Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B-Wq85r51BY8UiOQGbzL5mTfxHY.roa
File: B-Wq85r51BY8UiOQGbzL5mTfxHY.roa (raw, json)
Hash identifier: LoYkdnyvm6c17w2XN8Dby2VUuVY6bECf4dB7LNNEjzs=
Subject key identifier: 07:E5:AA:F3:9A:F9:D4:16:3C:52:23:90:19:BC:CB:E6:64:DF:C4:76
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019265DEBC17140B02626E1DA579202B7E88
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B-Wq85r51BY8UiOQGbzL5mTfxHY.roa
Signing time: Mon 07 Oct 2024 07:25:48 +0000
ROA not before: Mon 07 Oct 2024 07:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.35.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 09 Oct 2024 10:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:65:de:bc:17:14:0b:02:62:6e:1d:a5:79:20:2b:7e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 7 07:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07e5aaf39af9d4163c52239019bccbe664dfc476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:cb:27:26:43:e8:dc:55:a0:1a:61:27:8b:
99:b0:56:8c:60:56:c3:08:8e:78:3f:10:b4:32:49:
9a:a6:70:6b:18:ba:ee:1f:08:20:67:7e:e0:89:b5:
53:ae:4b:5a:73:bf:66:6e:3d:c3:06:2c:5a:48:3f:
64:0e:69:82:55:2b:a8:fa:b4:28:50:10:06:5c:44:
34:a9:fa:25:9c:53:d3:d9:c6:d9:df:be:55:8b:9c:
dd:26:ee:22:96:23:0a:e0:10:d1:d2:93:d2:db:e9:
17:92:21:4f:04:bc:cb:59:6a:fd:af:b9:35:b5:5e:
51:f9:1f:48:7e:a9:05:31:d8:b3:fb:01:7b:83:cf:
b8:21:27:d0:a2:95:2c:a4:2d:7b:91:e4:ae:e5:45:
10:10:bb:b4:7f:c1:37:a9:f2:b5:1a:9c:82:6b:94:
9f:9d:f1:83:3e:2e:d8:1f:8e:cc:01:f9:ba:d6:9b:
f5:ba:cb:27:af:07:a4:95:91:61:2b:ca:e9:3c:53:
9b:29:27:69:ce:b4:12:50:4d:88:53:d3:97:b2:01:
d1:7c:93:3b:33:8b:6b:9c:91:53:42:6e:a8:80:a7:
ed:44:b5:ee:4a:40:5e:a8:86:ad:e0:fb:de:f1:05:
99:65:2f:74:70:a8:45:7f:08:40:b7:d4:a1:aa:ad:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E5:AA:F3:9A:F9:D4:16:3C:52:23:90:19:BC:CB:E6:64:DF:C4:76
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B-Wq85r51BY8UiOQGbzL5mTfxHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.35.0/24
31.57.162.0-31.57.165.255
Signature Algorithm: sha256WithRSAEncryption
0c:36:a9:20:46:7c:e1:36:00:48:a5:87:54:3a:c4:4e:50:af:
05:a3:87:61:5a:f4:8d:bb:5f:35:5d:99:9d:5f:22:80:2c:11:
af:9b:be:7d:70:c1:f3:51:b1:6f:c7:1f:a4:4d:a0:44:57:be:
2c:e6:8d:41:1d:c6:21:9f:6e:3c:91:92:2f:cd:a5:47:5b:5a:
14:e7:ad:97:32:43:81:71:24:f7:64:2c:d3:ec:07:aa:c1:7f:
b0:18:b7:1e:17:27:1a:ae:55:64:a0:0f:8d:84:94:1e:52:10:
25:ef:9f:b8:9e:63:4a:08:38:54:ea:25:b5:c5:16:d8:c6:cd:
9b:db:6a:e5:24:9e:16:a5:46:55:f5:2c:23:23:a6:d1:15:93:
9c:32:ab:6d:8c:3c:bc:53:fc:83:b4:26:5d:97:82:e8:f6:f1:
6a:09:52:8c:02:ba:ad:72:67:2a:58:c4:ca:d4:12:e1:ae:42:
4d:0d:2f:74:bd:95:16:76:6d:3b:73:f4:03:9c:7c:24:26:2e:
12:09:4c:de:1d:04:cc:ff:75:32:27:53:36:da:8f:42:a1:95:
31:e7:3b:73:ca:0b:d7:cc:56:9d:0d:b2:f9:1c:60:b5:c0:09:
1d:03:4e:48:46:c4:dd:0d:1c:ef:47:7c:0b:9c:0d:dd:a0:7b:
21:48:90:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 9 17:08:26 2024 by rpki-client on console-fra.rpki-client.org