Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lx6drabhicLCQnNDRmv089PiclU.roa
File: Lx6drabhicLCQnNDRmv089PiclU.roa (raw, json)
Hash identifier: b/veTTToncxUn0WpcALqSZLdyZM4cFhQX2BQ37EOZ28=
Subject key identifier: 2F:1E:9D:AD:A6:E1:89:C2:C2:42:73:43:46:6B:F4:F3:D3:E2:72:55
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192AF398D92768781FD83A073A6EEAC3E66
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lx6drabhicLCQnNDRmv089PiclU.roa
Signing time: Mon 21 Oct 2024 13:17:17 +0000
ROA not before: Mon 21 Oct 2024 13:17:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 08:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:39:8d:92:76:87:81:fd:83:a0:73:a6:ee:ac:3e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 21 13:17:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f1e9dada6e189c2c2427343466bf4f3d3e27255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:8f:c0:7c:6e:5a:d2:4e:56:85:e8:c1:a2:
20:f5:9b:e1:64:50:93:f4:ce:a6:fe:e7:61:20:20:
20:3f:76:45:95:dd:e8:c3:bf:08:c6:a7:c4:52:2f:
b2:2f:93:ca:58:7c:14:0f:bd:cd:61:0d:89:f0:fc:
03:01:78:e7:26:c7:55:0a:7f:cf:0f:25:e2:15:4e:
8a:55:c0:27:51:78:90:d1:0f:43:fc:b7:7a:f4:bb:
10:35:e8:b7:7e:c2:bc:54:ed:3a:b3:ab:f0:3d:1a:
6a:16:45:9b:55:b7:c7:16:32:90:1b:b0:14:f3:70:
88:7f:90:ee:5f:61:63:39:f5:3d:95:35:51:77:04:
59:58:12:1f:d8:69:f2:c0:f7:cf:da:ae:b5:86:36:
a3:83:d6:eb:2f:24:ca:c2:55:b6:b3:8d:ad:f6:ac:
9b:ea:7c:0a:4f:a7:a2:72:af:70:b4:f4:7f:83:c6:
19:a4:ba:c1:f9:cf:90:7a:f1:b4:a1:3a:09:50:eb:
e6:5a:f4:c3:1c:b0:10:d4:a5:d1:71:4a:9e:c8:ac:
bf:47:02:e6:7e:67:b7:4f:78:65:a2:8e:42:72:e4:
bc:25:b5:8b:02:3d:02:ef:15:b1:5e:7d:43:6c:a3:
24:9e:38:16:4e:2d:8b:39:f1:e7:b6:03:eb:ec:b8:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1E:9D:AD:A6:E1:89:C2:C2:42:73:43:46:6B:F4:F3:D3:E2:72:55
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lx6drabhicLCQnNDRmv089PiclU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:c4:f3:4b:2c:c2:eb:4f:1d:de:01:d4:1d:29:74:76:bc:6e:
34:14:b1:79:e3:98:1b:be:8a:0a:5d:66:79:63:18:d7:28:75:
9c:20:e8:9a:7b:d1:42:6e:24:42:60:91:c2:6d:c1:e7:72:1f:
4e:1c:5e:e0:e0:1d:f7:45:48:61:b1:ab:70:99:dd:27:c4:b6:
3a:5b:aa:1a:cf:09:25:ff:a6:27:7a:5c:c5:81:c7:2a:a3:e6:
f4:17:99:f7:c1:02:81:22:75:33:46:f8:2f:bf:0f:ca:b6:ab:
a6:bc:1b:3c:94:56:c5:1d:99:8b:3c:9d:bb:07:c5:e7:8b:96:
b9:2e:53:db:d1:b5:9d:75:d6:f2:c8:56:1f:2d:2f:67:fa:14:
33:18:13:90:fb:49:2a:ba:80:76:89:29:e5:2a:9d:0b:06:69:
2d:6d:aa:f3:5e:61:a7:49:bf:2d:51:c8:91:5e:f0:b8:81:98:
0f:71:ee:4f:e6:b1:34:0f:4b:28:ec:07:1b:83:6c:2b:b3:d0:
6c:9f:06:2f:45:bf:28:f9:fb:44:b7:7e:6a:5e:87:3f:e3:17:
04:f0:bc:6a:69:df:20:a2:04:b1:5e:0a:19:91:72:3b:e4:b3:
14:1f:3e:cb:15:db:99:f9:c6:90:e2:28:64:61:66:73:07:88:
f2:10:c0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 11:10:50 2024 by rpki-client on console-fra.rpki-client.org