Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JvqeK6spiyeAqz6eFFvAOaPp-t8.roa
File: JvqeK6spiyeAqz6eFFvAOaPp-t8.roa (raw, json)
Hash identifier: lHgQcAJ1E0sUrbh8hMCPiHEjgjvYAnR5olwCFVMCo7E=
Subject key identifier: 26:FA:9E:2B:AB:29:8B:27:80:AB:3E:9E:14:5B:C0:39:A3:E9:FA:DF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191BD3D640EBA300861011175F7862E48C8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JvqeK6spiyeAqz6eFFvAOaPp-t8.roa
Signing time: Wed 04 Sep 2024 13:33:22 +0000
ROA not before: Wed 04 Sep 2024 13:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.192.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.204.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.232.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 07:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:3d:64:0e:ba:30:08:61:01:11:75:f7:86:2e:48:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 4 13:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26fa9e2bab298b2780ab3e9e145bc039a3e9fadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:d6:1b:ab:12:f4:d8:30:52:57:a4:3c:92:
a2:08:31:50:40:61:85:95:a7:f2:44:7f:8b:4f:0c:
1b:63:0d:0e:01:e7:0b:70:15:ff:10:38:77:fe:bf:
50:50:56:51:60:e6:3c:2f:77:ba:e1:c8:c4:f8:61:
d5:7c:e2:65:6d:71:04:c0:d4:2e:6a:8c:67:04:f1:
9f:a5:52:2e:07:8c:d1:9b:03:cf:ab:71:5b:08:a6:
8f:5c:95:e1:41:46:bc:59:c9:4a:cf:2b:30:97:d1:
59:b8:b8:81:9f:03:16:e6:c7:9b:79:3a:9d:ac:b1:
ae:e9:55:de:63:10:9d:09:87:09:14:90:49:fd:08:
55:3f:19:d3:3f:69:0f:b0:1e:4a:b4:1f:c4:21:55:
67:1a:40:60:64:87:94:5e:46:af:48:5c:0e:5a:96:
95:68:2c:80:10:87:38:33:7a:61:a7:b5:37:a2:c7:
94:08:d0:89:b8:b8:26:57:dc:08:5b:ab:02:00:59:
93:06:9b:0a:b1:d2:35:8b:16:3f:fd:97:26:19:a9:
9f:3b:8a:fc:4f:0e:35:c1:39:ae:a6:4b:ea:44:90:
b9:82:fa:13:f7:aa:6e:16:39:6d:cb:f4:cd:ce:6a:
65:b7:dc:52:3c:54:6b:26:66:b3:f1:0e:4a:b2:99:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FA:9E:2B:AB:29:8B:27:80:AB:3E:9E:14:5B:C0:39:A3:E9:FA:DF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JvqeK6spiyeAqz6eFFvAOaPp-t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.176.0-31.56.239.255
Signature Algorithm: sha256WithRSAEncryption
a9:f4:84:52:eb:a2:1b:6e:9f:81:13:39:21:e8:d6:47:c7:0a:
55:f6:e0:f6:68:e6:3b:98:96:b1:ff:13:33:60:58:89:a0:0c:
4e:21:49:47:6f:34:56:a8:f5:63:2a:57:29:69:69:98:24:ef:
51:95:38:2b:d0:da:c1:07:8c:10:1a:45:89:19:b1:de:b0:2c:
3e:db:da:27:84:e1:49:41:10:f6:49:2c:42:e7:d3:e1:da:a9:
79:a4:05:da:9c:da:da:ff:69:6c:b8:fe:97:2c:66:f6:26:c3:
52:8d:76:27:cd:00:d9:66:00:a5:ef:de:aa:1f:fe:46:13:4e:
7c:79:6d:df:87:36:3c:d3:79:d7:bd:e5:c4:92:b2:b1:c3:24:
0f:6e:23:53:17:9a:ac:5e:3f:93:52:b5:e7:e1:d6:99:23:a6:
c8:35:10:70:dc:0c:4d:ee:6a:9a:6b:97:b5:fb:1b:fe:a8:d7:
16:8c:d7:9e:04:7d:97:f9:8b:3c:d3:74:6a:41:dd:eb:28:58:
8c:b3:97:f7:46:76:33:6b:6e:d8:59:59:5f:18:30:bd:86:6e:
1a:71:69:d3:9b:f8:08:0b:e8:30:14:4e:97:27:89:77:f0:8d:
f8:b5:8b:a6:81:0d:2c:83:d5:51:62:82:5b:17:d7:de:58:2a:
9c:11:62:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 08:48:33 2024 by rpki-client on console-ams.rpki-client.org