Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JTdLfvSmuoMV6Pp8nyp9zjMno-c.roa
File: JTdLfvSmuoMV6Pp8nyp9zjMno-c.roa (raw, json)
Hash identifier: 3EX5DxMagGFy68t9UuJome3C7ozJQcNQ++PAVWnu0XA=
Subject key identifier: 25:37:4B:7E:F4:A6:BA:83:15:E8:FA:7C:9F:2A:7D:CE:33:27:A3:E7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019140F06F8A1729CE7440E9382A993070A9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JTdLfvSmuoMV6Pp8nyp9zjMno-c.roa
Signing time: Sun 11 Aug 2024 10:16:24 +0000
ROA not before: Sun 11 Aug 2024 10:16:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215269
IP address blocks: 31.56.66.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 07:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:40:f0:6f:8a:17:29:ce:74:40:e9:38:2a:99:30:70:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 11 10:16:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25374b7ef4a6ba8315e8fa7c9f2a7dce3327a3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:a9:de:05:84:8b:6c:42:14:78:a6:71:ac:
7b:93:ff:a6:5b:01:4d:67:45:79:62:04:c5:5f:b6:
b5:12:d9:4a:61:76:b7:5b:cc:50:31:19:58:9b:14:
21:0c:de:24:1f:8b:66:3a:96:fc:9a:09:c7:ae:8c:
54:91:2a:c4:03:7d:8b:05:d1:b7:cf:2c:56:4b:47:
f3:52:e0:7a:da:d8:a7:78:a7:4e:e7:3c:23:0a:42:
63:39:1b:8e:fb:4d:32:27:63:9e:5d:e4:e6:8f:68:
29:77:f0:1e:13:99:ee:9b:3c:e7:7d:64:d6:d2:42:
45:76:fc:97:d5:26:6c:c2:1c:a6:47:47:d9:c5:96:
c7:fa:97:a4:34:26:02:77:be:62:d5:4f:f8:d0:97:
b7:62:ee:94:6b:8e:d0:db:37:32:2e:2f:17:ea:4c:
df:ec:45:47:8d:b1:3e:3a:a8:c6:bc:18:5d:0d:96:
1d:bb:dc:49:fc:26:60:39:11:f7:7d:ba:93:46:73:
db:b0:93:55:6a:06:c9:7d:c8:41:0e:ba:cc:5b:97:
2e:5a:ef:9d:1b:0c:e7:a8:d4:90:8a:60:bc:ea:a1:
70:fc:3a:ee:fe:52:63:2d:21:7e:f7:e4:bf:05:46:
66:ac:15:25:40:f2:b3:28:16:d7:29:3d:2c:ee:5d:
e0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:4B:7E:F4:A6:BA:83:15:E8:FA:7C:9F:2A:7D:CE:33:27:A3:E7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JTdLfvSmuoMV6Pp8nyp9zjMno-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.66.0/24
31.56.88.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:be:4f:48:f1:6c:49:1f:7f:e1:56:45:65:dd:b2:bd:53:2e:
6e:0e:17:e9:cf:bc:21:ee:0a:45:23:82:ed:42:07:c5:64:12:
93:5a:1b:0d:c4:06:c1:2d:c7:d5:fb:9a:16:57:0e:c0:97:b4:
a5:00:35:62:c7:b1:8d:d4:fe:17:47:d5:42:ec:81:18:13:bf:
f5:30:d5:bd:81:ba:69:c1:31:c8:35:2e:8f:59:ad:9b:d2:c5:
01:e8:14:8b:72:e0:f8:34:3b:05:09:24:0d:d0:ba:6c:d6:d6:
16:ad:b6:ed:12:4b:2a:63:94:b1:fe:05:9f:85:69:dd:62:98:
a2:3b:e7:fa:8c:98:09:11:e0:98:02:a1:b4:97:03:b6:d7:54:
72:78:53:f1:83:c7:f7:a8:a9:55:92:82:2b:8c:15:80:d3:ef:
0c:27:20:f3:54:73:a3:c2:18:78:48:c3:aa:13:ca:f0:b1:65:
17:38:32:44:38:42:e2:5f:23:8f:99:5f:eb:a6:b8:1f:89:46:
a5:32:1d:84:d1:09:bf:a9:34:3d:b7:67:eb:5b:e9:93:cb:ad:
c8:a8:cf:0e:74:c9:60:5f:8c:6c:34:a0:82:bc:f9:71:99:e5:
37:50:d0:a8:93:f1:de:5d:fd:3e:b7:fa:45:55:6c:c8:d6:7b:
64:b1:47:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 09:08:50 2024 by rpki-client on console-fra.rpki-client.org