Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RsFu9u3UqxyecZNk5yhs8N02zIc.roa
File: RsFu9u3UqxyecZNk5yhs8N02zIc.roa (raw, json)
Hash identifier: 2bDYzFRE4YyfL9XekRcAfo1samwzYg6qYFQf4HdpXh0=
Subject key identifier: 46:C1:6E:F6:ED:D4:AB:1C:9E:71:93:64:E7:28:6C:F0:DD:36:CC:87
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191B73310C146FEA2A16FA58F92CF984396
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RsFu9u3UqxyecZNk5yhs8N02zIc.roa
Signing time: Tue 03 Sep 2024 09:24:22 +0000
ROA not before: Tue 03 Sep 2024 09:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215362
IP address blocks: 31.56.35.0/24 maxlen: 24
31.56.45.0/24 maxlen: 24
31.56.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 14:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:33:10:c1:46:fe:a2:a1:6f:a5:8f:92:cf:98:43:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 3 09:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46c16ef6edd4ab1c9e719364e7286cf0dd36cc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:85:d2:a8:78:0f:26:ce:65:07:2d:24:95:
cc:fc:c5:51:4d:38:64:75:b5:e9:f0:11:7d:77:16:
63:1e:e7:6a:22:96:93:6e:b5:b0:ee:7e:29:66:45:
47:dc:45:d3:4a:b6:0a:1c:7e:db:78:80:c7:64:72:
7e:72:8e:cd:00:42:9e:3d:26:e1:df:f3:61:c3:3a:
16:1a:56:7b:19:64:17:6d:8e:d8:a4:a1:8a:28:42:
98:ad:2d:c4:00:3e:16:c5:bd:d8:81:3c:95:8d:1e:
69:e5:ee:97:2d:ed:e3:60:64:72:67:26:23:c8:76:
ad:ca:46:11:13:28:ec:68:0f:3d:3d:1e:b4:71:d4:
9a:d0:9e:e0:52:4b:d7:e1:b6:9e:98:c0:f8:ae:a2:
8a:4a:11:e2:52:3a:ea:e5:bd:9d:ae:35:90:52:43:
b0:64:da:d4:ab:20:ca:66:0a:03:a1:1c:3a:63:e2:
a3:94:db:c6:9a:a9:0b:18:e2:9f:86:e5:9a:1b:e9:
85:92:0e:27:49:c5:d3:86:fe:2d:75:d5:04:cb:4b:
53:e1:59:ec:08:fb:f2:13:25:36:ec:8f:cb:8f:c1:
a7:de:27:47:72:bc:a4:a6:8f:50:97:4b:02:89:00:
e5:72:7e:7a:68:08:d2:b0:50:c8:50:ec:0b:de:66:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C1:6E:F6:ED:D4:AB:1C:9E:71:93:64:E7:28:6C:F0:DD:36:CC:87
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RsFu9u3UqxyecZNk5yhs8N02zIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.35.0/24
31.56.45.0/24
31.56.146.0/24
Signature Algorithm: sha256WithRSAEncryption
01:36:77:9e:25:b9:81:a9:c0:a3:22:bf:47:fc:41:f8:51:54:
ab:c9:51:65:59:74:66:f9:92:d0:f4:92:48:fb:04:43:c2:c0:
8a:db:0b:35:c1:96:0a:fa:f8:f8:c4:0e:42:88:26:a6:cb:7f:
8d:33:87:ef:81:61:32:03:1e:b5:67:94:18:4c:bc:5f:aa:16:
ce:19:f3:4e:9e:18:9a:e0:b5:f6:f1:31:65:58:da:1c:c0:cb:
9e:78:d7:fa:a2:5c:e4:51:d0:9c:06:5e:db:88:4d:55:22:5c:
16:11:2f:ee:11:6d:df:a2:73:09:3c:49:7b:98:8b:cf:7c:4d:
f7:46:01:9e:2f:4e:1e:dd:10:9a:95:f4:05:04:20:a5:33:94:
f6:dd:3b:65:38:fb:a2:7c:62:4f:cb:1f:2e:dd:06:4b:71:9a:
1d:bd:64:bc:a8:c4:09:03:4f:56:d5:13:ed:42:0a:b1:4f:0c:
33:2b:b6:08:88:6c:a3:18:c7:f6:41:85:a6:5a:41:89:c9:75:
d7:68:79:87:bd:05:96:b5:bb:48:7b:84:d6:d5:bc:a3:48:11:
b0:3a:ac:9f:ee:aa:9e:7a:dd:01:a6:94:c2:7f:d3:aa:78:43:
96:56:33:23:43:ea:0e:ea:ac:c6:e4:1b:d1:56:03:3f:61:6b:
45:85:21:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 17:39:36 2024 by rpki-client on console-ams.rpki-client.org