Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Jh8ZytV8Vjy1YUp_IbI0T3zRtjc.roa
File: Jh8ZytV8Vjy1YUp_IbI0T3zRtjc.roa (raw, json)
Hash identifier: cpULyTaunbgLv8GN6+jKUlhkXgYC0Qx4lB9yRHH6TSs=
Subject key identifier: 26:1F:19:CA:D5:7C:56:3C:B5:61:4A:7F:21:B2:34:4F:7C:D1:B6:37
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192EBB9498E6CCA0977DFC7EB7766C13EB8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Jh8ZytV8Vjy1YUp_IbI0T3zRtjc.roa
Signing time: Sat 02 Nov 2024 07:14:01 +0000
ROA not before: Sat 02 Nov 2024 07:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.6.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.37.0/24 maxlen: 24
31.56.39.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.134.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.240.0/22 maxlen: 24
31.57.244.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 15:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:eb:b9:49:8e:6c:ca:09:77:df:c7:eb:77:66:c1:3e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 2 07:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=261f19cad57c563cb5614a7f21b2344f7cd1b637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:55:12:57:22:52:e9:4d:c3:b9:8e:df:37:
dc:2c:53:71:b3:f8:b0:0c:53:ad:71:5a:06:24:3a:
7d:6f:5e:b9:1f:b8:01:39:9f:1f:36:78:2d:24:4c:
fb:02:27:77:df:83:ee:ff:13:b4:00:17:40:80:f7:
f2:79:8d:61:4d:ee:09:53:ce:b8:f9:b0:77:54:67:
a5:52:48:fd:97:f2:db:f6:2b:29:be:fa:59:14:cc:
15:ed:90:0d:33:62:2c:bd:09:23:71:f6:c1:0a:6a:
91:cc:97:c7:0f:a1:b8:1c:41:2b:2d:d8:2f:a5:dd:
8e:15:c7:e3:d2:01:0e:e5:c3:bd:6b:cd:32:4c:e9:
96:11:93:c8:27:dc:90:3a:62:ad:be:c0:8a:37:49:
1d:82:a5:61:9b:0d:06:4f:89:d3:cf:c9:95:d8:38:
7c:c1:31:49:9a:ad:4d:57:0f:49:fd:49:31:27:b9:
aa:a4:45:53:56:e5:2c:41:77:95:1d:eb:9c:10:cd:
d4:b4:0a:97:c5:b1:b5:27:6d:12:53:15:02:a3:7b:
61:fa:54:00:ba:e0:9e:14:aa:13:80:10:3e:c9:8d:
dc:4e:cf:48:cb:45:59:14:c8:b8:67:d2:80:77:3e:
29:d8:7b:fa:4a:04:e0:00:17:da:f2:2b:94:fb:0a:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1F:19:CA:D5:7C:56:3C:B5:61:4A:7F:21:B2:34:4F:7C:D1:B6:37
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Jh8ZytV8Vjy1YUp_IbI0T3zRtjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0-31.56.6.255
31.56.24.0/24
31.56.37.0/24
31.56.39.0/24
31.56.42.0/23
31.56.66.0/24
31.56.85.0/24
31.56.89.0/24
31.56.112.0-31.56.123.255
31.56.127.0/24
31.57.0.0-31.57.9.255
31.57.132.0-31.57.134.255
31.57.176.0/21
31.57.192.0/22
31.57.224.0/22
