Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Pc5fRyYWeQY-n0i9QUOkY0f9COo.roa
File: Pc5fRyYWeQY-n0i9QUOkY0f9COo.roa (raw, json)
Hash identifier: 6tMzyITt+JynUAavM0y0NRiNPv2aOUdOoSb80WXw3Bs=
Subject key identifier: 3D:CE:5F:47:26:16:79:06:3E:9F:48:BD:41:43:A4:63:47:FD:08:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191BB8C57F7C6264769617D0FF6637A488C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Pc5fRyYWeQY-n0i9QUOkY0f9COo.roa
Signing time: Wed 04 Sep 2024 05:40:22 +0000
ROA not before: Wed 04 Sep 2024 05:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4766
IP address blocks: 31.56.172.0/24 maxlen: 24
31.56.173.0/24 maxlen: 24
31.56.242.0/24 maxlen: 24
31.56.243.0/24 maxlen: 24
31.56.244.0/24 maxlen: 24
31.56.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 06:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:8c:57:f7:c6:26:47:69:61:7d:0f:f6:63:7a:48:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 4 05:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dce5f47261679063e9f48bd4143a46347fd08ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:5c:fe:8c:98:0e:66:ca:55:b8:15:14:19:
74:c7:de:fa:fb:e7:ca:67:f3:8d:b8:f8:05:70:a3:
ab:5b:59:43:39:9a:a1:a3:56:c4:7a:52:83:48:3d:
94:06:b8:98:80:70:d4:bc:30:2e:65:84:99:53:b4:
44:af:19:ac:39:f2:7a:31:1a:aa:74:ef:e3:c4:f7:
78:67:45:33:e8:17:50:0a:49:b4:39:80:68:5f:98:
e8:1f:7f:2f:a8:8d:45:50:a6:b2:57:2d:87:5e:e0:
a1:6e:08:8e:31:0f:63:84:f1:e8:39:48:a2:77:38:
ce:2a:98:69:82:3e:a0:df:b9:bc:41:60:17:70:c6:
67:d7:56:5f:b7:eb:ed:5c:ca:20:72:43:71:6f:77:
7b:89:d2:b6:2f:0f:ae:a5:70:00:1c:a8:9e:10:e0:
68:97:d3:29:30:c2:62:50:c7:c9:1f:6a:de:4a:73:
ce:f7:39:20:eb:cb:0b:35:da:e6:3c:46:da:94:53:
7a:88:c3:d5:9e:e4:78:07:cb:f4:5d:83:06:b9:2a:
6b:bb:cd:17:89:5b:0a:77:f1:bc:1e:0f:26:7e:d8:
44:20:89:70:53:ea:22:ba:78:30:36:10:4c:e0:7d:
74:fb:0c:ec:9a:00:73:a8:54:c8:f3:f6:6e:8a:2a:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CE:5F:47:26:16:79:06:3E:9F:48:BD:41:43:A4:63:47:FD:08:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Pc5fRyYWeQY-n0i9QUOkY0f9COo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.172.0/23
31.56.242.0-31.56.245.255
Signature Algorithm: sha256WithRSAEncryption
8d:35:26:1f:6d:3f:61:58:8e:d1:80:b7:58:1c:2d:d0:73:95:
a2:4d:ce:c9:93:ab:55:46:be:aa:0f:ad:e3:71:19:1c:7b:d1:
2c:83:3a:6e:d0:c9:88:5f:7f:ca:ff:67:45:c1:dd:03:08:4b:
6e:ac:75:e5:fb:cb:c3:29:ab:6f:50:8f:9c:07:02:8d:c2:76:
f9:8c:77:94:b3:df:e6:ef:75:22:1a:0a:91:03:2b:fb:80:71:
42:69:94:79:dc:e3:82:72:6d:39:8d:df:7a:c1:0c:be:36:06:
72:0e:f8:18:f9:5e:ee:1f:5f:11:62:83:ca:05:1c:4e:93:50:
fa:18:06:65:cc:0e:14:f4:38:20:aa:c3:96:d2:df:5a:d3:80:
da:77:52:fd:c9:48:53:f1:21:9a:50:e6:73:8e:20:9c:5c:84:
fa:ce:25:9b:79:32:c7:8a:18:50:9f:46:30:24:f0:0d:26:b3:
e3:e7:01:51:38:8a:6b:50:ec:98:a9:40:1f:39:0c:c2:eb:66:
42:53:e2:d1:d7:fe:c6:3d:c9:df:c8:3c:c5:bd:de:78:b4:43:
59:70:ae:f8:07:8e:74:eb:03:be:01:40:3d:ad:de:fb:60:66:
10:84:71:7a:24:b3:0b:93:79:a0:89:1f:94:9f:09:b6:2f:71:
7e:fd:71:c2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZG7jFf3xiZHaWF9D/ZjekiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTA0MDU0MDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGNlNWY0NzI2MTY3OTA2M2U5ZjQ4YmQ0MTQzYTQ2MzQ3ZmQwOGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/pc/oyYDmbKVbgVFBl0x976++fK
Z/ONuPgFcKOrW1lDOZqho1bEelKDSD2UBriYgHDUvDAuZYSZU7RErxmsOfJ6MRqq
dO/jxPd4Z0Uz6BdQCkm0OYBoX5joH38vqI1FUKayVy2HXuChbgiOMQ9jhPHoOUii
dzjOKphpgj6g37m8QWAXcMZn11Zft+vtXMogckNxb3d7idK2Lw+upXAAHKieEOBo
l9MpMMJiUMfJH2reSnPO9zkg68sLNdrmPEbalFN6iMPVnuR4B8v0XYMGuSpru80X
iVsKd/G8Hg8mfthEIIlwU+oiungwNhBM4H10+wzsmgBzqFTI8/Zuiip/YQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFD3OX0cmFnkGPp9IvUFDpGNH/QjqMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUGM1ZlJ5WVdlUVktbjBpOVFVT2tZMGY5Q09vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBHzisMAwD
BAEfOPIDBAEfOPQwDQYJKoZIhvcNAQELBQADggEBAI01Jh9tP2FYjtGAt1gcLdBz
laJNzsmTq1VGvqoPreNxGRx70SyDOm7QyYhff8r/Z0XB3QMIS26sdeX7y8Mpq29Q
j5wHAo3CdvmMd5Sz3+bvdSIaCpEDK/uAcUJplHnc44JybTmN33rBDL42BnIO+Bj5
Xu4fXxFig8oFHE6TUPoYBmXMDhT0OCCqw5bS31rTgNp3Uv3JSFPxIZpQ5nOOIJxc
hPrOJZt5MseKGFCfRjAk8A0ms+PnAVE4imtQ7JipQB85DMLrZkJT4tHX/sY9yd/I
PMW93ni0Q1lwrvgHjnTrA74BQD2t3vtgZhCEcXokswuTeaCJH5SfCbYvcX79ccI=
-----END CERTIFICATE-----
Generated at Wed Sep 18 07:44:11 2024 by rpki-client on console-fra.rpki-client.org