Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Bamdsll4lCNwlEf2laLvYOri8fs.roa
File: Bamdsll4lCNwlEf2laLvYOri8fs.roa (raw, json)
Hash identifier: gTz3wzQQRuk5tJGNm87eALJHz696sZ0Xbk1+bbS9UhQ=
Subject key identifier: 05:A9:9D:B2:59:78:94:23:70:94:47:F6:95:A2:EF:60:EA:E2:F1:FB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192FBD2130A0016EB1D09653FA2C0F9860D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Bamdsll4lCNwlEf2laLvYOri8fs.roa
Signing time: Tue 05 Nov 2024 10:15:01 +0000
ROA not before: Tue 05 Nov 2024 10:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.39.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.134.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.240.0/22 maxlen: 24
31.57.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 16:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fb:d2:13:0a:00:16:eb:1d:09:65:3f:a2:c0:f9:86:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 5 10:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05a99db259789423709447f695a2ef60eae2f1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:0b:6e:6c:28:b4:70:b1:1b:42:41:80:c1:
80:4e:0b:a3:7a:4e:87:14:3f:97:b8:2e:a0:34:21:
63:3b:39:07:d7:d1:a7:aa:0e:e5:16:ff:75:96:b8:
43:af:b4:29:e8:29:29:2d:5e:78:41:7b:73:38:a0:
8e:ff:2e:ba:75:5a:3c:d5:ca:8f:78:94:33:6d:5c:
f4:3c:9e:b7:e6:b2:9d:3a:6b:ac:20:8b:82:a9:26:
27:78:53:92:dc:12:20:9f:55:35:aa:a0:fb:c1:58:
1b:cf:31:21:24:35:fd:03:3c:d0:22:1e:66:6d:f8:
0a:34:7a:3e:b5:af:11:5e:e7:b8:25:43:18:26:e4:
9d:d8:84:d0:3b:09:fd:73:1c:ea:bd:65:76:67:a7:
0a:a0:a7:d9:e4:53:b1:ef:79:b2:cb:4b:98:f2:70:
20:bc:f1:66:64:9a:8a:96:b3:72:00:e4:8e:55:06:
28:e8:96:2e:e0:5f:40:4e:4a:ea:9b:89:3c:43:6e:
87:ce:ea:1b:06:e5:29:38:a0:67:4c:3c:39:16:06:
fd:31:ca:73:29:c1:fe:6e:90:cb:23:a0:03:43:4c:
25:fd:ed:b0:9f:57:c5:c4:1c:30:84:96:d2:0e:2e:
d8:76:b9:3a:39:8c:da:e2:97:12:75:4b:68:c1:6a:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A9:9D:B2:59:78:94:23:70:94:47:F6:95:A2:EF:60:EA:E2:F1:FB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Bamdsll4lCNwlEf2laLvYOri8fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.39.0/24
31.56.42.0/23
31.56.66.0/24
31.56.85.0/24
31.56.89.0/24
31.56.120.0/22
31.56.127.0/24
31.56.156.0/24
31.57.0.0-31.57.9.255
31.57.132.0-31.57.134.255
31.57.176.0/21
31.57.192.0/22
31.57.232.0/22
31.57.240.0/21
Signature Algorithm: sha256WithRSAEncryption
15:4f:ca:52:ec:91:69:2a:02:f2:f7:19:91:43:00:df:3f:25:
19:07:e5:3b:01:f3:ca:0d:29:d0:a1:c6:1b:a0:3a:c1:cb:a1:
7d:85:a3:65:4a:1c:64:c7:af:aa:ce:33:d3:04:04:67:97:48:
3a:97:bc:9f:71:cc:42:16:ce:91:6e:79:a6:cf:91:28:53:69:
b6:85:78:f2:bf:a0:2b:63:5b:d0:1c:81:9b:02:16:7a:3a:98:
c5:ab:e5:98:50:3a:21:67:1d:d9:92:2a:75:50:00:82:fd:ee:
e6:2f:d9:62:48:f0:3c:3b:78:4d:9c:6e:ad:81:df:d0:05:c0:
ed:30:e7:dd:14:35:f4:83:db:e3:95:cb:b7:da:24:04:88:15:
85:6d:a5:c6:8c:7d:7e:22:0c:2e:7b:f4:a5:06:94:1c:3e:60:
1c:32:96:61:e5:00:20:e9:e6:81:b7:4a:42:04:ea:0e:ea:cf:
52:97:e2:94:69:75:d4:a7:9b:42:b1:e9:5e:c2:46:3f:d7:73:
8f:1c:94:ea:f7:1f:02:35:ad:2a:37:c7:07:b2:52:df:8f:cd:
fc:31:e9:7f:0a:7c:07:60:11:5f:a9:82:d8:49:fd:e3:0a:23:
f9:c8:dc:44:80:d1:8d:3d:76:89:16:11:3f:49:f6:2c:66:8c:
24:d1:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org