Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C-ifQK8HISpqMrCc2cMhzcAKHCM.roa
File: C-ifQK8HISpqMrCc2cMhzcAKHCM.roa (raw, json)
Hash identifier: Avp1fxMNiUpL/1G4Itl6jV5qAwQOL64fTkgedmHee5k=
Subject key identifier: 0B:E8:9F:40:AF:07:21:2A:6A:32:B0:9C:D9:C3:21:CD:C0:0A:1C:23
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019182913FC4F6963B53EC6E557D589314E6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C-ifQK8HISpqMrCc2cMhzcAKHCM.roa
Signing time: Sat 24 Aug 2024 04:07:22 +0000
ROA not before: Sat 24 Aug 2024 04:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26737
IP address blocks: 31.56.87.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 15:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:82:91:3f:c4:f6:96:3b:53:ec:6e:55:7d:58:93:14:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 24 04:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0be89f40af07212a6a32b09cd9c321cdc00a1c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:9a:c2:4f:8b:79:ac:0f:3e:c3:03:35:a4:
e2:d4:23:81:b9:39:10:01:30:12:94:2a:55:7e:b4:
ce:40:52:64:c9:78:c3:0b:6a:b2:14:56:a7:3f:24:
74:02:6f:0f:19:02:87:04:8b:f8:71:ba:b0:07:9f:
4c:a1:52:01:94:a9:26:ff:02:0b:f5:30:a4:49:91:
3e:11:92:55:3a:23:bb:89:8d:b9:26:e0:91:23:53:
cb:58:d8:74:dd:97:18:47:9f:5e:04:1b:e8:15:00:
89:82:4c:e0:3b:a2:14:00:68:92:23:a8:06:a4:f6:
65:44:b1:27:c7:51:04:fe:85:e1:dd:5d:19:82:a5:
30:52:62:9a:c3:31:3b:5a:3a:17:68:7a:48:31:4f:
a8:77:20:8b:73:98:aa:81:de:75:36:18:48:68:9f:
d9:2b:dc:f1:0d:c6:dc:2d:0d:c0:f1:48:eb:f1:b0:
c1:a9:2d:c9:61:67:a6:2a:79:65:2f:8c:6e:32:39:
f8:b1:69:70:7a:d2:6f:e2:55:a7:8f:0c:bb:7c:13:
66:f0:ae:c4:d3:de:99:5c:a8:9d:aa:c5:e4:18:f9:
52:ab:03:ab:60:7e:e1:71:18:40:17:5d:31:bc:74:
c4:fb:66:54:86:57:41:0a:b1:3e:d5:45:e6:78:56:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E8:9F:40:AF:07:21:2A:6A:32:B0:9C:D9:C3:21:CD:C0:0A:1C:23
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C-ifQK8HISpqMrCc2cMhzcAKHCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.87.0/24
31.56.89.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0f:3d:60:34:98:76:30:f8:d6:99:e3:d5:a0:c0:b2:27:c6:
d5:9d:54:3b:9e:fc:d7:57:e9:31:bd:fa:fb:58:e9:6d:55:8b:
ed:bb:25:80:8c:67:2b:28:4f:47:ad:b6:43:2f:50:fa:d1:73:
42:bc:8c:d9:47:1c:13:f7:f5:f1:61:d5:0e:0c:12:cb:40:02:
6b:6a:5b:16:59:7a:3a:11:8e:42:4a:8b:ac:88:ad:ff:4a:a0:
a4:f6:7d:f7:aa:55:39:cd:0b:14:75:8c:33:b0:da:95:ae:c6:
fb:3b:c3:29:48:fd:b2:25:eb:ff:f9:c6:95:43:37:f8:a8:18:
5a:e6:e3:82:81:01:be:b7:b1:8c:02:af:4b:86:e2:cd:16:1b:
b5:ec:26:73:79:33:c9:1a:9f:b1:c8:63:47:da:8d:22:81:33:
b2:d6:8b:b4:94:08:73:a5:75:b3:2e:00:c6:5f:fb:c9:48:96:
76:a6:de:6f:49:0f:16:3c:97:35:78:c6:cf:91:f4:ac:aa:4a:
9a:b9:8f:6e:31:bc:bc:4e:93:a8:49:bd:65:d7:2d:81:db:de:
8e:8a:4e:ba:4d:5a:f7:fc:c0:78:79:4a:1e:2c:01:df:5b:b3:
69:6f:54:ba:8a:c7:1a:9a:83:76:1f:8d:80:72:1f:25:78:b3:
78:51:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 18:12:24 2024 by rpki-client on console-fra.rpki-client.org