Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Pi14JLPM0fOw-F_gQGypVqsWK-s.roa
File: Pi14JLPM0fOw-F_gQGypVqsWK-s.roa (raw, json)
Hash identifier: FxE28AEIYmI9a2joB67rm5eK32Fxmz9K+BGK1kyrZqM=
Subject key identifier: 3E:2D:78:24:B3:CC:D1:F3:B0:F8:5F:E0:40:6C:A9:56:AB:16:2B:EB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193216ECFE35CA55204905CC3E5A7C36191
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Pi14JLPM0fOw-F_gQGypVqsWK-s.roa
Signing time: Tue 12 Nov 2024 17:32:10 +0000
ROA not before: Tue 12 Nov 2024 17:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 31.56.16.0/22 maxlen: 22
31.56.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Dec 2024 09:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:6e:cf:e3:5c:a5:52:04:90:5c:c3:e5:a7:c3:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 12 17:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e2d7824b3ccd1f3b0f85fe0406ca956ab162beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:9b:b2:de:94:fc:9e:14:41:d1:58:dc:36:
55:b9:80:de:9b:62:9d:39:c3:e8:0e:5f:74:36:b1:
93:55:55:54:91:56:88:c8:1d:46:b4:16:7b:75:dd:
3e:03:81:dd:ec:35:6e:00:ca:ea:8b:43:31:d0:97:
6c:f1:49:d5:2f:c4:98:bf:f2:60:90:65:af:22:84:
c6:7d:9a:40:db:75:fa:d6:52:96:7e:a9:4b:5e:70:
d7:f9:2c:d6:2f:a7:20:dc:fc:0d:93:50:79:a9:9c:
a4:40:87:42:25:e7:c5:45:01:be:8e:ac:b6:61:64:
67:0c:ee:cc:a8:1b:15:f0:3b:5b:51:0c:1f:b8:45:
ea:0c:ae:0b:2d:92:c7:4d:bc:6b:b6:d5:14:ea:c0:
d9:0c:85:53:12:48:cb:d4:1d:1b:b1:ed:72:8c:f1:
20:df:e1:7c:72:dd:da:40:34:9a:02:ef:1d:60:74:
08:e9:3b:d1:13:e3:1b:4e:69:71:ae:54:3c:ab:cf:
08:c0:db:32:c1:63:5e:9a:da:44:a7:99:9b:ce:de:
ce:87:70:ae:dd:c3:b6:37:05:f8:59:32:b2:1b:7f:
c9:da:90:da:df:2f:e5:5b:8d:03:4b:43:c8:cc:23:
b4:63:d4:06:cd:51:f2:44:f3:4f:a6:1d:51:02:ce:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2D:78:24:B3:CC:D1:F3:B0:F8:5F:E0:40:6C:A9:56:AB:16:2B:EB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Pi14JLPM0fOw-F_gQGypVqsWK-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.56.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:75:18:40:3b:54:1c:c7:2e:86:d0:2f:49:c1:0b:09:34:8f:
a3:39:6c:7c:72:1b:59:ee:00:35:c9:0a:3a:22:18:96:88:c7:
ac:f6:e5:4f:51:93:13:ab:3e:6e:af:ae:e8:04:31:4c:7d:b7:
36:eb:63:f0:53:9a:f0:d9:ca:a4:a8:e9:0c:5d:8a:b0:ad:fb:
45:28:c2:bd:b9:d4:8b:75:3e:dc:0c:dd:3e:85:99:5d:01:84:
f0:f0:5d:f1:4f:24:fe:b1:3b:13:66:6a:ea:8d:42:9d:b8:0e:
35:2e:57:a7:c8:b6:d7:e9:72:cc:f3:ee:9d:0f:27:fa:b2:fc:
d6:58:70:1c:d8:a3:4a:1b:13:5c:67:5d:1b:ef:30:e3:a2:3c:
e3:a5:cb:cb:24:ab:d4:e9:ed:a8:49:b0:93:74:cd:59:e4:46:
a9:8e:90:66:db:9f:bc:61:45:c5:f1:84:ca:56:22:ff:89:ac:
62:d5:ca:1e:59:30:84:17:f0:35:60:d9:03:40:68:81:c4:9e:
ed:85:3e:6d:02:95:b3:04:0a:e2:a2:d9:80:a7:c1:19:29:7d:
37:f5:3d:ce:1a:f6:c4:70:82:98:8c:4d:b1:62:1b:51:2b:d7:
c2:62:ba:b7:26:92:18:89:17:65:8b:72:8d:06:d0:2d:66:d5:
78:bf:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:18 2025 by rpki-client