Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Im2fGDEMEx0rxyhO5lFpmMEBZsY.roa
File: Im2fGDEMEx0rxyhO5lFpmMEBZsY.roa (raw, json)
Hash identifier: yzXuUdkiaz60iqk45biSwL+IwWWFSlYtlvUoc2s+MZo=
Subject key identifier: 22:6D:9F:18:31:0C:13:1D:2B:C7:28:4E:E6:51:69:98:C1:01:66:C6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01926CEC82447709A3C9612706C0D0853262
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Im2fGDEMEx0rxyhO5lFpmMEBZsY.roa
Signing time: Tue 08 Oct 2024 16:18:11 +0000
ROA not before: Tue 08 Oct 2024 16:18:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.138.0/24 maxlen: 24
31.56.139.0/24 maxlen: 24
31.56.140.0/24 maxlen: 24
31.56.145.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 09 Oct 2024 06:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:ec:82:44:77:09:a3:c9:61:27:06:c0:d0:85:32:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 8 16:18:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=226d9f18310c131d2bc7284ee6516998c10166c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:96:fe:41:cc:d3:3a:14:03:37:9b:cc:05:
1a:6d:d8:81:eb:d5:ac:77:e8:06:ec:1e:55:6e:96:
01:37:ad:f2:3a:a0:5c:2e:30:da:13:ab:fa:d4:a5:
37:f2:11:42:e2:3e:fc:36:17:c3:30:88:fb:f3:94:
45:86:59:67:21:10:aa:cf:a9:6e:f8:90:7a:a8:5f:
8f:73:95:1c:a7:34:b7:b6:1a:6d:54:2d:2c:86:a6:
ba:76:35:8b:01:bf:52:d8:a2:6f:65:0b:48:25:8f:
27:df:7f:8a:82:b2:47:9d:b3:07:21:c0:62:61:50:
3a:7a:f9:f5:ad:f0:a7:55:1e:16:dc:dd:5f:c9:fb:
f8:e7:ae:0e:53:93:16:57:93:39:36:e1:f8:b1:ef:
c2:2f:00:7b:1f:3e:e8:e8:c3:6a:f2:ea:ea:f6:cd:
fc:a6:52:3c:2a:9b:67:f2:f4:bb:71:d9:d8:eb:88:
a4:5d:89:9e:8f:bb:69:cb:81:81:c4:61:31:a8:65:
d6:f0:60:ab:96:e4:33:17:af:54:63:f2:01:f3:48:
48:7e:98:b0:28:d2:95:e9:48:7b:6d:78:ba:e5:c4:
ab:9e:85:ab:1d:c1:c2:e1:c0:ba:73:e2:54:63:77:
15:9d:71:82:e4:e0:89:8f:6a:7e:8f:74:d1:9f:26:
50:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:9F:18:31:0C:13:1D:2B:C7:28:4E:E6:51:69:98:C1:01:66:C6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Im2fGDEMEx0rxyhO5lFpmMEBZsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.44.0/24
31.56.89.0/24
31.56.112.0/21
31.56.137.0-31.56.140.255
31.56.145.0/24
31.56.147.0/24
31.57.0.0-31.57.9.255
31.57.132.0/23
Signature Algorithm: sha256WithRSAEncryption
22:dc:74:a5:1c:75:04:e4:4c:8a:18:6c:8e:fa:d7:f5:9d:33:
82:38:1a:30:c8:97:c9:37:20:bc:78:22:b6:30:04:a9:6b:d9:
3b:17:37:ee:50:3f:60:50:c2:6c:fc:51:94:21:23:04:e3:61:
41:ad:cf:28:53:9a:4c:a2:56:28:cb:f1:6b:b9:ef:f3:8b:41:
ee:08:26:12:57:5e:d1:01:c3:e3:63:32:9b:49:25:31:25:8b:
58:18:a4:5b:81:12:0a:39:f3:cc:ca:81:a6:8f:5d:a9:26:2b:
3c:57:cc:52:2e:23:87:3c:7c:0e:ff:90:4d:81:cc:44:23:7a:
67:c9:28:e0:a2:9f:98:01:29:08:e4:ef:dc:0f:9d:88:e1:46:
60:e4:fa:a5:ad:93:52:0e:93:90:1a:f5:3e:27:2e:a9:37:24:
41:56:63:45:63:04:3e:7e:1d:64:52:ab:36:b1:f6:eb:f4:09:
85:af:aa:98:95:d4:87:d0:f2:57:ff:e8:40:fe:a4:ee:65:35:
70:24:59:31:29:10:59:26:6d:7e:60:f2:0a:c7:5a:25:29:b1:
1a:cd:b0:8c:96:77:b6:e8:81:94:1e:62:d8:22:8f:14:bd:40:
10:c7:11:21:d7:ad:5f:51:90:16:96:90:e5:0a:87:3e:87:51:
45:3b:69:b8
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAZJs7IJEdwmjyWEnBsDQhTJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA4MTYxODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjZkOWYxODMxMGMxMzFkMmJjNzI4NGVlNjUxNjk5OGMxMDE2NmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgyW/kHM0zoUAzebzAUabdiB69Ws
d+gG7B5VbpYBN63yOqBcLjDaE6v61KU38hFC4j78NhfDMIj785RFhllnIRCqz6lu
+JB6qF+Pc5UcpzS3thptVC0shqa6djWLAb9S2KJvZQtIJY8n33+KgrJHnbMHIcBi
YVA6evn1rfCnVR4W3N1fyfv4564OU5MWV5M5NuH4se/CLwB7Hz7o6MNq8urq9s38
plI8Kptn8vS7cdnY64ikXYmej7tpy4GBxGExqGXW8GCrluQzF69UY/IB80hIfpiw
KNKV6Uh7bXi65cSrnoWrHcHC4cC6c+JUY3cVnXGC5OCJj2p+j3TRnyZQ7wIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFCJtnxgxDBMdK8coTuZRaZjBAWbGMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSW0yZkdERU1FeDByeHloTzVsRnBtTUVCWnNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBRBAIAATBLAwQBHzgEAwQA
HzgnAwQAHzgsAwQAHzhZAwQDHzhwMAwDBAAfOIkDBAAfOIwDBAAfOJEDBAAfOJMw
CwMDAB85AwQBHzkIAwQBHzmEMA0GCSqGSIb3DQEBCwUAA4IBAQAi3HSlHHUE5EyK
GGyO+tf1nTOCOBowyJfJNyC8eCK2MASpa9k7FzfuUD9gUMJs/FGUISME42FBrc8o
U5pMolYoy/Frue/zi0HuCCYSV17RAcPjYzKbSSUxJYtYGKRbgRIKOfPMyoGmj12p
Jis8V8xSLiOHPHwO/5BNgcxEI3pnySjgop+YASkI5O/cD52I4UZg5PqlrZNSDpOQ
GvU+Jy6pNyRBVmNFYwQ+fh1kUqs2sfbr9AmFr6qYldSH0PJX/+hA/qTuZTVwJFkx
KRBZJm1+YPIKx1olKbEazbCMlne26IGUHmLYIo8UvUAQxxEh161fUZAWlpDlCoc+
h1FFO2m4
Generated at Wed Oct 9 08:19:39 2024 by rpki-client on console-fra.rpki-client.org