Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NRNiVp1MJuOir7cBGHMZti2iqgM.roa
File: NRNiVp1MJuOir7cBGHMZti2iqgM.roa (raw, json)
Hash identifier: 7BFkZwCrTPmbpvrHiPXqxmKzZt9wGufb8EtFH9Y43gY=
Subject key identifier: 35:13:62:56:9D:4C:26:E3:A2:AF:B7:01:18:73:19:B6:2D:A2:AA:03
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0190EB4A2A91DF8BC47B4E0D27CD41FF143A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NRNiVp1MJuOir7cBGHMZti2iqgM.roa
Signing time: Thu 25 Jul 2024 19:07:04 +0000
ROA not before: Thu 25 Jul 2024 19:07:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 13:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:eb:4a:2a:91:df:8b:c4:7b:4e:0d:27:cd:41:ff:14:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 25 19:07:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=351362569d4c26e3a2afb701187319b62da2aa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:07:e7:5e:8f:11:d3:a3:fa:ff:a7:e7:1c:
f4:b8:81:53:08:dd:54:ad:b9:12:ca:1a:64:4d:a6:
f1:29:2b:91:34:ad:86:cc:07:89:17:e6:34:37:e9:
b0:d8:c9:88:a1:40:aa:3d:c6:99:4f:f7:f0:b7:81:
2f:87:58:31:66:9d:4c:c5:2f:3f:a1:a9:f5:df:83:
9a:7b:37:a0:f7:64:db:94:08:47:79:53:76:7b:38:
77:02:c3:57:77:53:97:46:b1:72:0a:8f:da:4d:83:
e7:4c:3e:da:3b:e8:77:36:94:ec:ce:34:34:cd:2c:
6c:ac:d9:82:9e:46:7c:f6:2a:34:2a:bf:d6:ca:0c:
b9:e8:78:d4:48:2b:ea:92:c7:c1:e4:f8:62:10:e7:
e1:97:eb:b8:d9:ba:d2:4d:8b:7c:aa:9b:17:d9:5c:
2d:81:8d:6c:9f:86:a1:a2:48:da:00:f6:99:2d:5b:
b4:aa:83:03:dd:8f:15:c7:5b:7e:9c:39:aa:13:16:
31:f0:f5:33:80:d8:c9:21:74:67:a7:17:20:01:7c:
12:65:5c:d5:05:09:41:a2:9e:02:fd:58:e5:11:53:
dd:72:8f:72:94:da:db:2f:c5:e1:77:32:a2:38:bc:
cd:23:33:3a:b2:18:81:1a:4b:db:6b:f8:7e:bd:40:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:13:62:56:9D:4C:26:E3:A2:AF:B7:01:18:73:19:B6:2D:A2:AA:03
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NRNiVp1MJuOir7cBGHMZti2iqgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0-31.56.2.255
Signature Algorithm: sha256WithRSAEncryption
1f:7b:8c:08:58:8a:2e:5a:14:db:d9:55:d7:44:be:43:93:95:
07:23:e0:77:da:a4:9a:28:d4:58:9c:d6:fb:e7:90:5d:64:8f:
3b:14:18:94:a5:2a:8b:e0:e1:a8:1c:28:73:07:51:bb:06:01:
cb:1c:39:29:51:77:02:b2:a3:e6:d4:f2:ac:f9:58:75:b8:3c:
c0:de:d4:62:7e:e6:40:66:fc:22:a0:50:e1:dc:e2:c0:f0:28:
ef:e8:f2:c5:ef:e7:cb:e3:15:e8:ad:2e:92:46:35:b1:1b:8b:
f6:58:3b:e0:23:40:22:42:19:66:83:20:92:29:b9:e6:23:19:
e0:4e:41:fc:2a:c5:e8:51:2c:6a:6b:d9:40:b1:75:8e:f2:a5:
c2:02:c4:d3:83:4c:dc:37:e2:65:68:91:9c:6e:1d:47:c6:8a:
51:97:76:45:f6:14:37:1d:6b:97:8b:91:cd:36:86:d8:15:6d:
4a:e7:f3:3d:e9:6f:7d:af:f5:28:3c:de:8a:36:be:f8:61:94:
8c:a8:b7:b3:c6:14:1a:bd:57:54:39:ce:3a:a2:07:66:05:65:
d6:38:68:8d:ec:83:83:2b:99:75:da:cc:c5:f2:fe:3f:12:64:
9c:ac:f6:b8:92:aa:8f:a4:a0:b4:21:76:1d:e9:0e:61:bd:b1:
6b:37:13:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 16:56:12 2024 by rpki-client on console-ams.rpki-client.org