Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KqtaXAAmwGvKIJO1NmsZxJYdbis.roa
File: KqtaXAAmwGvKIJO1NmsZxJYdbis.roa (raw, json)
Hash identifier: HHyoHCsAsN2fv24UPYtFFrCY3mcvfjkEo4iO0RU4eko=
Subject key identifier: 2A:AB:5A:5C:00:26:C0:6B:CA:20:93:B5:36:6B:19:C4:96:1D:6E:2B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019194CBB0DC46BC7862EBD0ABC5ECE214C7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KqtaXAAmwGvKIJO1NmsZxJYdbis.roa
Signing time: Tue 27 Aug 2024 17:04:22 +0000
ROA not before: Tue 27 Aug 2024 17:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 31.56.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 15:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:94:cb:b0:dc:46:bc:78:62:eb:d0:ab:c5:ec:e2:14:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 27 17:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2aab5a5c0026c06bca2093b5366b19c4961d6e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:0e:01:b4:ea:5a:2a:93:c1:51:d6:48:fb:
8d:57:ab:b0:2c:52:6a:82:90:e0:3d:45:a9:16:6f:
42:48:8b:6f:db:eb:a0:a5:c8:21:53:60:6c:72:fb:
66:48:f4:22:68:d3:96:89:c4:91:4c:57:1f:93:1b:
0d:bf:4a:ea:93:74:49:fa:60:60:48:dd:ae:eb:7f:
79:42:72:ac:4b:aa:77:70:21:96:77:c0:f8:85:d6:
39:20:10:f4:5d:a5:0f:da:9a:23:0f:c2:43:b2:46:
0b:e4:ce:12:88:05:db:f2:e4:87:95:34:c2:00:51:
6d:24:b0:e0:06:22:ff:ef:01:d3:b8:2d:f3:2d:19:
1c:24:f3:cf:f5:61:86:85:f1:43:b0:d2:61:47:ac:
68:27:d2:26:6f:e0:b9:2c:bd:f9:3b:2b:bf:ef:95:
17:6d:31:86:d4:42:a3:1c:4a:af:a1:4e:d1:7d:57:
46:66:d6:89:ca:b3:72:c5:b2:a5:15:8a:33:b5:99:
82:16:02:a7:21:65:91:a9:89:bc:ff:96:a8:cc:66:
74:6d:85:d3:7e:29:0d:c9:00:5a:e0:77:a9:74:21:
29:c1:70:b5:2d:b9:43:30:b3:6a:13:b6:c7:a6:d9:
25:e9:21:00:2e:9c:81:05:68:c8:df:80:93:cc:ec:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AB:5A:5C:00:26:C0:6B:CA:20:93:B5:36:6B:19:C4:96:1D:6E:2B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KqtaXAAmwGvKIJO1NmsZxJYdbis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/24
Signature Algorithm: sha256WithRSAEncryption
24:45:25:2f:e5:24:a7:34:7d:31:28:59:89:10:79:b3:9c:5f:
a9:ea:4d:e7:66:ea:3f:c0:b2:03:9c:f1:ee:09:74:9a:dc:2e:
a4:f0:9c:06:28:9f:d6:1f:62:40:b8:a6:f4:2e:03:92:e6:e8:
d8:58:72:e1:8c:b4:01:2d:e0:50:3a:2d:53:a5:0a:66:25:ba:
d9:e6:26:80:6f:be:6d:2e:c4:b4:29:a0:d7:8a:e7:4c:c9:17:
af:d0:e2:85:10:32:3b:49:d6:ae:c5:8e:eb:74:4c:b6:2e:31:
ab:92:3c:65:5b:20:1a:e3:bd:5a:d1:4e:37:71:63:4f:bf:24:
6c:06:e9:d1:ea:96:d7:69:17:49:09:75:72:d7:70:e3:52:56:
cb:7f:39:44:42:c7:bc:0f:04:66:42:a7:28:df:d2:cd:c5:69:
0c:76:2b:ad:43:f4:d2:4b:54:09:09:3b:60:70:9a:3b:d4:44:
28:3e:6c:52:c3:2e:74:ad:c7:3a:6a:b8:d2:87:94:01:31:e4:
a7:d4:45:51:ef:c8:0f:c5:21:1e:b6:c5:75:cd:21:23:b3:fb:
84:d2:7b:e3:46:c2:a7:05:3f:9a:76:53:80:18:09:0d:9c:10:
fa:6a:f4:1f:84:ad:b1:66:14:3a:ec:9d:29:aa:af:1f:38:84:
05:d7:29:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGUy7DcRrx4YuvQq8Xs4hTHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwODI3MTcwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWFiNWE1YzAwMjZjMDZiY2EyMDkzYjUzNjZiMTljNDk2MWQ2ZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsYOAbTqWiqTwVHWSPuNV6uwLFJq
gpDgPUWpFm9CSItv2+ugpcghU2BscvtmSPQiaNOWicSRTFcfkxsNv0rqk3RJ+mBg
SN2u6395QnKsS6p3cCGWd8D4hdY5IBD0XaUP2pojD8JDskYL5M4SiAXb8uSHlTTC
AFFtJLDgBiL/7wHTuC3zLRkcJPPP9WGGhfFDsNJhR6xoJ9Imb+C5LL35Oyu/75UX
bTGG1EKjHEqvoU7RfVdGZtaJyrNyxbKlFYoztZmCFgKnIWWRqYm8/5aozGZ0bYXT
fikNyQBa4HepdCEpwXC1LblDMLNqE7bHptkl6SEALpyBBWjI34CTzOwZyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCqrWlwAJsBryiCTtTZrGcSWHW4rMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvS3F0YVhBQW13R3ZLSUpPMU5tc1p4SllkYmlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgEMA0G
CSqGSIb3DQEBCwUAA4IBAQAkRSUv5SSnNH0xKFmJEHmznF+p6k3nZuo/wLIDnPHu
CXSa3C6k8JwGKJ/WH2JAuKb0LgOS5ujYWHLhjLQBLeBQOi1TpQpmJbrZ5iaAb75t
LsS0KaDXiudMyRev0OKFEDI7SdauxY7rdEy2LjGrkjxlWyAa471a0U43cWNPvyRs
BunR6pbXaRdJCXVy13DjUlbLfzlEQse8DwRmQqco39LNxWkMdiutQ/TSS1QJCTtg
cJo71EQoPmxSwy50rcc6arjSh5QBMeSn1EVR78gPxSEetsV1zSEjs/uE0nvjRsKn
BT+adlOAGAkNnBD6avQfhK2xZhQ67J0pqq8fOIQF1yk/
-----END CERTIFICATE-----
Generated at Mon Oct 7 20:37:57 2024 by rpki-client on console-fra.rpki-client.org