Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MvrCDZQIPIVRAzaKeRcqCUgAB70.roa
File: MvrCDZQIPIVRAzaKeRcqCUgAB70.roa (raw, json)
Hash identifier: nKP4dF5DXMpnGthVz65CWo2RC/RvaAByDyj8N6GpoS4=
Subject key identifier: 32:FA:C2:0D:94:08:3C:85:51:03:36:8A:79:17:2A:09:48:00:07:BD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01928F9A11A2C8691AB091116142346C74A1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MvrCDZQIPIVRAzaKeRcqCUgAB70.roa
Signing time: Tue 15 Oct 2024 09:54:51 +0000
ROA not before: Tue 15 Oct 2024 09:54:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.139.0/24 maxlen: 24
31.56.140.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 09:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:9a:11:a2:c8:69:1a:b0:91:11:61:42:34:6c:74:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 15 09:54:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32fac20d94083c855103368a79172a09480007bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:85:e3:ef:80:19:97:34:11:3c:51:6c:39:
26:06:70:7f:b8:1b:72:ad:6f:c7:10:de:f0:f4:f4:
96:3f:aa:56:d6:d0:3b:c6:6d:9d:fe:a2:67:bb:47:
1f:ee:70:09:10:b8:17:98:86:89:32:ae:ce:0a:e5:
5f:8d:63:a8:33:b1:54:d4:b8:e1:71:88:0d:00:60:
d5:e8:fd:86:77:ac:ba:c2:59:77:d3:07:91:f3:5d:
e5:3c:2c:8a:14:36:fe:50:16:9f:73:2f:3d:f8:13:
c6:fb:96:5f:05:ee:8c:9e:3f:57:d4:69:fa:f4:7b:
14:90:32:00:d5:db:f2:f3:c5:6b:63:e7:f0:89:65:
77:9f:96:8d:9e:8c:1d:b8:bb:aa:9b:00:21:0c:dc:
d7:db:a6:85:8d:40:f0:0d:0a:bd:5e:90:30:39:4e:
a3:ed:a6:8e:87:98:58:48:fb:68:d1:fc:6f:1b:44:
61:22:73:53:1c:a2:26:83:49:d7:5c:81:db:08:16:
e9:ca:62:45:29:2f:a4:c3:4a:8d:66:4c:63:3f:0a:
a1:de:52:75:c6:d5:1b:ef:c5:12:c2:67:9a:ea:f6:
d9:ac:4f:e1:6f:19:dd:6a:68:9e:90:93:72:2a:c1:
2e:6a:8d:39:6a:64:5f:f3:c4:cc:42:7d:8e:e3:fe:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FA:C2:0D:94:08:3C:85:51:03:36:8A:79:17:2A:09:48:00:07:BD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MvrCDZQIPIVRAzaKeRcqCUgAB70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.42.0/23
31.56.66.0/24
31.56.89.0/24
31.56.112.0-31.56.123.255
31.56.137.0/24
31.56.139.0-31.56.140.255
31.56.147.0/24
31.57.0.0-31.57.9.255
31.57.132.0/23
31.57.176.0/21
Signature Algorithm: sha256WithRSAEncryption
47:13:15:22:85:86:f8:2b:33:00:0d:43:4e:47:e2:ce:e4:5d:
07:ca:1a:43:30:20:c9:6a:bc:7f:ef:5f:ed:3b:38:03:e3:78:
5c:9e:05:8c:ea:f9:87:bb:f1:28:01:94:da:9d:9b:5c:a6:b2:
69:e7:31:ba:27:76:c1:81:b7:f2:43:92:8f:fb:53:1b:31:5f:
cd:3c:06:18:02:a1:49:94:f4:75:7e:f6:59:0e:f8:7d:2c:ec:
00:71:17:67:b2:7e:8d:3c:3c:89:92:88:a4:28:1d:f7:e2:04:
53:16:8a:89:98:a1:45:44:95:d8:8e:53:82:9f:61:f3:6c:f3:
a4:c2:c6:bc:b2:90:84:64:e0:cb:05:6c:85:80:22:fb:0c:47:
86:fe:87:62:71:b3:80:ff:30:54:8a:52:e9:b3:f7:0c:83:cc:
18:ad:e2:a6:a6:cb:e9:a0:e8:2e:eb:a9:4a:f6:89:91:6e:67:
71:c1:e3:63:7c:5b:eb:79:70:56:98:ea:23:90:2b:d3:87:3e:
f1:f6:b6:53:b9:c4:81:c3:35:40:32:de:fd:c7:0b:62:c1:dd:
44:8e:4c:87:04:54:42:0b:77:78:d1:f0:e0:13:68:6a:c9:39:
af:82:20:52:ce:c3:0f:ab:a0:d5:e1:ac:27:4b:94:9c:0c:e3:
9d:cf:c2:d3
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAZKPmhGiyGkasJERYUI0bHShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDE1MDk1NDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmZhYzIwZDk0MDgzYzg1NTEwMzM2OGE3OTE3MmEwOTQ4MDAwN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6SF4++AGZc0ETxRbDkmBnB/uBty
rW/HEN7w9PSWP6pW1tA7xm2d/qJnu0cf7nAJELgXmIaJMq7OCuVfjWOoM7FU1Ljh
cYgNAGDV6P2Gd6y6wll30weR813lPCyKFDb+UBafcy89+BPG+5ZfBe6Mnj9X1Gn6
9HsUkDIA1dvy88VrY+fwiWV3n5aNnowduLuqmwAhDNzX26aFjUDwDQq9XpAwOU6j
7aaOh5hYSPto0fxvG0RhInNTHKImg0nXXIHbCBbpymJFKS+kw0qNZkxjPwqh3lJ1
xtUb78USwmea6vbZrE/hbxndamiekJNyKsEuao05amRf88TMQn2O4/57DQIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFDL6wg2UCDyFUQM2inkXKglIAAe9MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTXZyQ0RaUUlQSVZSQXphS2VSY3FDVWdBQjcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBlBAIAATBfAwQBHzgEAwQA
HzgnAwQBHzgqAwQAHzhCAwQAHzhZMAwDBAQfOHADBAIfOHgDBAAfOIkwDAMEAB84
iwMEAB84jAMEAB84kzALAwMAHzkDBAEfOQgDBAEfOYQDBAMfObAwDQYJKoZIhvcN
AQELBQADggEBAEcTFSKFhvgrMwANQ05H4s7kXQfKGkMwIMlqvH/vX+07OAPjeFye
BYzq+Ye78SgBlNqdm1ymsmnnMbondsGBt/JDko/7UxsxX808BhgCoUmU9HV+9lkO
+H0s7ABxF2eyfo08PImSiKQoHffiBFMWiomYoUVEldiOU4KfYfNs86TCxryykIRk
4MsFbIWAIvsMR4b+h2Jxs4D/MFSKUumz9wyDzBit4qamy+mg6C7rqUr2iZFuZ3HB
42N8W+t5cFaY6iOQK9OHPvH2tlO5xIHDNUAy3v3HC2LB3USOTIcEVEILd3jR8OAT
aGrJOa+CIFLOww+roNXhrCdLlJwM453PwtM=
-----END CERTIFICATE-----
Generated at Wed Oct 16 12:02:05 2024 by rpki-client on console-fra.rpki-client.org