Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EmfUz45EN0dpRoOXOifOKUU6ycQ.roa
File: EmfUz45EN0dpRoOXOifOKUU6ycQ.roa (raw, json)
Hash identifier: DBGUJ1aEJZrYMneFZZp7ESFJMFzQRLbfDE7F6g8/UGM=
Subject key identifier: 12:67:D4:CF:8E:44:37:47:69:46:83:97:3A:27:CE:29:45:3A:C9:C4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019336D292FC268C774A50DF473FBF7EEA2A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EmfUz45EN0dpRoOXOifOKUU6ycQ.roa
Signing time: Sat 16 Nov 2024 21:13:10 +0000
ROA not before: Sat 16 Nov 2024 21:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 08:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:36:d2:92:fc:26:8c:77:4a:50:df:47:3f:bf:7e:ea:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 16 21:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1267d4cf8e443747694683973a27ce29453ac9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:71:1f:19:92:61:f4:50:1c:c1:c8:b6:7c:
7f:c4:c0:93:cb:8a:a6:a1:6a:fc:14:26:c0:79:c3:
9e:b0:e5:fc:3a:f8:db:e7:0d:48:48:e0:b5:fc:4e:
2e:2d:d6:75:58:85:45:3a:c7:13:dd:4c:04:72:f5:
bb:dd:3c:72:0f:a3:02:2e:c5:7e:13:9b:64:79:03:
78:60:21:77:55:81:17:fd:60:72:b2:21:6f:19:b9:
87:0f:8d:f9:50:c3:b1:28:35:71:60:f6:3b:10:22:
d9:4c:51:19:f9:19:4d:f2:ba:05:c8:d0:19:a4:2c:
ac:2e:3a:57:cc:a7:bb:31:7d:fb:40:39:f5:c3:3f:
d6:df:d4:de:45:61:1b:67:2d:c3:59:85:7e:55:f6:
f7:9c:98:58:a1:a2:7f:d5:1a:e5:cc:dd:ee:e2:be:
de:c2:15:b8:c5:c3:e4:8b:80:7a:02:db:9b:f9:75:
f0:d1:8e:d5:88:1d:0a:f0:fa:b7:50:af:34:c1:c3:
e1:9c:f4:0e:0e:e6:fc:a1:61:a6:b8:f9:05:9e:eb:
ae:7b:9b:be:80:81:44:f5:58:2f:76:f5:a3:31:c5:
29:05:22:aa:87:dc:d1:db:72:1e:74:26:f0:7e:65:
96:ed:b5:93:f8:6e:17:b9:11:91:15:5d:a7:a2:dd:
9c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:67:D4:CF:8E:44:37:47:69:46:83:97:3A:27:CE:29:45:3A:C9:C4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EmfUz45EN0dpRoOXOifOKUU6ycQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.48.0/24
31.56.57.0/24
31.56.85.0/24
31.56.89.0/24
31.56.120.0/22
31.56.127.0/24
31.57.132.0/23
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.232.0/22
Signature Algorithm: sha256WithRSAEncryption
77:48:4c:af:24:24:ab:4a:fc:7e:c5:11:a6:0e:78:3a:a3:03:
fe:6a:ed:3c:31:c2:5f:72:91:f8:ea:bc:51:64:50:b4:17:a7:
07:53:4a:99:05:39:42:63:ec:bd:38:29:c4:ab:d9:00:13:25:
2c:4b:5c:59:ca:1e:87:fa:1d:8f:33:67:10:46:1b:2f:ad:30:
c0:f2:9b:b7:47:2f:6a:a3:06:0b:5b:a6:45:28:73:1b:0d:2f:
23:fa:6c:fe:95:67:d1:03:b2:0e:f0:df:6b:b3:34:11:87:b9:
7a:7c:88:b3:3a:20:e2:ff:db:27:51:d4:85:88:18:e1:c2:12:
8a:93:eb:ab:ad:cb:e8:47:4c:70:1e:35:e4:21:0c:be:88:6a:
8a:8e:63:e8:26:10:78:89:3c:1a:89:ed:4f:e9:f6:dd:fc:b4:
06:31:87:ac:60:cf:19:71:7f:0a:f0:c3:10:23:a2:3d:bd:61:
6b:89:6f:4f:bf:a3:90:e9:51:af:68:17:f7:0c:15:96:9c:46:
1c:d4:1e:3b:4c:91:3c:9a:fb:fd:69:bf:df:6b:d6:12:86:71:
e1:e1:b7:f0:d4:d3:42:c7:8e:ae:fc:e3:f8:5c:75:7b:68:3c:
c7:47:cc:25:6d:90:6f:87:ca:29:0e:c1:d2:b2:e1:5b:ae:5f:
95:48:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 10:24:02 2024 by rpki-client on console-ams.rpki-client.org