Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D8AL8cRkSbTW_ix3Pcg16UAEbtw.roa
File: D8AL8cRkSbTW_ix3Pcg16UAEbtw.roa (raw, json)
Hash identifier: DPCeebwd8yTOnKB4i7TZg2nAbTzWOkjNQpKSkjXGx2w=
Subject key identifier: 0F:C0:0B:F1:C4:64:49:B4:D6:FE:2C:77:3D:C8:35:E9:40:04:6E:DC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191ABF3BB9C568D629E8723C8F5A75B01A1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D8AL8cRkSbTW_ix3Pcg16UAEbtw.roa
Signing time: Sun 01 Sep 2024 04:59:22 +0000
ROA not before: Sun 01 Sep 2024 04:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216099
IP address blocks: 31.56.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Sep 2024 10:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ab:f3:bb:9c:56:8d:62:9e:87:23:c8:f5:a7:5b:01:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 1 04:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fc00bf1c46449b4d6fe2c773dc835e940046edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:40:90:cc:be:f3:86:c2:11:bb:72:aa:be:
6e:bd:ae:23:f0:f7:a9:5c:2a:56:e1:62:eb:74:e0:
f8:e8:a3:12:f2:42:9e:97:37:3e:9e:ce:1c:a8:0a:
8c:2d:f8:73:97:66:26:49:ef:ad:5d:a7:ca:0e:00:
9c:6d:8b:0a:55:ba:e6:39:e3:f8:20:61:5f:4d:4a:
5a:a1:16:84:cd:55:e8:b9:c0:51:6d:87:08:80:42:
36:a6:63:1d:97:b9:03:54:0b:9c:b6:76:3c:1e:c4:
41:ff:b0:36:a1:f0:f6:5c:6a:84:c3:b5:88:7e:9e:
66:6f:2c:47:4f:8b:21:87:02:5f:44:cf:b4:2e:e5:
05:79:5b:11:18:2d:78:b4:0a:95:c8:b4:25:9c:73:
3b:ed:21:c8:78:fc:c8:4b:22:7b:14:3b:5d:b5:60:
0f:3e:4e:18:c0:73:c7:dd:23:61:3c:19:9e:27:72:
5c:bf:97:cc:d4:2a:72:60:78:a8:72:00:fd:01:df:
af:aa:b0:a2:1c:da:0d:b2:51:72:24:f8:72:df:27:
38:55:b7:f0:30:1c:d2:68:56:68:b4:26:dc:4f:42:
1b:9c:98:83:e4:fa:07:64:cd:22:02:69:62:d1:5d:
c9:c3:d6:28:62:ff:d6:e6:89:24:ee:d3:24:84:d5:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C0:0B:F1:C4:64:49:B4:D6:FE:2C:77:3D:C8:35:E9:40:04:6E:DC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D8AL8cRkSbTW_ix3Pcg16UAEbtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.84.0/24
Signature Algorithm: sha256WithRSAEncryption
95:26:b5:b8:96:9c:d4:2e:a4:49:8e:bc:99:2c:40:cf:10:ec:
94:5c:32:77:79:4c:a9:89:39:6a:27:15:cc:fc:4d:d0:c5:4c:
8c:31:da:20:85:9e:75:f9:50:b6:44:4f:fc:ea:68:c6:be:30:
ca:52:45:64:e3:55:3e:40:1e:7e:bc:1d:94:f2:f3:74:4c:1d:
a7:ff:64:35:91:fe:70:71:17:0c:a4:99:7a:c2:14:6e:78:7a:
bd:ab:98:17:92:9e:28:19:3e:1b:ca:6c:52:69:14:f7:2d:64:
0b:ae:88:4b:b9:c0:0a:cd:54:0b:1e:6e:50:30:c9:4f:1d:60:
6b:c5:4a:15:8d:8e:ac:d4:b4:b3:59:b9:b1:0b:d4:8f:6a:96:
cb:07:4b:31:91:29:97:83:50:71:23:ef:d5:07:89:f4:6d:f4:
2f:39:a0:33:fd:40:8b:89:e4:17:f6:9d:6a:10:91:8e:f9:7a:
98:3c:15:c6:62:56:0f:18:04:b0:23:e2:6d:19:d1:1a:76:b7:
67:52:a2:0a:86:d2:47:d3:4a:be:fa:0e:78:c8:66:36:02:87:
4e:75:28:a6:88:66:00:b2:a2:79:c1:93:d1:ba:b2:8c:9b:93:
79:93:1f:7e:27:ad:28:2e:4b:27:4e:28:b8:f3:f0:e4:4a:81:
56:12:86:c6
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 28 12:03:48 2024 by rpki-client on console-fra.rpki-client.org