Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RHurNdhZhwJzloued1wZ0fNwnyE.roa
File: RHurNdhZhwJzloued1wZ0fNwnyE.roa (raw, json)
Hash identifier: JA2G68WJiXyWhF2VCayZ1Racfo341YBhV6fMJhxSk3U=
Subject key identifier: 44:7B:AB:35:D8:59:87:02:73:96:8B:9E:77:5C:19:D1:F3:70:9F:21
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019054649F19194DCF31B18F7926230DA0E0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RHurNdhZhwJzloued1wZ0fNwnyE.roa
Signing time: Wed 26 Jun 2024 11:53:18 +0000
ROA not before: Wed 26 Jun 2024 11:53:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215211
IP address blocks: 31.56.0.0/14 maxlen: 14
31.56.0.0/15 maxlen: 15
31.58.0.0/15 maxlen: 15
46.224.0.0/15 maxlen: 15
91.98.0.0/16 maxlen: 16
151.238.0.0/15 maxlen: 15
2a14:6e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 26 Jun 2024 16:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:64:9f:19:19:4d:cf:31:b1:8f:79:26:23:0d:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 26 11:53:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=447bab35d859870273968b9e775c19d1f3709f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:32:e7:09:c1:0f:c9:90:f3:a8:fe:3c:55:
23:36:d6:5a:3d:b7:a4:85:88:f3:20:da:67:cb:78:
11:e1:93:af:d5:a2:53:97:08:26:46:f7:b8:14:e5:
4f:54:16:dc:9a:a0:89:29:77:11:7b:a6:f0:01:52:
0a:16:2f:62:be:1d:f5:e7:6e:6a:bf:19:d8:92:21:
de:1a:56:5c:97:df:d6:bf:1c:ec:17:31:94:a9:81:
4b:88:5e:73:d8:09:47:a1:e0:e0:a8:35:5b:7c:2d:
e6:7f:8d:f8:fe:89:8f:89:38:0a:46:f6:6a:c5:d8:
96:40:d7:56:55:19:a8:4a:48:30:e3:31:03:4c:93:
3a:7d:47:41:11:c9:bc:d9:15:41:7d:75:30:f8:0c:
0b:8d:e3:d5:d7:d0:10:3a:83:e2:fd:6b:0e:37:0d:
ac:13:f9:04:e0:4b:7c:68:aa:f7:51:ea:c8:b6:fe:
78:7b:f4:dd:f8:c8:a5:45:99:d9:d0:6b:68:3c:ad:
8d:bd:ec:3a:1e:7f:0b:aa:12:7b:0b:48:3c:78:b3:
03:25:c8:af:d3:e7:82:18:73:74:e3:df:73:39:3e:
35:be:ed:5b:06:b8:7d:92:69:97:fc:fa:f0:9b:13:
6b:fa:ed:81:21:6e:17:cf:a4:fd:fd:78:1a:71:b3:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7B:AB:35:D8:59:87:02:73:96:8B:9E:77:5C:19:D1:F3:70:9F:21
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RHurNdhZhwJzloued1wZ0fNwnyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/14
46.224.0.0/15
91.98.0.0/16
151.238.0.0/15
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
5b:a8:ae:0c:61:7c:ec:76:f1:a3:89:62:84:ae:01:90:6d:0a:
a9:ea:ba:bd:e0:01:68:dc:28:31:75:13:16:ab:d6:b6:72:26:
d9:a2:f9:4b:83:df:f7:47:29:06:1e:85:84:2a:b8:9c:43:e6:
e4:4e:16:51:6b:c9:01:a8:2d:1f:3d:40:5d:62:2b:ee:2a:62:
12:f0:5c:79:3e:43:43:82:28:78:6b:55:2b:88:26:dc:5f:3e:
05:0b:df:5e:12:f5:ee:fe:90:df:cd:55:fd:18:87:b0:02:ce:
14:61:56:18:c4:8a:cc:74:d1:cf:14:c4:9b:14:5f:bd:85:d4:
65:ae:6b:82:29:c7:d1:cc:24:b3:fc:b3:4b:de:1a:b3:12:d7:
a3:0f:8c:e8:47:59:4c:7b:02:90:cc:18:ef:cf:f2:c5:bc:b0:
29:4e:b0:fb:93:10:bd:b3:17:f6:d7:d6:74:ea:1f:cd:04:97:
f1:76:80:e1:85:58:42:43:43:f2:d2:d4:4c:b3:a0:ea:7a:e0:
55:26:8c:de:96:2f:e9:ba:5d:3f:ab:f7:07:05:8d:b7:69:6f:
2b:68:1b:72:87:ae:6b:8f:56:66:c0:6a:53:e2:93:6d:4d:1d:
aa:73:c3:d8:7c:62:68:55:1e:5a:af:20:1d:99:9a:88:89:89:
6e:da:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 22:04:36 2024 by rpki-client on console-ams.rpki-client.org