30:91:ce:d2:16:
ce:86:e3:16:f8:ff:bf:3b:92:a0:99:8e:a6:c1:75:
a3:28:91:6b:56:0e:ee:77:9d:60:5f:20:62:09:b2:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:59:6D:EE:63:BE:22:73:A9:97:A2:E4:D0:6B:49:DB:68:6E:8D:15
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AFlt7mO-InOpl6Lk0GtJ22hujRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.126.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9a:bc:dd:4d:5c:e6:e4:ae:26:f9:c3:36:f6:bf:b1:f1:2a:
16:97:0b:92:d0:6a:93:ed:0e:e1:84:cc:4e:b3:0d:20:20:de:
49:29:77:37:0a:12:a9:33:16:cd:56:d7:14:b0:f9:81:ef:f0:
42:92:d1:4b:6a:03:1d:2c:61:9e:76:63:58:bc:85:51:47:c1:
87:c7:6e:2a:c1:34:69:d0:0c:b0:49:41:bd:48:70:fe:d9:24:
3c:97:48:47:c7:5d:bd:dd:7b:74:11:23:23:64:c1:3e:8d:77:
4c:a7:4a:e8:09:c5:f9:02:4e:f2:b5:75:3d:42:20:82:cd:b9:
d8:8e:85:74:41:2c:46:cd:0e:da:f0:0a:5d:54:a2:b7:e9:ac:
b8:6d:47:3f:c0:13:f7:70:e2:0a:b4:30:d0:df:fa:42:4e:2a:
7b:8d:9c:4c:99:93:88:59:87:dc:a8:f4:f0:1c:5b:58:d3:c8:
2d:7a:ff:c0:fa:45:c1:69:32:5e:5f:d0:54:85:ca:61:bf:b2:
42:41:8b:6a:82:cc:24:1d:c5:6a:d9:59:49:39:a6:98:fc:5a:
3b:a8:43:ab:44:62:14:1a:b7:0f:56:40:4e:3f:06:2d:a1:19:
43:93:be:4b:50:0d:19:11:c6:17:7c:a9:03:92:80:ec:e6:df:
9d:ac:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 08:35:26 2024 by rpki-client on console-fra.rpki-client.org