Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CLxGr67O1SoAMTngSkWCb6LrqEc.roa
File: CLxGr67O1SoAMTngSkWCb6LrqEc.roa (raw, json)
Hash identifier: fGnv72NwrWajvy3Ztwz+qoEcdjcb6oxcAgjvKMrvnvE=
Subject key identifier: 08:BC:46:AF:AE:CE:D5:2A:00:31:39:E0:4A:45:82:6F:A2:EB:A8:47
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019055AF1F15F1510765BD0A4906A749DCB8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CLxGr67O1SoAMTngSkWCb6LrqEc.roa
Signing time: Wed 26 Jun 2024 17:54:18 +0000
ROA not before: Wed 26 Jun 2024 17:54:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215211
IP address blocks: 31.56.0.0/17 maxlen: 17
31.59.0.0/16 maxlen: 16
46.224.0.0/15 maxlen: 15
91.98.0.0/16 maxlen: 16
151.238.0.0/15 maxlen: 15
2a14:6e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 27 Jun 2024 14:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:55:af:1f:15:f1:51:07:65:bd:0a:49:06:a7:49:dc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 26 17:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08bc46afaeced52a003139e04a45826fa2eba847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:4a:61:28:73:24:33:ec:5c:4d:4f:cb:d7:
c4:d9:2a:e2:c6:56:f6:80:0e:c3:c7:83:d9:a8:2a:
4c:75:48:c3:29:68:2f:20:68:04:a6:f6:80:9b:e1:
f2:e8:b2:90:14:5f:7a:a4:6d:de:58:53:86:07:d0:
79:0b:06:64:b0:44:3f:d6:2f:9d:d8:66:84:13:5b:
53:cd:e8:68:4c:00:2e:15:3c:5d:d3:dc:be:66:06:
ce:2f:1f:11:08:5b:96:0a:ed:a8:e9:29:6e:10:36:
16:92:ef:e0:85:c8:a0:29:6e:9f:a1:bd:63:87:0c:
56:8a:80:8d:c9:9a:26:86:d0:44:ef:34:62:5a:31:
2a:1b:89:2b:aa:f6:5d:92:53:f9:e7:11:27:2e:bf:
e5:5a:bf:83:c6:2f:6c:bc:66:0b:b1:2c:2b:98:00:
38:d6:33:aa:65:8e:73:ef:16:ee:5c:ae:52:cb:bb:
41:df:51:96:af:88:68:91:2e:b4:c0:c8:d7:4d:8d:
c2:9a:67:a4:72:5d:3d:91:1d:15:e9:27:2b:68:da:
4c:56:83:01:99:dd:5a:48:c7:67:1d:44:3d:6f:25:
4f:59:7b:67:32:62:a7:d2:f9:c6:e3:0f:0a:a2:3b:
69:f4:40:50:9e:32:e2:89:82:cd:77:b4:c3:c2:98:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BC:46:AF:AE:CE:D5:2A:00:31:39:E0:4A:45:82:6F:A2:EB:A8:47
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CLxGr67O1SoAMTngSkWCb6LrqEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/17
31.59.0.0/16
46.224.0.0/15
91.98.0.0/16
151.238.0.0/15
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
44:01:9a:d5:c8:3e:bc:7b:bd:d6:d0:b3:c0:00:cc:62:ea:a1:
aa:f8:f0:78:b3:21:b3:32:12:77:8d:2e:22:1b:35:04:23:04:
0b:f7:3a:c3:43:b5:c7:ae:77:0a:f3:e2:c8:ff:28:d1:48:62:
ef:c7:f4:59:5d:59:5c:61:f0:51:be:ac:62:51:ff:7d:2e:83:
1d:ab:23:31:b7:88:0e:d8:40:e7:0d:4e:d0:18:1b:f0:45:fe:
c9:d9:b2:8a:db:07:5d:1d:21:e8:b2:27:08:ed:90:a1:85:2b:
db:f5:8c:45:21:d5:2a:6a:ad:eb:fb:8d:d4:79:2b:88:a8:53:
44:29:9a:b1:55:f6:96:78:cb:29:bd:69:d1:6c:a7:ca:5c:dc:
21:fb:13:84:89:87:05:34:df:1c:ba:3a:d4:59:81:48:ab:a5:
7d:f4:4a:38:e1:79:a4:df:79:d6:ec:ad:61:33:30:26:e4:bd:
13:c2:8d:e7:d4:59:f6:1d:70:70:a1:42:3c:c8:4d:7d:ea:ce:
44:ea:5b:a3:ab:9b:71:07:f0:2c:6f:4f:89:f0:78:b1:03:1c:
6a:28:4f:ad:25:2e:69:3d:b9:63:7d:a7:98:b2:f0:54:c7:9b:
00:62:6e:40:e4:6b:0b:b7:0e:93:aa:64:07:ea:d5:21:57:dd:
d1:3d:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 20:47:30 2024 by rpki-client on console-fra.rpki-client.org