Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QbxookSt3t0gglBUJIeZEgbaa-k.roa
File: QbxookSt3t0gglBUJIeZEgbaa-k.roa (raw, json)
Hash identifier: +sWltl5nQPnMnaoD4pXEcNfHfK9pBUTPU2eI6a6Npgc=
Subject key identifier: 41:BC:68:A2:44:AD:DE:DD:20:82:50:54:24:87:99:12:06:DA:6B:E9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191E751E208DE14579D8C35504F909EA836
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QbxookSt3t0gglBUJIeZEgbaa-k.roa
Signing time: Thu 12 Sep 2024 17:39:48 +0000
ROA not before: Thu 12 Sep 2024 17:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.45.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.65.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 04:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e7:51:e2:08:de:14:57:9d:8c:35:50:4f:90:9e:a8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 12 17:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41bc68a244addedd208250542487991206da6be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:43:4e:6e:7d:4d:b3:75:c2:25:42:aa:16:
a7:4a:be:c0:aa:af:83:fa:02:ee:26:5b:ed:a2:2f:
9b:1b:f9:fb:06:4a:83:b6:8c:d7:e1:ab:17:f7:3c:
47:9b:68:19:22:71:ed:f4:28:8c:d8:78:ff:82:62:
d3:dc:09:b2:4c:ed:fb:55:29:45:80:de:48:5f:51:
05:8b:11:3e:f1:3a:6e:b2:9a:68:cd:b2:0b:24:ec:
0a:5b:7e:51:17:06:90:d7:e5:a1:a9:ed:cc:b0:ad:
e7:09:97:69:43:00:95:72:84:86:a6:79:26:fd:68:
5a:67:90:d4:db:55:21:66:c6:7b:3c:7b:eb:78:c9:
8b:21:98:20:70:25:ed:54:76:e1:20:d4:59:4e:fd:
eb:a6:72:1c:f0:5e:89:91:c1:1f:70:69:72:42:09:
78:1d:de:50:54:7d:ef:26:dd:70:10:7e:27:ad:92:
12:7a:6e:1b:c0:0a:a0:2a:f2:44:3f:6f:71:5c:a6:
eb:dc:62:e1:d5:22:f7:0d:5a:32:27:f7:70:5e:24:
19:6e:b4:e8:65:d2:c1:85:d3:1c:87:61:54:85:6b:
a4:f9:6c:5d:57:70:83:92:7c:48:07:79:99:60:a4:
d1:69:e7:ff:bb:b7:3e:e6:ff:37:ea:75:f7:8b:e9:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BC:68:A2:44:AD:DE:DD:20:82:50:54:24:87:99:12:06:DA:6B:E9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QbxookSt3t0gglBUJIeZEgbaa-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.45.0/24
31.56.59.0/24
31.56.63.0/24
31.56.65.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.89.0/24
31.56.112.0/21
31.56.126.0/24
31.56.147.0/24
31.57.150.0/24
Signature Algorithm: sha256WithRSAEncryption
89:d4:84:fc:1e:cf:80:8c:cd:1d:b5:58:4f:a6:12:5c:19:81:
8c:55:c3:6b:ef:45:70:c8:71:bd:56:bf:46:ca:ff:f7:51:d3:
59:d8:d3:64:a6:5e:39:83:fb:86:d7:d9:1c:17:c5:f0:77:e6:
7d:54:0a:a4:0e:e1:de:a0:9c:e1:7b:84:70:ac:27:59:69:33:
f7:07:f4:a9:41:02:43:55:1c:03:59:d8:7e:44:ef:05:71:06:
5b:fb:d1:e3:68:15:c1:fb:7a:01:f0:18:37:7a:12:a4:a7:d2:
63:9b:9b:71:45:00:73:03:61:1d:86:ff:f9:e4:3a:f7:85:5c:
52:20:99:00:98:ea:53:60:44:c8:7d:0a:3d:9a:e5:9d:5a:d4:
8c:2f:eb:36:14:86:0f:8d:2e:ed:f4:e8:13:36:91:15:e9:69:
7a:0a:0a:d2:b8:58:59:d9:f1:68:21:80:30:15:b9:a4:1e:77:
d8:ec:fb:52:ae:a4:e7:ea:9d:4a:39:8c:df:ef:68:a4:ad:26:
a9:0a:71:5c:67:02:57:3a:9d:fc:81:0b:82:32:8c:5e:eb:63:
44:38:ce:80:99:e0:3f:2a:e9:3b:d8:79:b3:7f:a5:da:60:41:
2e:f2:dd:01:11:78:74:37:f3:e4:76:e4:a6:48:ab:6f:c1:d0:
d9:0f:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 06:09:42 2024 by rpki-client on console-fra.rpki-client.org