Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CstjGyjmBJ1ltp9xrToljLM6XXA.roa
File: CstjGyjmBJ1ltp9xrToljLM6XXA.roa (raw, json)
Hash identifier: oc6S5/OqDhR+oDVEH8xWzCujuLiMzJwtZ5VjatT/rfg=
Subject key identifier: 0A:CB:63:1B:28:E6:04:9D:65:B6:9F:71:AD:3A:25:8C:B3:3A:5D:70
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019267075D7395FF5A8ECA490B782E73D382
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CstjGyjmBJ1ltp9xrToljLM6XXA.roa
Signing time: Mon 07 Oct 2024 12:49:48 +0000
ROA not before: Mon 07 Oct 2024 12:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.138.0/24 maxlen: 24
31.56.139.0/24 maxlen: 24
31.56.140.0/24 maxlen: 24
31.56.145.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 15:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:67:07:5d:73:95:ff:5a:8e:ca:49:0b:78:2e:73:d3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 7 12:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0acb631b28e6049d65b69f71ad3a258cb33a5d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:bd:7d:86:6a:11:12:52:2a:6a:1c:42:ce:
2a:1f:1e:9d:04:cb:55:5f:65:42:44:5f:09:0c:b4:
46:a0:99:b7:97:8b:e2:4e:77:90:81:3f:f7:5d:0a:
6d:80:06:04:82:81:27:4e:da:16:85:95:e5:3a:ce:
41:b2:87:59:ad:3f:fb:60:c1:3c:4e:14:37:5e:9b:
39:d8:48:ae:b7:10:f5:e1:6f:dd:1d:86:40:3f:eb:
b9:cc:45:ed:f1:77:ec:57:1b:15:c8:49:da:3e:4d:
5c:fa:56:04:3e:2b:03:11:62:1f:03:01:f4:c6:46:
f9:69:f3:6d:cc:34:59:b1:e0:2b:c1:3c:30:75:f8:
4e:3b:35:54:b0:4a:13:ba:6b:90:7b:c7:df:8e:e9:
dd:89:55:1d:5e:bb:4d:13:e9:95:d9:18:bc:67:f2:
4a:40:a9:e8:77:cb:1c:b9:65:62:17:44:b8:47:ca:
c6:f1:cf:0b:7b:3d:a7:59:76:5f:a1:d9:ec:3d:28:
98:4c:b9:26:ce:af:90:64:da:6c:03:c8:5d:75:4e:
a7:af:e0:f8:65:d7:4e:5f:cf:d5:eb:09:3b:38:9a:
b7:9f:99:5a:56:bd:a4:ee:95:1a:10:34:6e:63:19:
57:5d:21:e0:00:3a:d9:77:54:65:a7:19:13:a8:a8:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CB:63:1B:28:E6:04:9D:65:B6:9F:71:AD:3A:25:8C:B3:3A:5D:70
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CstjGyjmBJ1ltp9xrToljLM6XXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.59.0/24
31.56.63.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.89.0/24
31.56.112.0/21
31.56.126.0/24
31.56.137.0-31.56.140.255
31.56.145.0/24
31.56.147.0/24
31.57.0.0-31.57.9.255
Signature Algorithm: sha256WithRSAEncryption
8d:a0:d1:35:eb:b7:d6:69:6f:ca:e7:50:a4:b8:43:bf:c5:1b:
0f:73:5c:77:4c:f4:f4:91:8e:e7:75:2d:cf:04:d2:1f:80:68:
97:d2:ac:3b:3d:92:4c:e2:d4:5f:7e:a4:05:e8:00:8c:72:72:
f0:b0:36:0d:e1:f9:c5:ba:55:0f:a9:81:28:2a:9d:bb:ff:14:
37:84:d0:b5:1f:56:f3:b6:6a:3f:0b:ae:de:76:c5:bc:d5:15:
c2:d0:0f:a4:2f:91:48:a4:1d:9a:ec:01:15:6b:5b:57:e6:c2:
9b:ba:3d:47:80:ef:07:aa:fc:83:9c:21:59:05:a3:ad:8f:f0:
57:bd:48:49:81:01:82:a8:2a:b6:a1:17:48:b0:fc:4c:6e:81:
14:38:27:d6:72:63:15:d2:31:1f:2c:31:bd:99:31:ab:83:e9:
62:2e:0a:ce:2b:63:4b:78:1f:e3:2e:91:b3:e8:d8:85:61:25:
d1:66:21:51:8c:fb:5d:46:17:8f:bd:49:59:9c:66:58:33:e2:
25:21:97:07:a7:ab:13:29:3e:4a:f3:29:3c:1b:3a:00:41:4b:
9d:bb:43:40:ec:58:54:9d:b8:bf:3b:09:94:4b:b7:88:5a:ec:
cd:a3:de:e9:a9:cb:f9:44:a4:ee:8e:b4:12:60:b2:48:ad:4f:
63:cf:09:b4
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgISAZJnB11zlf9ajspJC3guc9OCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA3MTI0OTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWNiNjMxYjI4ZTYwNDlkNjViNjlmNzFhZDNhMjU4Y2IzM2E1ZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTG9fYZqERJSKmocQs4qHx6dBMtV
X2VCRF8JDLRGoJm3l4viTneQgT/3XQptgAYEgoEnTtoWhZXlOs5BsodZrT/7YME8
ThQ3Xps52EiutxD14W/dHYZAP+u5zEXt8XfsVxsVyEnaPk1c+lYEPisDEWIfAwH0
xkb5afNtzDRZseArwTwwdfhOOzVUsEoTumuQe8ffjundiVUdXrtNE+mV2Ri8Z/JK
QKnod8scuWViF0S4R8rG8c8Lez2nWXZfodnsPSiYTLkmzq+QZNpsA8hddU6nr+D4
ZddOX8/V6wk7OJq3n5laVr2k7pUaEDRuYxlXXSHgADrZd1RlpxkTqKiAuQIDAQAB
o4ICbTCCAmkwHQYDVR0OBBYEFArLYxso5gSdZbafca06JYyzOl1wMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQ3N0akd5am1CSjFsdHA5eHJUb2xqTE02WFhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwbwQCAAEwaQMEAR84BAME
AB84JwMEAB84OwMEAB84PwMEAB84QwMEAB84RQMEAB84SAMEAB84VAMEAB84WQME
Ax84cAMEAB84fjAMAwQAHziJAwQAHziMAwQAHziRAwQAHziTMAsDAwAfOQMEAR85
CDANBgkqhkiG9w0BAQsFAAOCAQEAjaDRNeu31mlvyudQpLhDv8UbD3Ncd0z09JGO
53UtzwTSH4Bol9KsOz2STOLUX36kBegAjHJy8LA2DeH5xbpVD6mBKCqdu/8UN4TQ
tR9W87ZqPwuu3nbFvNUVwtAPpC+RSKQdmuwBFWtbV+bCm7o9R4DvB6r8g5whWQWj
rY/wV71ISYEBgqgqtqEXSLD8TG6BFDgn1nJjFdIxHywxvZkxq4PpYi4KzitjS3gf
4y6Rs+jYhWEl0WYhUYz7XUYXj71JWZxmWDPiJSGXB6erEyk+SvMpPBs6AEFLnbtD
QOxYVJ24vzsJlEu3iFrszaPe6anL+USk7o60EmCySK1PY88JtA==
-----END CERTIFICATE-----
Generated at Mon Oct 7 20:37:57 2024 by rpki-client on console-fra.rpki-client.org