Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OIoWBTfUlbJwybB2QQCP1qYzM-k.roa
File: OIoWBTfUlbJwybB2QQCP1qYzM-k.roa (raw, json)
Hash identifier: p0PA70WtsVS8QCwk0ig7xk5L3ClNNFkc61U+7k2poAE=
Subject key identifier: 38:8A:16:05:37:D4:95:B2:70:C9:B0:76:41:00:8F:D6:A6:33:33:E9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01913238BC7FB6D4C20E510AFA1FC13ED0F9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OIoWBTfUlbJwybB2QQCP1qYzM-k.roa
Signing time: Thu 08 Aug 2024 13:41:04 +0000
ROA not before: Thu 08 Aug 2024 13:41:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214677
IP address blocks: 31.56.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 09:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:38:bc:7f:b6:d4:c2:0e:51:0a:fa:1f:c1:3e:d0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 8 13:41:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=388a160537d495b270c9b07641008fd6a63333e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:40:5d:a6:e9:df:5d:bb:d0:13:63:f5:0d:
35:c5:a9:b1:a3:41:b6:3b:74:7d:df:b1:4a:88:4b:
8b:8b:42:ae:49:f9:47:05:43:f5:5b:2b:0f:e3:32:
de:da:1a:d0:68:a0:e4:30:13:57:2c:cc:ca:00:e8:
8a:1b:09:3a:39:aa:a4:3c:70:14:db:9e:96:ec:3a:
c1:57:93:b2:f0:36:3f:f3:b1:22:82:4f:4a:b1:df:
63:29:bf:60:a5:7e:42:20:22:c9:2a:93:99:1a:97:
9a:45:ab:9f:0c:53:6f:c1:12:34:49:2f:e9:7d:01:
ad:27:fe:b6:3d:37:79:40:8a:2f:ee:7e:28:f7:0d:
20:7b:e7:7d:9e:a4:ba:1f:7f:78:97:af:8c:27:5e:
e7:c5:2e:ed:0c:ba:4e:e3:77:c4:46:de:e8:d7:af:
97:d9:09:be:c7:f0:6b:84:4a:bf:88:ca:80:34:7a:
59:bf:3c:b7:d9:87:16:d0:cf:c3:bf:34:fc:ae:22:
71:94:f5:a0:c4:dd:fa:27:ae:00:af:db:bb:11:cf:
38:a6:aa:2a:a6:81:15:e4:5a:15:f9:0b:b8:51:0f:
3e:49:f1:d7:d6:d4:50:8b:d0:c8:a7:ad:9f:58:36:
9a:f7:9d:41:5d:f3:ff:d5:dc:b2:20:fa:b6:ae:cc:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8A:16:05:37:D4:95:B2:70:C9:B0:76:41:00:8F:D6:A6:33:33:E9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OIoWBTfUlbJwybB2QQCP1qYzM-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:36:df:4b:40:0a:7d:2b:7e:ef:de:5c:96:1c:8c:c8:c0:59:
bf:c7:ab:51:7b:91:67:05:e8:9e:80:78:8a:ad:bc:38:a6:b4:
cd:87:b3:c9:4e:d9:d9:99:08:3e:18:87:00:0c:c8:a6:37:76:
8b:fa:1b:3b:f1:d4:3f:45:a3:dd:0a:38:48:c5:11:fe:35:9c:
d4:4f:7e:bd:bb:c9:77:e6:81:bd:ed:0c:6c:4c:5e:b6:1f:ac:
38:0b:a1:a3:55:41:d6:94:f8:18:b7:6f:ae:9a:7e:84:68:fb:
fa:5e:f0:06:09:28:a7:18:ce:22:37:ef:8a:0f:9c:a8:fb:91:
2e:07:b4:07:ee:3b:2c:98:d7:fc:9f:79:58:72:3a:09:2e:90:
19:f1:ee:30:07:e9:eb:75:f4:cc:a2:aa:01:e9:73:2e:04:0a:
5b:37:91:79:3a:ba:a8:99:49:5b:6b:1f:5c:83:24:29:59:01:
2e:fd:c0:72:f9:73:ab:6e:ca:4c:f2:fd:c2:f8:03:e2:db:95:
83:58:15:73:b5:42:a6:97:b5:7d:07:d4:2e:d0:05:8e:ed:b7:
f9:c7:10:fc:55:37:27:dc:76:05:03:f9:94:17:9b:7c:33:26:
44:b2:88:42:be:2e:85:98:95:dd:01:69:a5:4d:2d:a4:1c:ea:
a6:8a:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 12:59:01 2024 by rpki-client on console-fra.rpki-client.org