Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MQBCBJNAma70l9k5DNHhEv9exaU.roa
File: MQBCBJNAma70l9k5DNHhEv9exaU.roa (raw, json)
Hash identifier: 6i9Fslqx3lv2t+NY28eRkEIzHowSvKkcr/BlokabLOE=
Subject key identifier: 31:00:42:04:93:40:99:AE:F4:97:D9:39:0C:D1:E1:12:FF:5E:C5:A5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019198820242E9EEA22F72BC47E32E575A3C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MQBCBJNAma70l9k5DNHhEv9exaU.roa
Signing time: Wed 28 Aug 2024 10:22:22 +0000
ROA not before: Wed 28 Aug 2024 10:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.37.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 04:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:82:02:42:e9:ee:a2:2f:72:bc:47:e3:2e:57:5a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 28 10:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31004204934099aef497d9390cd1e112ff5ec5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:6a:0a:13:60:7a:47:08:87:fd:36:9f:a2:
0b:1d:27:6a:e7:92:55:a0:ff:2c:25:f3:91:f1:da:
38:23:7a:06:31:71:63:c6:ae:c6:2a:0d:0d:3d:44:
78:fc:89:39:e4:5a:8a:1c:c0:e6:45:77:f7:cf:a5:
5e:a1:2c:09:a3:8b:9e:ed:da:84:3f:e0:5d:57:a3:
07:90:c3:89:6c:fe:02:d9:89:34:53:e7:80:93:d0:
15:e6:7f:dc:22:25:6c:63:13:be:8e:49:81:1f:dd:
f7:cb:e6:99:3d:1f:14:ab:f3:10:c9:3d:5d:00:28:
86:30:f8:de:66:fa:0c:6b:3c:be:f3:42:bb:c1:4f:
50:26:76:f2:24:a7:92:c7:94:98:5a:e7:bf:f7:a5:
7b:46:c2:16:a4:6a:af:49:04:de:2e:5d:26:cf:ae:
15:eb:56:80:d9:7c:83:4f:03:c5:fd:93:96:b9:76:
85:c6:e8:ed:c7:b3:a9:74:3c:6d:36:ca:06:ee:2a:
a0:f5:14:62:1e:98:73:7e:0c:e5:1b:6c:4e:24:bd:
92:ee:27:75:39:96:69:bc:93:38:fe:b4:41:50:60:
ba:71:95:02:d7:cb:a3:b7:ef:8f:59:d5:d7:6f:b6:
41:8a:db:30:45:9c:c7:2b:6c:47:40:7f:fb:68:7e:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:00:42:04:93:40:99:AE:F4:97:D9:39:0C:D1:E1:12:FF:5E:C5:A5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MQBCBJNAma70l9k5DNHhEv9exaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.37.0/24
31.56.89.0/24
31.56.112.0/21
Signature Algorithm: sha256WithRSAEncryption
81:63:8f:0a:fe:df:92:34:e8:dc:46:db:37:b5:ca:3e:ca:d5:
ef:5e:8f:72:88:43:67:93:f7:e6:49:a9:2c:4b:47:62:7a:61:
ac:fe:2e:5a:98:30:03:7d:29:3f:0f:3a:d5:19:7d:7f:fc:af:
b2:bc:c1:c9:bb:de:72:1b:10:95:aa:89:bb:47:b1:5e:1f:fc:
d2:2e:f9:58:8f:92:45:ab:99:21:6c:82:e2:8d:58:3f:12:5f:
8b:08:e5:6f:db:63:4e:67:e8:eb:ef:b9:59:be:86:37:77:5d:
55:9d:0c:89:16:75:8b:27:a5:c0:ce:e2:cf:75:8b:10:78:ae:
7d:f6:de:60:6d:09:6b:8b:b0:81:1c:55:86:64:37:94:14:17:
15:6f:d6:ee:f5:b2:5b:bb:bb:2c:d8:2c:98:e2:c6:35:ab:1c:
4e:59:df:3f:10:00:a2:ff:7f:cf:f5:9a:fe:73:d7:ee:4a:ed:
72:ef:4a:33:56:94:af:3d:c7:c4:d8:75:41:0e:a4:87:b9:f9:
9b:8a:9d:83:c3:3c:ed:13:7b:0d:a9:fc:d2:a4:6b:ba:f8:91:
1c:bd:ba:36:ad:57:08:11:ab:01:a8:af:b7:2a:96:28:0e:92:
77:ca:ec:a6:4e:e0:2c:0f:75:91:24:54:71:11:44:12:0b:82:
18:c4:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 05:49:39 2024 by rpki-client on console-fra.rpki-client.org