Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D4ztGEj1rYhiE2i-NbkAM24SZP8.roa
File: D4ztGEj1rYhiE2i-NbkAM24SZP8.roa (raw, json)
Hash identifier: aqucTcmVB5F4uxoaTsGt+Y4WB0CkNrHw8W3spWtRFyk=
Subject key identifier: 0F:8C:ED:18:48:F5:AD:88:62:13:68:BE:35:B9:00:33:6E:12:64:FF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019133900F3B63B31F318B292EFA6CB03E03
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D4ztGEj1rYhiE2i-NbkAM24SZP8.roa
Signing time: Thu 08 Aug 2024 19:56:04 +0000
ROA not before: Thu 08 Aug 2024 19:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262725
IP address blocks: 31.56.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 09:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:33:90:0f:3b:63:b3:1f:31:8b:29:2e:fa:6c:b0:3e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 8 19:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f8ced1848f5ad88621368be35b900336e1264ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:a3:9f:7a:62:1b:8d:2f:ef:f2:b5:a3:6d:
b5:05:77:40:50:17:0d:fb:4f:0e:86:dc:46:d5:d9:
4a:73:b0:d9:06:2b:35:6e:f1:c0:96:60:26:0e:1d:
8d:da:22:0e:80:95:74:f6:39:f9:e6:ad:d1:de:f0:
9b:e4:80:bf:7f:e2:9d:81:23:c4:20:36:f4:5c:98:
d5:93:70:72:ab:4f:fc:0c:87:1b:3e:ba:9d:ee:40:
b5:08:d8:cc:65:47:7f:78:cb:69:56:9e:fc:d5:b0:
55:28:fa:cb:d3:85:8e:93:20:88:58:f3:fd:9f:e0:
2b:f5:7e:22:82:4e:e1:0f:62:81:ba:a6:b7:e9:7b:
fb:59:42:e3:21:7f:24:f0:7d:93:70:02:23:0b:74:
cb:a3:f0:90:dc:21:76:45:be:3d:32:20:ee:c6:b9:
f1:51:8f:4b:21:3a:35:6e:4f:fd:f0:ee:79:7d:3b:
6c:e8:61:fc:b1:40:1f:91:32:9f:1c:10:b5:54:31:
e8:5d:0d:6a:3e:2c:ab:55:21:23:06:04:d0:ad:49:
9d:ff:ba:68:e2:cb:d3:70:ec:ea:92:b1:7b:07:f6:
24:5b:d7:b9:c1:24:a7:04:54:aa:60:14:2c:b7:82:
84:71:d3:43:13:70:47:13:4e:95:5d:9f:03:98:09:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8C:ED:18:48:F5:AD:88:62:13:68:BE:35:B9:00:33:6E:12:64:FF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D4ztGEj1rYhiE2i-NbkAM24SZP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.44.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:33:59:42:ea:f9:c8:0f:21:58:e8:26:26:27:83:f3:48:92:
52:6b:04:26:14:82:4f:9c:1f:c2:72:bc:76:ec:dc:b4:27:a3:
c5:b7:0a:2f:0c:95:f7:56:61:bf:03:2f:25:f6:f6:44:e9:e0:
d1:f0:ce:b3:aa:b3:fa:20:8c:2d:db:21:56:31:9c:c7:1f:f3:
8e:95:cf:d0:78:bd:a7:c2:7e:83:49:4b:7c:1e:f6:6d:ca:b3:
38:a3:e7:d7:78:c4:d9:e6:55:f6:45:44:43:4a:7f:7e:20:e9:
ff:de:6b:64:00:b0:84:4a:73:d0:90:90:e9:78:94:56:13:6a:
93:fb:2e:05:0c:5f:fb:15:78:09:78:07:df:e0:40:77:98:38:
8b:1b:cc:0e:9f:4a:bb:e4:d9:d0:4c:a7:16:6e:90:e6:d6:3d:
eb:c8:22:24:7f:a8:cd:6e:ff:32:2e:3d:74:2b:28:de:f3:6d:
e7:5d:e2:a4:ca:ae:f9:58:85:cb:61:03:10:6b:4a:31:df:17:
ca:46:aa:22:5c:77:76:3d:ea:14:36:ca:3a:7e:1f:0c:ba:31:
df:9f:f4:9e:df:8f:e4:1b:38:45:09:44:b0:fe:74:17:7a:b6:
e8:5b:6c:11:3f:d5:5c:ec:3b:a4:29:05:0a:a3:7f:3c:56:51:
7f:9e:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 13:32:52 2024 by rpki-client on console-fra.rpki-client.org