31.57.232.0/22
31.57.240.0/21
31.57.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:3c:56:e5:f6:2f:4e:88:10:f7:2e:f4:a9:fc:5e:f8:15:dc:
5b:de:07:97:5f:6e:1f:f8:71:30:4b:36:fe:aa:f6:52:48:3d:
7f:36:e6:61:f1:c8:6e:7d:9e:6e:8c:bc:59:e2:18:9a:7d:7e:
29:d6:b2:81:39:22:bf:ed:34:39:0e:bf:3e:42:4a:ea:3a:66:
ee:b0:87:a4:24:96:a9:c4:ab:c6:db:2a:1c:3b:40:ed:fd:c5:
ac:8e:8a:d3:f0:44:7c:f9:ba:6d:3b:11:f4:6d:b5:f0:4e:d9:
e3:6e:08:f4:e8:43:00:49:61:bd:18:8a:d3:f2:78:8a:09:d9:
4e:64:7d:f3:23:02:92:77:1c:5d:8a:2f:aa:0c:8d:3c:02:85:
be:78:f4:30:4f:b7:a5:63:4b:3a:e9:29:47:c3:58:26:ad:2e:
70:b0:91:da:90:ae:44:5f:e3:06:7f:9c:1c:79:99:1a:02:5d:
c7:82:34:54:a7:1c:c3:f0:e1:dc:99:e8:40:7a:48:86:f8:65:
61:60:7f:54:9b:9c:22:f0:b5:52:1c:84:c8:83:9d:79:42:45:
ba:1f:48:d7:5e:66:75:fe:89:d6:b4:47:b3:97:a3:2e:26:d9:
24:96:57:50:57:4c:a2:a8:a3:54:e9:7c:b3:9b:28:23:b3:60:
e2:b6:f0:36
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZLruUmObMoJd9/H63dmwT64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTAyMDcxNDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjFmMTljYWQ1N2M1NjNjYjU2MTRhN2YyMWIyMzQ0ZjdjZDFiNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSlVElciUulNw7mO3zfcLFNxs/iw
DFOtcVoGJDp9b165H7gBOZ8fNngtJEz7Aid334Pu/xO0ABdAgPfyeY1hTe4JU864
+bB3VGelUkj9l/Lb9ispvvpZFMwV7ZANM2IsvQkjcfbBCmqRzJfHD6G4HEErLdgv
pd2OFcfj0gEO5cO9a80yTOmWEZPIJ9yQOmKtvsCKN0kdgqVhmw0GT4nTz8mV2Dh8
wTFJmq1NVw9J/UkxJ7mqpEVTVuUsQXeVHeucEM3UtAqXxbG1J20SUxUCo3th+lQA
uuCeFKoTgBA+yY3cTs9Iy0VZFMi4Z9KAdz4p2Hv6SgTgABfa8iuU+wqyvwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFCYfGcrVfFY8tWFKfyGyNE980bY3MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSmg4Wnl0VjhWankxWVVwX0liSTBUM3pSdGpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGoBggrBgEFBQcBBwEB/wSBmDCBlTCBkgQCAAEwgYswDAME
Ah84BAMEAB84BgMEAB84GAMEAB84JQMEAB84JwMEAR84KgMEAB84QgMEAB84VQME
AB84WTAMAwQEHzhwAwQCHzh4AwQAHzh/MAsDAwAfOQMEAR85CDAMAwQCHzmEAwQA
HzmGAwQDHzmwAwQCHznAAwQCHzngAwQCHznoAwQDHznwAwQCHzn8MA0GCSqGSIb3
DQEBCwUAA4IBAQC1PFbl9i9OiBD3LvSp/F74Fdxb3geXX24f+HEwSzb+qvZSSD1/
NuZh8chufZ5ujLxZ4hiafX4p1rKBOSK/7TQ5Dr8+QkrqOmbusIekJJapxKvG2yoc
O0Dt/cWsjorT8ER8+bptOxH0bbXwTtnjbgj06EMASWG9GIrT8niKCdlOZH3zIwKS
dxxdii+qDI08AoW+ePQwT7elY0s66SlHw1gmrS5wsJHakK5EX+MGf5wceZkaAl3H
gjRUpxzD8OHcmehAekiG+GVhYH9Um5wi8LVSHITIg515QkW6H0jXXmZ1/onWtEez
l6MuJtkklldQV0yiqKNU6Xyzmygjs2DitvA2
-----END CERTIFICATE-----
Generated at Sat Nov 2 21:19:10 2024 by rpki-client on console-ams.rpki-client.org