Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N5DDoESaNFY_rA_tS-c18yBLWIo.roa
File: N5DDoESaNFY_rA_tS-c18yBLWIo.roa (raw, json)
Hash identifier: xnKkX7lj+2YwW24cDL2bXMNoyGl/O2MeBya7v+QhwT4=
Subject key identifier: 37:90:C3:A0:44:9A:34:56:3F:AC:0F:ED:4B:E7:35:F3:20:4B:58:8A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191EEE14E95DF6DDA6225EC61D3CB5A93EF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N5DDoESaNFY_rA_tS-c18yBLWIo.roa
Signing time: Sat 14 Sep 2024 04:53:48 +0000
ROA not before: Sat 14 Sep 2024 04:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.64.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 17:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ee:e1:4e:95:df:6d:da:62:25:ec:61:d3:cb:5a:93:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 14 04:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3790c3a0449a34563fac0fed4be735f3204b588a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:86:ca:ef:81:b3:76:d2:c0:b3:ba:89:3e:
96:ff:50:79:e0:b7:e2:4c:22:e3:82:01:0b:a5:9d:
d3:0f:63:90:22:66:fc:66:71:f9:f8:84:54:ed:3b:
9e:44:14:40:68:5d:74:7b:63:92:06:00:59:e5:83:
5c:05:90:61:75:6d:db:25:af:ee:27:a9:77:ea:a3:
ca:07:1b:75:bf:27:3f:98:1a:4c:70:8d:78:d4:35:
77:c2:31:16:d5:ff:21:92:47:98:c1:c5:37:95:3e:
4d:58:3f:46:85:ab:14:b4:69:4a:c9:31:2d:85:11:
70:a2:36:ba:89:8a:35:c8:8c:5b:40:59:8b:1d:69:
71:6c:59:ef:67:0e:5b:7f:f4:dd:a7:60:40:99:5a:
26:3f:73:bd:1d:8e:0b:92:7a:81:e7:02:98:dd:6b:
fd:ab:82:34:1e:c6:b9:e7:2f:fb:f4:d8:4b:7c:d5:
f7:2a:4f:c2:fb:d5:37:65:76:b4:f9:96:d3:dc:1e:
6e:9d:5c:04:7b:50:ce:60:0b:1b:7b:2e:51:19:6e:
0d:66:0e:51:ff:b0:62:2a:3a:d4:bd:93:a1:a6:a0:
70:ed:3a:4c:db:d9:49:09:e7:c0:6b:b1:40:60:6e:
3a:7a:84:6d:9c:3b:9f:07:19:bb:5c:5c:cf:6f:d9:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:90:C3:A0:44:9A:34:56:3F:AC:0F:ED:4B:E7:35:F3:20:4B:58:8A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N5DDoESaNFY_rA_tS-c18yBLWIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.64.0/24
31.56.160.0/21
31.57.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:d6:07:b4:e8:78:00:14:1d:24:18:d7:ac:ff:c7:2c:47:9c:
af:59:63:4b:2f:a5:88:07:1c:a9:34:2c:7d:9d:58:8c:c5:f1:
6e:ce:eb:48:03:e0:fc:b6:03:b4:7e:9b:49:98:86:48:de:96:
cb:de:b5:63:68:03:ff:43:77:07:47:cd:96:e2:87:b4:3c:c5:
d1:be:15:a8:a3:1e:1b:81:8e:2d:f5:20:b7:2d:a0:b0:7c:fc:
96:7e:0b:d5:2f:98:84:f1:ff:84:8f:de:10:16:58:71:05:17:
fc:ea:3a:68:5c:b0:95:9d:45:15:7c:34:b9:c7:65:70:db:c1:
4c:6d:44:56:7f:fe:e0:73:7f:ef:50:2c:e8:06:99:5f:56:ba:
17:55:c1:e4:5f:de:69:08:80:dd:c7:c6:fd:50:e4:df:89:6d:
c5:37:da:4d:97:8e:78:7f:d2:81:e1:5f:99:15:13:3f:3e:b4:
51:39:dd:ff:9e:7a:03:99:8d:82:33:0e:64:94:d7:99:90:e8:
e6:17:06:e0:90:74:41:3d:79:89:21:bf:f3:ae:5c:e1:5c:88:
e5:07:75:d0:73:6a:05:a7:fb:e7:bb:fe:68:20:37:cd:17:41:
23:eb:69:0a:d5:29:d8:4e:a3:18:bf:13:20:59:ab:1e:ab:d6:
ad:8b:cc:d5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZHu4U6V323aYiXsYdPLWpPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTE0MDQ1MzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzkwYzNhMDQ0OWEzNDU2M2ZhYzBmZWQ0YmU3MzVmMzIwNGI1ODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLSGyu+Bs3bSwLO6iT6W/1B54Lfi
TCLjggELpZ3TD2OQImb8ZnH5+IRU7TueRBRAaF10e2OSBgBZ5YNcBZBhdW3bJa/u
J6l36qPKBxt1vyc/mBpMcI141DV3wjEW1f8hkkeYwcU3lT5NWD9GhasUtGlKyTEt
hRFwoja6iYo1yIxbQFmLHWlxbFnvZw5bf/Tdp2BAmVomP3O9HY4LknqB5wKY3Wv9
q4I0Hsa55y/79NhLfNX3Kk/C+9U3ZXa0+ZbT3B5unVwEe1DOYAsbey5RGW4NZg5R
/7BiKjrUvZOhpqBw7TpM29lJCefAa7FAYG46eoRtnDufBxm7XFzPb9nPjwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDeQw6BEmjRWP6wP7UvnNfMgS1iKMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTjVERG9FU2FORllfckFfdFMtYzE4eUJMV0lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzhAAwQD
HzigAwQDHzmwMA0GCSqGSIb3DQEBCwUAA4IBAQAK1ge06HgAFB0kGNes/8csR5yv
WWNLL6WIBxypNCx9nViMxfFuzutIA+D8tgO0fptJmIZI3pbL3rVjaAP/Q3cHR82W
4oe0PMXRvhWoox4bgY4t9SC3LaCwfPyWfgvVL5iE8f+Ej94QFlhxBRf86jpoXLCV
nUUVfDS5x2Vw28FMbURWf/7gc3/vUCzoBplfVroXVcHkX95pCIDdx8b9UOTfiW3F
N9pNl454f9KB4V+ZFRM/PrRROd3/nnoDmY2CMw5klNeZkOjmFwbgkHRBPXmJIb/z
rlzhXIjlB3XQc2oFp/vnu/5oIDfNF0Ej62kK1SnYTqMYvxMgWaseq9ati8zV
-----END CERTIFICATE-----
Generated at Wed Sep 25 19:03:24 2024 by rpki-client on console-fra.rpki-client.org