Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MOsAJy16b93-qNX1NGDtt6UoPx4.roa
File: MOsAJy16b93-qNX1NGDtt6UoPx4.roa (raw, json)
Hash identifier: VeaMJ3HZaiDxlVqElVQVqi/SF4bVSdbtjxYXL6huJEc=
Subject key identifier: 30:EB:00:27:2D:7A:6F:DD:FE:A8:D5:F5:34:60:ED:B7:A5:28:3F:1E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019142C1866B77AD8449FEE54033B2137A27
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MOsAJy16b93-qNX1NGDtt6UoPx4.roa
Signing time: Sun 11 Aug 2024 18:44:24 +0000
ROA not before: Sun 11 Aug 2024 18:44:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216129
IP address blocks: 31.56.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 07:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:42:c1:86:6b:77:ad:84:49:fe:e5:40:33:b2:13:7a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 11 18:44:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30eb00272d7a6fddfea8d5f53460edb7a5283f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:95:04:51:c3:60:27:60:cc:f9:21:c6:4e:
4e:89:9e:b3:06:ed:2d:b9:49:c7:b9:28:b2:d8:7e:
ed:c4:65:e6:73:73:96:05:ce:10:1c:f3:2d:cd:2a:
9b:4e:90:e5:3f:d6:16:49:c7:18:82:6b:c1:da:d5:
ad:f2:88:46:bf:af:e7:49:8a:57:db:85:17:45:80:
35:00:a3:b2:e3:2d:33:3b:5f:8e:e5:c6:4a:c5:c0:
8c:94:56:aa:dc:c0:5b:c9:1f:24:98:4b:2a:5f:65:
eb:35:63:24:47:14:f5:15:91:9d:c6:11:1e:a7:c3:
e0:1e:a2:0d:5f:b2:a8:0e:3f:49:39:50:d4:54:6d:
df:5b:82:3d:17:71:0e:f5:15:6a:c1:3e:62:b3:8c:
c9:80:f5:20:9c:62:6e:2f:53:e6:ff:84:4e:47:2a:
33:9f:ee:53:cf:da:53:1c:3b:38:d6:a4:d4:ea:ea:
63:0e:25:16:28:d2:39:5e:55:7b:72:37:77:cf:25:
ef:1e:aa:2a:ad:37:f0:90:d9:c3:e0:a5:d6:3c:3b:
9b:b0:9e:12:2e:42:7f:9c:34:b3:04:05:10:3b:3f:
76:7e:d0:0e:cc:1a:04:be:99:0b:9a:a5:5a:d3:59:
43:27:c9:aa:64:4d:d2:4c:be:12:25:61:89:6e:8c:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EB:00:27:2D:7A:6F:DD:FE:A8:D5:F5:34:60:ED:B7:A5:28:3F:1E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MOsAJy16b93-qNX1NGDtt6UoPx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3e:28:ed:d8:1e:3e:f5:24:31:13:08:11:03:c0:f7:5d:91:
f8:15:35:cc:59:ef:3e:4b:5f:e2:e2:cf:28:42:e2:ed:4e:de:
d4:ad:3a:b9:f7:f4:11:7f:f0:ca:35:ef:98:0c:11:c5:e7:a1:
18:26:47:86:70:24:2f:4a:c7:f8:cc:96:58:fc:ad:ec:da:be:
4f:f2:d2:1d:17:54:d7:c2:c1:9f:74:f9:86:27:74:03:9e:54:
f3:a3:31:34:71:62:ca:4c:2b:27:67:b7:35:1d:ca:6c:40:1c:
8c:ce:3c:31:91:a4:21:43:9d:d6:7b:ec:95:12:c7:55:eb:e9:
3a:de:7f:ab:e1:60:39:c6:52:68:be:bf:8d:59:c2:ab:d3:24:
28:64:b7:64:c1:cd:b5:fd:15:e9:50:35:1f:5d:ec:62:7f:a9:
d8:48:10:8b:50:7b:51:65:b7:16:cd:3d:8a:90:57:b2:94:bf:
8e:26:db:4d:f8:8a:20:41:f5:ca:1b:be:87:63:d0:8b:bb:de:
3d:5a:6e:92:0a:1f:26:74:9d:07:33:5f:8e:d4:16:65:2b:bc:
e2:1f:71:37:48:b2:d8:ae:7d:e7:22:aa:01:56:29:ed:14:c3:
80:9e:ec:be:f2:98:12:8f:61:7e:50:e6:56:b3:4d:a5:bf:c3:
45:78:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 09:08:50 2024 by rpki-client on console-fra.rpki-client.org