Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AnhsMfLuMJ6qtlBcfRQea2ItC-g.roa
File: AnhsMfLuMJ6qtlBcfRQea2ItC-g.roa (raw, json)
Hash identifier: JPhnYHvZeUukBH0+jQWT0La4H17jERNoDKBvLO4JViw=
Subject key identifier: 02:78:6C:31:F2:EE:30:9E:AA:B6:50:5C:7D:14:1E:6B:62:2D:0B:E8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193892A98D7A25FBB937547A95FD585C841
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AnhsMfLuMJ6qtlBcfRQea2ItC-g.roa
Signing time: Mon 02 Dec 2024 20:58:10 +0000
ROA not before: Mon 02 Dec 2024 20:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214174
IP address blocks: 31.56.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:89:2a:98:d7:a2:5f:bb:93:75:47:a9:5f:d5:85:c8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 2 20:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02786c31f2ee309eaab6505c7d141e6b622d0be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ac:20:24:0f:34:14:d2:63:13:74:d4:8c:e1:
f5:06:7d:dd:23:cb:65:17:46:93:1e:00:f2:08:b5:
d3:ac:a0:cd:4e:fc:29:e5:cb:4a:5e:d7:28:de:be:
55:91:1f:e0:f2:ef:81:70:cc:bf:c1:18:08:59:70:
51:e3:b4:17:00:f7:f0:e0:e9:83:cc:a2:9d:64:f8:
c9:31:bf:d8:23:ba:ff:58:5a:67:82:aa:52:f4:52:
5c:10:e9:92:b5:45:bc:43:6c:d7:8a:64:b0:4d:c9:
3f:99:85:c7:27:dc:7c:aa:25:8a:07:9b:f0:c7:0e:
cd:a2:78:16:71:c6:36:88:d4:3f:39:3a:f6:e2:fe:
aa:72:ea:a9:3f:19:73:68:ec:5c:88:45:49:3d:a6:
c4:f5:5c:ce:31:cf:60:1a:43:55:6d:ef:5a:6a:ff:
64:01:5b:ec:f2:8d:69:12:2a:b7:10:45:81:9f:ef:
c6:79:b3:23:53:b1:60:98:47:e6:eb:42:4f:06:84:
75:73:c2:f1:6f:2e:cb:7c:89:65:71:eb:21:a2:ba:
c6:f2:5b:6a:71:10:07:da:fc:6b:26:2a:6f:ff:09:
b4:f6:99:be:43:77:70:56:e3:b1:be:ea:4a:70:d0:
21:36:4d:f7:7a:a9:49:54:eb:33:a8:92:54:fa:4c:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:78:6C:31:F2:EE:30:9E:AA:B6:50:5C:7D:14:1E:6B:62:2D:0B:E8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AnhsMfLuMJ6qtlBcfRQea2ItC-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.48.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a3:99:22:9b:30:ab:52:10:bd:ea:a4:97:53:f5:00:45:8a:
e9:f3:00:c6:70:a1:3d:6b:da:1d:ad:da:5b:06:d5:40:4b:b5:
3d:f0:f2:53:55:2b:87:5b:e2:cc:f6:5a:71:a2:64:e8:67:4b:
78:75:e6:93:26:44:6a:8a:c1:51:15:30:0a:89:fd:ee:95:40:
db:17:e5:a7:02:1b:d7:59:e0:72:ec:67:b7:77:13:33:aa:01:
6d:84:8d:42:86:4e:74:36:08:d8:5b:da:d7:36:1a:24:d3:fc:
6c:08:39:df:53:15:85:a4:9a:99:6b:03:08:a6:49:ad:41:c7:
84:de:4f:66:07:0f:17:33:18:f6:dd:25:8a:26:f7:43:20:03:
5a:61:5f:df:8b:f3:56:2a:b6:24:d4:7a:4f:1d:b5:31:cf:47:
36:f4:ff:06:b4:c2:3a:29:a8:11:af:91:2c:be:66:d3:c3:1a:
74:35:7e:4d:10:8d:6f:7f:e1:cb:af:0f:f4:3e:75:85:58:ae:
3b:34:85:aa:f2:79:14:0f:9e:03:31:b8:47:5a:ff:b3:25:af:
22:fa:bf:af:f7:30:1f:36:08:c0:d6:3c:1e:80:eb:52:c1:e0:
cf:cc:ea:1a:10:a4:77:1f:a1:04:2b:15:03:3f:9a:28:34:ac:
04:8d:8a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:51 2025 by rpki-client