Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DousAlqRb0_a8snOmZQ3980_EFg.roa
File: DousAlqRb0_a8snOmZQ3980_EFg.roa (raw, json)
Hash identifier: /xq3UTlRsq4x3DrpAjVUVh77OB5yJH9L+UAPJt+iu2U=
Subject key identifier: 0E:8B:AC:02:5A:91:6F:4F:DA:F2:C9:CE:99:94:37:F7:CD:3F:10:58
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191C60502939A6067BEA81538B24A1E2730
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DousAlqRb0_a8snOmZQ3980_EFg.roa
Signing time: Fri 06 Sep 2024 06:28:22 +0000
ROA not before: Fri 06 Sep 2024 06:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 31.56.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 11:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:05:02:93:9a:60:67:be:a8:15:38:b2:4a:1e:27:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 6 06:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e8bac025a916f4fdaf2c9ce999437f7cd3f1058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:0d:64:74:e0:11:0c:e3:72:31:a5:a1:82:
cf:e6:b0:ac:19:03:d4:14:6a:00:b1:60:8e:d8:cb:
62:d6:ff:9c:79:3f:48:54:1e:7d:04:74:2d:c6:8d:
58:09:f6:c6:f1:22:40:fa:b3:6d:19:09:db:5d:89:
31:59:7a:5f:af:30:05:a7:91:60:82:30:cf:4e:b6:
48:bf:2e:86:78:11:23:86:41:19:d8:55:46:08:e6:
7b:58:40:8c:0d:cc:ed:fa:e4:38:ab:2c:30:cb:9c:
1c:10:99:15:ff:eb:ab:54:e0:d3:f3:fe:80:80:e5:
14:72:37:73:9d:12:e0:d7:c7:c2:bd:11:e7:eb:c1:
b9:28:58:a8:27:8d:ac:d0:f8:9e:6c:ff:8c:b9:4d:
69:45:22:6d:0b:94:3d:5e:36:95:9a:f8:2b:08:77:
e5:ab:3e:06:a4:44:34:c5:44:55:af:d5:6e:22:32:
eb:34:d9:0a:3d:08:8e:85:dd:32:e9:31:a9:d4:b9:
82:91:0a:f1:42:3e:87:57:0d:ee:b7:d9:f1:cf:4b:
97:9c:62:b2:59:4e:81:77:61:ac:87:7f:1f:a5:fd:
ec:e2:44:3a:70:c7:f3:8b:ad:bc:ea:50:5f:86:40:
2e:a0:a4:34:73:23:cf:a3:36:53:09:37:72:a2:52:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8B:AC:02:5A:91:6F:4F:DA:F2:C9:CE:99:94:37:F7:CD:3F:10:58
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DousAlqRb0_a8snOmZQ3980_EFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.76.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:32:54:b5:f8:3d:5c:f5:68:1e:88:ff:93:c4:c0:da:34:d8:
3a:34:23:08:9a:20:1a:dc:e3:ce:5d:a2:b3:0d:1e:53:ad:c6:
d2:5c:37:ea:34:12:dc:7e:bc:59:f9:d4:d6:7f:a7:90:d2:47:
d6:45:c8:55:d6:b4:13:e2:45:10:d2:b7:03:fe:88:81:08:2a:
50:5c:6b:00:68:18:83:74:f1:73:11:5a:de:3f:fb:f8:e6:07:
84:ed:cf:e2:14:ab:88:45:fb:db:42:e4:60:ec:01:bd:05:cc:
8e:4a:1e:ac:7d:ab:51:c8:78:06:1b:e0:4d:2b:69:3e:51:91:
b7:7f:5d:75:42:35:bb:81:3d:21:24:02:a7:92:f3:62:f0:a5:
b3:5c:78:03:c7:93:f1:be:47:1c:79:b2:65:20:db:8e:a0:62:
93:66:03:a9:1d:fa:0c:b7:7c:c0:10:ff:73:2d:0f:3d:91:63:
b9:a3:45:30:76:5a:57:9e:7b:48:df:58:94:1f:3c:6f:3d:90:
45:8e:56:fd:fe:38:c6:b5:83:6a:a4:11:f8:09:e5:40:0d:c3:
c9:46:dc:3c:59:47:11:00:64:ee:df:30:af:97:be:aa:b3:13:
ea:b0:6f:58:bb:24:99:ec:36:d2:20:e3:61:8b:dc:a9:05:ea:
f2:af:de:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 14:50:24 2024 by rpki-client on console-fra.rpki-client.org