Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GAKjFuY9PbK5HZZ-JFfRAzM80xM.roa
File: GAKjFuY9PbK5HZZ-JFfRAzM80xM.roa (raw, json)
Hash identifier: WrssXrB6vgKIwi4u5eR8UZ96Qf+j0ya6gow/bMvYPM4=
Subject key identifier: 18:02:A3:16:E6:3D:3D:B2:B9:1D:96:7E:24:57:D1:03:33:3C:D3:13
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192BD365EDBA85AC0A23E70AE72CF6B309A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GAKjFuY9PbK5HZZ-JFfRAzM80xM.roa
Signing time: Thu 24 Oct 2024 06:28:29 +0000
ROA not before: Thu 24 Oct 2024 06:28:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.56.0/24 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.120.0/22 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.153.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 10:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:36:5e:db:a8:5a:c0:a2:3e:70:ae:72:cf:6b:30:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 24 06:28:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1802a316e63d3db2b91d967e2457d103333cd313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:7e:c8:1c:19:4f:01:6c:33:90:8d:8d:46:
46:8e:6b:d0:a9:e1:e1:3f:38:89:fb:ce:7a:52:d6:
c9:1e:75:c5:7e:c3:28:54:fa:ec:8a:4b:75:be:24:
c4:dc:c8:06:6e:3c:8f:3e:88:59:44:6f:fc:97:cb:
7c:1f:77:ae:32:e1:76:af:ae:ee:04:56:79:b4:43:
85:df:93:e1:43:fb:d7:87:03:91:ab:41:a9:47:a7:
6b:94:3c:4d:38:a3:6a:df:31:3b:79:2d:e0:8d:27:
ff:56:91:56:0b:9f:a3:38:6b:74:ac:60:20:3a:f7:
9c:12:95:c5:bd:33:72:48:ce:22:f6:3a:52:30:67:
09:8f:36:37:00:2c:81:c0:b7:3a:12:60:82:f4:82:
42:5f:8d:c7:c8:d4:5b:84:24:c7:3f:4d:55:74:1a:
bc:8c:65:7e:a2:ed:c8:f5:4b:e4:59:e6:da:29:45:
34:3e:2f:4f:41:30:64:bd:c6:a0:eb:0d:04:64:90:
83:0d:46:e6:41:02:86:e4:0b:40:c9:31:5a:29:25:
78:78:aa:9b:80:f8:c6:e7:69:e5:9c:b6:0e:48:df:
e1:1c:78:38:6a:73:88:09:cb:98:b9:c6:22:3d:76:
68:9f:17:a2:b0:83:be:ee:b7:d9:2e:83:b2:e2:85:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:A3:16:E6:3D:3D:B2:B9:1D:96:7E:24:57:D1:03:33:3C:D3:13
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GAKjFuY9PbK5HZZ-JFfRAzM80xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.42.0/23
31.56.56.0/24
31.56.66.0/24
31.56.85.0/24
31.56.89.0/24
31.56.112.0-31.56.123.255
31.57.0.0-31.57.9.255
31.57.132.0/23
31.57.153.0/24
31.57.176.0/21
Signature Algorithm: sha256WithRSAEncryption
16:33:27:71:eb:43:a5:cb:0e:1c:e7:d4:24:b6:eb:5b:b2:20:
45:a2:08:7c:83:ef:2c:d5:2e:75:00:34:fd:ac:04:df:ee:9e:
46:4c:72:a1:ee:19:dd:e0:ac:ab:20:3e:99:3b:1a:a6:1a:b5:
c8:35:a1:3a:33:04:9e:bb:bf:d7:17:78:67:37:2c:da:15:38:
b9:6c:29:6e:63:2f:8f:59:30:c9:b4:57:59:18:94:b3:01:7d:
39:30:99:33:b3:60:94:6b:d0:28:91:77:8d:dd:6a:8e:ed:9c:
d2:a7:c2:0f:71:ad:0f:2b:df:77:7a:d4:bf:3f:bd:ae:96:ba:
f4:ac:47:ce:f9:40:4a:4b:34:a2:3b:1d:cd:7c:c4:d7:c7:93:
72:43:c9:7f:a4:91:a8:8c:9b:a9:e9:f2:39:d1:4e:0c:2c:ca:
bd:23:96:56:54:91:9a:c6:0a:33:21:6b:8c:69:57:41:3a:98:
3c:f6:1e:a5:6f:04:ff:bf:4f:ff:0a:db:f0:e0:1d:86:62:1a:
cf:54:aa:43:06:ba:b1:ce:03:4d:51:d6:3a:dc:23:b1:a0:cb:
80:3b:b0:32:3d:5c:6b:22:a8:82:46:83:2f:ba:21:d6:0a:c1:
f6:35:b6:42:79:8e:06:b3:f9:81:eb:65:12:a2:b6:29:b8:ff:
7c:c0:e6:36
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAZK9Nl7bqFrAoj5wrnLPazCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDI0MDYyODI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODAyYTMxNmU2M2QzZGIyYjkxZDk2N2UyNDU3ZDEwMzMzM2NkMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Td+yBwZTwFsM5CNjUZGjmvQqeHh
PziJ+856UtbJHnXFfsMoVPrsikt1viTE3MgGbjyPPohZRG/8l8t8H3euMuF2r67u
BFZ5tEOF35PhQ/vXhwORq0GpR6drlDxNOKNq3zE7eS3gjSf/VpFWC5+jOGt0rGAg
OvecEpXFvTNySM4i9jpSMGcJjzY3ACyBwLc6EmCC9IJCX43HyNRbhCTHP01VdBq8
jGV+ou3I9UvkWebaKUU0Pi9PQTBkvcag6w0EZJCDDUbmQQKG5AtAyTFaKSV4eKqb
gPjG52nlnLYOSN/hHHg4anOICcuYucYiPXZonxeisIO+7rfZLoOy4oX7GwIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFBgCoxbmPT2yuR2WfiRX0QMzPNMTMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvR0FLakZ1WTlQYks1SFpaLUpGZlJBek04MHhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBdBAIAATBXAwQBHzgEAwQA
HzgnAwQBHzgqAwQAHzg4AwQAHzhCAwQAHzhVAwQAHzhZMAwDBAQfOHADBAIfOHgw
CwMDAB85AwQBHzkIAwQBHzmEAwQAHzmZAwQDHzmwMA0GCSqGSIb3DQEBCwUAA4IB
AQAWMydx60Olyw4c59QktutbsiBFogh8g+8s1S51ADT9rATf7p5GTHKh7hnd4Kyr
ID6ZOxqmGrXINaE6MwSeu7/XF3hnNyzaFTi5bCluYy+PWTDJtFdZGJSzAX05MJkz
s2CUa9AokXeN3WqO7ZzSp8IPca0PK993etS/P72ulrr0rEfO+UBKSzSiOx3NfMTX
x5NyQ8l/pJGojJup6fI50U4MLMq9I5ZWVJGaxgozIWuMaVdBOpg89h6lbwT/v0//
Ctvw4B2GYhrPVKpDBrqxzgNNUdY63COxoMuAO7AyPVxrIqiCRoMvuiHWCsH2NbZC
eY4Gs/mB62USorYpuP98wOY2
-----END CERTIFICATE-----
Generated at Thu Oct 24 12:46:46 2024 by rpki-client on console-fra.rpki-client.org