Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ryt6ZAX-sG2UChAEzyjPJeK9kCA.roa
File: Ryt6ZAX-sG2UChAEzyjPJeK9kCA.roa (raw, json)
Hash identifier: CojxP40omD8iYDIG6fOhez+ztcQ9y3/46levfCoQmBA=
Subject key identifier: 47:2B:7A:64:05:FE:B0:6D:94:0A:10:04:CF:28:CF:25:E2:BD:90:20
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191C60C554B0D4652BC39E22F08ECF72A51
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ryt6ZAX-sG2UChAEzyjPJeK9kCA.roa
Signing time: Fri 06 Sep 2024 06:36:22 +0000
ROA not before: Fri 06 Sep 2024 06:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 08:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:0c:55:4b:0d:46:52:bc:39:e2:2f:08:ec:f7:2a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 6 06:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=472b7a6405feb06d940a1004cf28cf25e2bd9020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:d7:46:dd:e5:12:e0:e4:35:a0:b5:f5:a1:
b2:5a:e9:14:d5:c3:9c:ee:35:5e:2d:6c:b0:f5:ce:
9b:2e:c2:9a:7b:aa:98:05:37:20:79:67:16:c4:dc:
ae:58:af:a8:5b:50:d8:f4:d1:99:72:80:31:a2:42:
49:cb:1e:c1:db:c3:04:c8:9c:61:9c:e4:43:ff:85:
43:39:20:75:60:70:bf:9e:c0:c8:f4:9d:cf:7d:50:
32:b3:25:58:99:27:7a:c5:30:fd:4b:18:58:75:66:
36:10:5d:b2:c2:24:50:cd:14:99:90:1f:87:9d:e2:
97:e8:f0:3f:5b:1f:6b:61:80:f7:a6:a1:b4:00:87:
52:e5:eb:77:31:6b:55:09:e5:2f:e3:39:72:31:e1:
db:84:92:64:63:e5:6d:bd:1c:a8:83:bd:7f:3d:9b:
2d:6e:e1:ca:4f:80:fc:04:f0:0c:3f:18:9e:65:d4:
a9:ed:8b:ce:90:02:39:bf:8d:d9:7e:a9:46:8a:66:
c4:30:78:81:e2:87:2c:03:c8:6b:91:b6:d3:4e:21:
c1:15:74:81:25:c0:a4:f2:10:d2:4d:de:a2:da:66:
e7:74:66:37:a0:a6:5c:3a:46:f4:5e:a2:09:d4:07:
40:75:aa:c9:9a:b6:b3:93:39:31:16:a2:0f:17:b0:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2B:7A:64:05:FE:B0:6D:94:0A:10:04:CF:28:CF:25:E2:BD:90:20
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ryt6ZAX-sG2UChAEzyjPJeK9kCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.140.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3c:3a:d3:d9:6c:63:52:51:f8:0f:54:32:38:4e:44:13:dd:
40:42:c7:93:a7:e5:46:c2:4e:af:c9:7f:36:97:cb:a5:3f:b6:
24:50:18:9d:a2:b1:d0:d4:43:80:08:4d:3f:31:31:61:35:de:
3e:b1:7b:86:03:9a:e5:30:17:49:5f:80:d6:fb:51:76:25:56:
f3:c3:aa:2a:29:09:52:ba:62:bf:52:e5:2a:f8:0f:ec:4a:77:
62:a1:ae:93:da:b0:cf:b1:fa:ef:6e:f8:63:d7:f2:3f:9d:a3:
8e:4f:b7:d1:2c:b7:36:67:ee:11:8d:1c:09:5c:db:0b:bb:27:
fe:bb:ac:2b:74:cb:24:93:8c:bd:33:bc:07:48:e5:6b:86:14:
5b:a7:59:79:e6:91:36:59:b4:f3:1d:63:da:14:e0:cd:29:8c:
48:d6:59:94:fc:e5:d1:f6:cd:c6:12:ab:ab:12:29:15:4d:02:
85:40:f6:b6:32:be:47:55:82:e8:90:67:98:c8:79:a6:fd:4d:
c3:20:27:79:55:da:f3:4f:9f:70:49:e0:07:61:b7:a4:28:43:
5f:77:13:80:cd:a3:a7:a1:9b:14:e9:e2:5d:9b:63:50:9b:2a:
c7:99:df:2e:d7:ee:36:02:e0:6e:e3:bc:7a:7f:53:fb:f3:5b:
75:2b:f2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 12:23:18 2024 by rpki-client on console-fra.rpki-client.org