Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GULFlKbQIbm3Elwzr9tdhQauLpk.roa
File: GULFlKbQIbm3Elwzr9tdhQauLpk.roa (raw, json)
Hash identifier: /g1TLUGq9HUR0SJUuAcxl6QabYxEwYbnD2bWJoCzzjk=
Subject key identifier: 19:42:C5:94:A6:D0:21:B9:B7:12:5C:33:AF:DB:5D:85:06:AE:2E:99
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192529376D73ACD003832B0E162D4AB71C7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GULFlKbQIbm3Elwzr9tdhQauLpk.roa
Signing time: Thu 03 Oct 2024 13:30:48 +0000
ROA not before: Thu 03 Oct 2024 13:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 13:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:93:76:d7:3a:cd:00:38:32:b0:e1:62:d4:ab:71:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 3 13:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1942c594a6d021b9b7125c33afdb5d8506ae2e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:90:3a:8c:d8:08:1a:d4:5f:83:cb:48:30:
78:39:8e:36:73:39:69:e0:14:2f:63:8b:65:f7:a1:
11:5f:a4:d5:15:bc:3d:51:44:4c:fc:86:e4:3d:12:
80:9b:91:6b:80:b4:47:fa:31:ae:e4:ab:86:d2:41:
e2:ed:7c:87:15:ae:a3:d1:52:bf:e6:ff:cf:43:6e:
ec:89:ba:68:cf:6a:60:89:e9:b8:6e:8e:94:80:7a:
0a:94:2b:d6:7e:66:bf:94:8b:aa:17:c9:b8:19:e8:
62:3b:39:bb:4d:d1:f8:eb:dd:87:ac:24:25:2b:da:
01:80:cd:40:6d:82:22:9c:b1:7e:4a:67:d4:54:94:
24:68:fb:12:7b:81:f3:fa:3a:eb:76:e8:ab:65:b0:
b4:e5:84:33:df:5e:65:e6:60:c7:fe:bf:2c:5b:b9:
a2:5f:77:c1:c8:15:db:a8:bb:bc:84:66:fa:50:6c:
e9:10:b6:44:46:38:fa:52:e1:f3:88:c1:d7:8a:b5:
17:36:ac:ce:b1:18:00:31:17:fd:6f:e1:78:06:47:
19:7d:ba:60:79:1f:70:ff:e1:a9:85:3c:d0:67:4e:
44:08:ac:00:ad:40:b9:a0:09:bd:3d:89:68:e2:07:
23:2c:b8:6f:71:d0:0f:4a:cb:11:69:2e:19:0f:0b:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:42:C5:94:A6:D0:21:B9:B7:12:5C:33:AF:DB:5D:85:06:AE:2E:99
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GULFlKbQIbm3Elwzr9tdhQauLpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
Signature Algorithm: sha256WithRSAEncryption
37:a4:02:e9:1b:28:e2:d6:78:3c:1a:9d:33:3b:fa:a0:99:e6:
f0:ad:20:9d:f1:69:b9:4c:8d:56:6a:a8:7f:c3:ca:31:9e:11:
c3:5d:d0:85:da:c6:3c:f1:55:be:50:ee:cc:24:36:6d:63:84:
05:c0:43:a1:a5:33:cc:39:45:31:0a:85:bd:9c:28:5c:ca:a4:
51:bc:1d:d8:76:7a:68:96:2d:df:0d:9f:22:0a:40:ef:38:e8:
bf:e1:3f:1f:3f:2e:88:67:1b:1c:f5:11:cf:6e:b4:4f:de:3a:
2f:bf:43:79:6a:ea:cb:7b:de:32:8d:45:82:21:96:92:a9:6a:
b0:c4:67:ad:b9:47:f6:5e:46:2b:c9:4c:d6:cd:6f:3b:aa:87:
e5:e5:99:4d:57:8a:05:d6:18:6f:db:49:81:c6:d1:9d:d3:e2:
34:9c:d1:b3:9c:2b:28:b5:e2:72:72:a5:3f:bf:7a:25:99:b2:
a1:d7:9b:6b:4f:e6:f1:17:5e:32:34:39:a3:2d:10:d8:54:a3:
a7:37:5e:38:f2:31:c8:36:cd:b8:8b:66:c7:42:19:16:0c:02:
0b:61:3c:2d:96:61:ec:2b:ed:34:b3:97:86:17:fb:bd:2a:63:
fa:93:17:d9:7c:6c:32:9c:8d:8f:eb:09:81:66:56:68:92:5a:
07:fe:fb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 18:08:35 2024 by rpki-client on console-fra.rpki-client.org