Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S9cf5Qr_Lx-iXLuMA0vVSI_Qehc.roa
File: S9cf5Qr_Lx-iXLuMA0vVSI_Qehc.roa (raw, json)
Hash identifier: t6ZwjEse1kB6G0YHtX6Ru9G2ZOcfal8Kr3a8LmyoNoQ=
Subject key identifier: 4B:D7:1F:E5:0A:FF:2F:1F:A2:5C:BB:8C:03:4B:D5:48:8F:D0:7A:17
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193297196F874E814F8187645939E7E0128
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S9cf5Qr_Lx-iXLuMA0vVSI_Qehc.roa
Signing time: Thu 14 Nov 2024 06:52:10 +0000
ROA not before: Thu 14 Nov 2024 06:52:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 31.56.160.0/21 maxlen: 21
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 13:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:71:96:f8:74:e8:14:f8:18:76:45:93:9e:7e:01:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 14 06:52:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bd71fe50aff2f1fa25cbb8c034bd5488fd07a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:e4:86:b5:04:a9:56:43:6b:c5:c5:62:85:
a9:7f:e0:3f:d5:c0:3e:7c:1a:21:c6:0b:d0:e3:98:
fc:43:c2:12:9e:df:fc:9e:5e:1d:72:2b:4c:06:4c:
08:75:08:b3:76:ee:85:9b:c5:76:85:81:7e:31:09:
db:ae:f5:a0:41:c5:2f:13:66:91:02:41:f7:9b:b7:
d0:31:ae:be:8b:20:19:22:ba:0d:3b:3a:fd:6d:e8:
16:08:1c:05:29:37:b0:ff:09:c4:28:62:f6:43:cb:
59:1a:e2:cf:15:7f:e7:8c:34:7d:f1:8e:df:df:33:
cc:37:6c:a7:8b:d5:4b:9b:5a:25:bd:50:29:2f:04:
c4:e8:a8:ab:c9:9a:e6:80:ac:86:aa:c9:f3:6c:b3:
84:9f:e4:01:e0:7e:56:fb:48:18:46:dd:12:6a:5d:
10:48:5c:20:f3:4f:98:f8:06:2f:c0:7d:95:99:11:
7f:be:b1:b3:8f:05:2f:b5:2a:72:93:41:8b:9b:df:
16:0d:00:41:d0:f3:e5:bc:3b:b4:cc:37:4b:e8:06:
33:69:c3:30:80:af:a1:7e:4c:55:c3:44:87:7d:bc:
51:f7:a0:d1:bb:a5:75:aa:3c:2c:b8:bf:a1:56:df:
03:c0:44:fb:1e:ef:c5:e2:30:c1:ae:5e:d9:72:ae:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D7:1F:E5:0A:FF:2F:1F:A2:5C:BB:8C:03:4B:D5:48:8F:D0:7A:17
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S9cf5Qr_Lx-iXLuMA0vVSI_Qehc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.160.0/21
31.57.202.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:39:af:6d:3b:7c:43:af:36:54:4c:28:6b:1d:19:cd:7f:cb:
f3:5e:6b:ab:2f:06:ca:c6:c1:d7:41:96:da:93:87:2c:2b:0f:
ce:ca:23:00:c9:40:d9:70:3e:6a:0a:c7:32:cd:70:af:0e:64:
6d:9a:ea:5e:f7:4b:55:c5:2a:6f:66:99:d8:71:ec:19:36:5d:
35:84:f2:80:c2:53:cb:3c:94:f6:8f:16:46:c3:5e:a9:e8:c3:
4b:a7:b2:1c:75:9c:33:86:0c:be:08:43:f5:15:34:c7:c7:1f:
47:1b:21:19:b5:4a:02:10:f1:15:60:fe:42:1a:12:66:e9:9b:
1b:7b:19:f4:6d:34:a3:a7:aa:4b:47:29:c3:2d:60:39:de:6a:
b6:58:5c:0b:20:ba:ae:50:78:f7:44:0c:8f:77:19:30:b5:67:
2f:fa:8b:48:2c:94:d6:cd:e1:ab:ac:4f:7f:22:65:59:c5:4e:
b7:93:cf:b6:7d:79:6d:91:38:a8:03:a7:95:03:a6:b6:60:55:
ba:47:20:2e:18:6b:be:15:48:26:29:93:9d:e3:d6:1c:f2:3f:
d8:ca:a4:ed:a6:84:f5:7a:0a:c0:86:02:4f:e2:eb:a4:7d:11:
b0:8a:34:91:82:a7:cb:4e:d7:84:0a:0f:4e:d4:7f:cd:4f:64:
fe:75:0e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:49:48 2024 by rpki-client on console-ams.rpki-client.org