Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q0i8AqawS48rq9a_iAK23-cOr70.roa
File: Q0i8AqawS48rq9a_iAK23-cOr70.roa (raw, json)
Hash identifier: JdpbQUzYNLIiGLTito6+elE7fnx+hk4COG2+edu+71U=
Subject key identifier: 43:48:BC:02:A6:B0:4B:8F:2B:AB:D6:BF:88:02:B6:DF:E7:0E:AF:BD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01929698D7918A7EC095D375FE34DBE16462
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q0i8AqawS48rq9a_iAK23-cOr70.roa
Signing time: Wed 16 Oct 2024 18:30:51 +0000
ROA not before: Wed 16 Oct 2024 18:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.120.0/22 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 05:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:96:98:d7:91:8a:7e:c0:95:d3:75:fe:34:db:e1:64:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 16 18:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4348bc02a6b04b8f2babd6bf8802b6dfe70eafbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:24:80:66:66:68:eb:91:ae:69:e8:42:a1:
a1:81:8e:45:8a:b1:5a:12:f2:7b:78:40:84:20:84:
ee:84:91:26:68:ae:fc:58:3d:6b:c2:2b:13:67:cd:
7c:f0:a5:aa:6b:05:7c:9c:fe:c8:e9:cb:bd:d1:b2:
6d:fa:7e:63:20:b2:c4:9a:02:b7:97:a0:cc:a5:4a:
b2:7c:b8:2e:dd:52:f1:c8:1d:73:bd:65:7f:92:2c:
67:51:92:41:23:e8:dd:14:7e:30:0a:41:18:58:9f:
55:f5:71:c2:fb:55:7f:49:71:16:4a:36:41:1f:3b:
de:a8:b8:2b:8f:d8:b8:ad:28:d0:52:a4:0b:52:a3:
4d:fc:df:84:3e:35:55:e8:66:ec:1c:f3:29:6a:3e:
1e:da:3b:f9:7b:b3:d7:b6:15:f7:48:94:f4:bd:e4:
5c:f3:10:8c:e3:ff:cd:5b:1c:d5:87:50:fb:1c:91:
a7:82:e2:c9:7f:1f:32:4b:6c:8e:67:d4:89:55:f4:
fa:b5:ac:83:dc:78:38:06:63:4a:8a:93:2f:9c:6a:
fd:3f:b9:16:c0:f1:c0:cf:71:ac:90:a0:05:64:fe:
2b:e1:2e:3d:24:f9:6a:5e:59:e2:5b:f5:21:ad:30:
59:23:28:1e:a1:4f:4c:93:85:82:13:3c:c6:83:ca:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:48:BC:02:A6:B0:4B:8F:2B:AB:D6:BF:88:02:B6:DF:E7:0E:AF:BD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q0i8AqawS48rq9a_iAK23-cOr70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.42.0/23
31.56.66.0/24
31.56.89.0/24
31.56.112.0-31.56.123.255
31.57.0.0-31.57.9.255
31.57.132.0/23
31.57.176.0/21
Signature Algorithm: sha256WithRSAEncryption
65:6a:33:c1:fb:29:cf:1c:19:2d:f3:49:6d:94:b4:83:49:fb:
6b:16:b1:86:4c:d7:67:18:a6:c3:57:31:63:e0:db:b9:53:33:
40:49:2f:60:50:d5:75:5a:9c:7f:4c:44:c9:89:24:81:0e:d6:
38:d6:a1:60:8a:05:15:f9:2a:21:11:4b:bb:67:10:8a:e5:ce:
a9:ad:4e:3e:1f:fa:24:d9:55:27:ea:77:12:19:31:a0:0a:c8:
73:d0:fc:54:ce:a2:1d:19:a4:6d:f3:d8:b9:f7:0c:5e:b9:db:
b5:63:b3:93:a2:ed:22:0e:ba:e0:cb:85:f7:17:ad:71:1c:71:
49:c6:01:05:ba:72:f2:21:a0:27:7e:88:6a:1b:8c:c2:c2:7a:
81:49:2e:7e:90:b0:05:ae:f2:09:33:2d:81:a7:55:38:86:f2:
ac:d2:52:8b:ee:2d:74:6a:d8:b9:6c:f6:4a:94:28:90:d6:01:
40:5a:18:35:f6:97:46:70:8e:63:3a:01:aa:4c:19:5f:e3:93:
20:55:81:2a:df:0f:71:e1:33:c8:75:a6:09:5f:6e:0b:72:0f:
2d:d7:98:d5:8a:0f:d0:a5:77:78:f2:66:64:07:18:fe:21:5a:
95:e9:e2:26:6a:ba:4b:d8:9e:39:2b:d5:43:68:33:80:6c:c5:
93:6e:e6:b7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZKWmNeRin7AldN1/jTb4WRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDE2MTgzMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzQ4YmMwMmE2YjA0YjhmMmJhYmQ2YmY4ODAyYjZkZmU3MGVhZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz64kgGZmaOuRrmnoQqGhgY5FirFa
EvJ7eECEIITuhJEmaK78WD1rwisTZ8188KWqawV8nP7I6cu90bJt+n5jILLEmgK3
l6DMpUqyfLgu3VLxyB1zvWV/kixnUZJBI+jdFH4wCkEYWJ9V9XHC+1V/SXEWSjZB
HzveqLgrj9i4rSjQUqQLUqNN/N+EPjVV6GbsHPMpaj4e2jv5e7PXthX3SJT0veRc
8xCM4//NWxzVh1D7HJGnguLJfx8yS2yOZ9SJVfT6tayD3Hg4BmNKipMvnGr9P7kW
wPHAz3GskKAFZP4r4S49JPlqXlniW/UhrTBZIygeoU9Mk4WCEzzGg8qosQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFENIvAKmsEuPK6vWv4gCtt/nDq+9MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUTBpOEFxYXdTNDhycTlhX2lBSzIzLWNPcjcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTBLBAIAATBFAwQBHzgEAwQA
HzgnAwQBHzgqAwQAHzhCAwQAHzhZMAwDBAQfOHADBAIfOHgwCwMDAB85AwQBHzkI
AwQBHzmEAwQDHzmwMA0GCSqGSIb3DQEBCwUAA4IBAQBlajPB+ynPHBkt80ltlLSD
SftrFrGGTNdnGKbDVzFj4Nu5UzNASS9gUNV1Wpx/TETJiSSBDtY41qFgigUV+Soh
EUu7ZxCK5c6prU4+H/ok2VUn6ncSGTGgCshz0PxUzqIdGaRt89i59wxeudu1Y7OT
ou0iDrrgy4X3F61xHHFJxgEFunLyIaAnfohqG4zCwnqBSS5+kLAFrvIJMy2Bp1U4
hvKs0lKL7i10ati5bPZKlCiQ1gFAWhg19pdGcI5jOgGqTBlf45MgVYEq3w9x4TPI
daYJX24Lcg8t15jVig/QpXd48mZkBxj+IVqV6eImarpL2J45K9VDaDOAbMWTbua3
-----END CERTIFICATE-----
Generated at Thu Oct 17 07:20:44 2024 by rpki-client on console-fra.rpki-client.org