Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IwIpCOE9zsGNQ32B5BGaEc8YAfM.roa
File: IwIpCOE9zsGNQ32B5BGaEc8YAfM.roa (raw, json)
Hash identifier: UdURmrGX3IlSRNLBLb1xjLF7iyn3Vsd3jWjPQ2PNje8=
Subject key identifier: 23:02:29:08:E1:3D:CE:C1:8D:43:7D:81:E4:11:9A:11:CF:18:01:F3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191BD343BB4462A8C171DE7631AAA24637F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IwIpCOE9zsGNQ32B5BGaEc8YAfM.roa
Signing time: Wed 04 Sep 2024 13:23:22 +0000
ROA not before: Wed 04 Sep 2024 13:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215343
IP address blocks: 31.56.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 06:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:34:3b:b4:46:2a:8c:17:1d:e7:63:1a:aa:24:63:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 4 13:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23022908e13dcec18d437d81e4119a11cf1801f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:fa:5f:26:1f:66:bf:c4:2a:4a:5e:a8:58:77:
79:dc:5e:2f:0d:e7:c1:6f:32:10:de:e6:3c:72:55:
29:14:05:ef:d3:3e:bf:aa:48:ea:a2:72:55:22:0f:
2f:18:78:1a:2a:69:2a:90:bb:79:39:84:ed:db:18:
50:df:4a:ea:48:2a:8d:c3:c2:16:bb:ec:92:f5:a8:
52:d6:59:5a:07:b7:e7:c7:79:88:c3:85:11:ec:ef:
1f:02:b2:fb:d6:72:ad:05:dc:4d:34:c4:7b:8a:87:
3d:74:c9:ad:08:ae:a9:b6:ec:31:b6:01:37:4f:81:
10:0f:89:4f:9e:ef:fa:46:dc:e0:8f:e2:af:a7:54:
20:95:2a:26:0b:bf:15:d5:29:6c:6e:e1:09:d3:ff:
0c:5d:35:1d:ff:95:9e:89:40:d5:a9:eb:08:19:1a:
73:a6:15:10:42:3b:c0:13:a0:fe:f9:12:c4:a6:83:
73:71:5b:b8:54:b9:de:6c:25:78:2d:c6:cb:49:40:
bd:53:9e:7a:16:48:50:11:64:10:9a:a4:83:aa:60:
56:31:5b:9e:fb:a7:90:c7:f9:91:3f:f0:a6:d6:57:
e7:34:6b:f6:46:11:96:0c:b4:ac:47:1f:aa:6f:91:
d4:b3:2b:a7:ef:54:49:fd:5a:30:eb:7d:e5:6e:cc:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:02:29:08:E1:3D:CE:C1:8D:43:7D:81:E4:11:9A:11:CF:18:01:F3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IwIpCOE9zsGNQ32B5BGaEc8YAfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.140.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4c:82:62:3b:48:3c:4e:d8:73:01:7e:07:f1:14:68:d3:39:
ef:66:72:98:dd:e1:7d:db:a3:dd:ad:e9:78:9a:55:3b:27:23:
9e:09:b9:e9:f4:00:f7:0b:28:61:03:4c:1e:39:f1:4f:d0:e4:
ff:fe:42:54:ce:a1:dd:7b:93:c6:4d:18:bf:65:27:5b:60:52:
3e:bc:5a:b8:d7:86:6d:05:6f:64:ad:71:25:2a:9d:1e:55:26:
1e:2f:70:f3:03:39:90:19:a6:c3:34:95:81:0c:7d:87:0e:39:
43:4a:7d:8b:af:4b:7d:be:56:51:6f:3f:f2:c1:1c:30:e3:f5:
64:73:22:34:c6:49:4e:7b:74:af:7e:e2:74:73:f6:6c:9f:63:
06:90:f4:0c:63:17:1a:ac:fc:c5:f3:db:29:af:98:00:39:be:
1a:6b:98:9a:e9:7d:8f:c4:3c:bb:0f:27:9e:0e:61:1e:e9:5d:
d0:58:97:a3:53:ed:34:e9:c5:8c:2e:44:06:24:81:23:54:5d:
66:e2:21:af:1c:2a:f5:a4:76:ce:3c:c7:b5:2d:b4:76:62:1f:
e9:17:76:eb:be:0e:fb:27:51:ed:26:1c:f6:14:b9:c1:ea:ca:
a9:c3:07:2b:49:49:7d:47:54:5d:66:84:22:62:e5:bf:d1:fa:
4a:63:d6:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZG9NDu0RiqMFx3nYxqqJGN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTA0MTMyMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzAyMjkwOGUxM2RjZWMxOGQ0MzdkODFlNDExOWExMWNmMTgwMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/vpfJh9mv8QqSl6oWHd53F4vDefB
bzIQ3uY8clUpFAXv0z6/qkjqonJVIg8vGHgaKmkqkLt5OYTt2xhQ30rqSCqNw8IW
u+yS9ahS1llaB7fnx3mIw4UR7O8fArL71nKtBdxNNMR7ioc9dMmtCK6ptuwxtgE3
T4EQD4lPnu/6Rtzgj+Kvp1QglSomC78V1SlsbuEJ0/8MXTUd/5WeiUDVqesIGRpz
phUQQjvAE6D++RLEpoNzcVu4VLnebCV4LcbLSUC9U556FkhQEWQQmqSDqmBWMVue
+6eQx/mRP/Cm1lfnNGv2RhGWDLSsRx+qb5HUsyun71RJ/Vow633lbsxYjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCMCKQjhPc7BjUN9geQRmhHPGAHzMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSXdJcENPRTl6c0dOUTMyQjVCR2FFYzhZQWZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHziMMA0G
CSqGSIb3DQEBCwUAA4IBAQCkTIJiO0g8TthzAX4H8RRo0znvZnKY3eF926Pdrel4
mlU7JyOeCbnp9AD3CyhhA0weOfFP0OT//kJUzqHde5PGTRi/ZSdbYFI+vFq414Zt
BW9krXElKp0eVSYeL3DzAzmQGabDNJWBDH2HDjlDSn2Lr0t9vlZRbz/ywRww4/Vk
cyI0xklOe3SvfuJ0c/Zsn2MGkPQMYxcarPzF89spr5gAOb4aa5ia6X2PxDy7Dyee
DmEe6V3QWJejU+006cWMLkQGJIEjVF1m4iGvHCr1pHbOPMe1LbR2Yh/pF3brvg77
J1HtJhz2FLnB6sqpwwcrSUl9R1RdZoQiYuW/0fpKY9b+
-----END CERTIFICATE-----
Generated at Fri Oct 4 10:23:21 2024 by rpki-client on console-ams.rpki-client.org