Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SR-8gMsQdMXjtuAoUxSesBaTDEQ.roa
File: SR-8gMsQdMXjtuAoUxSesBaTDEQ.roa (raw, json)
Hash identifier: ifD6IEn3sOO0gY++ZDa8cosp3q3P2fJJWkJZB9L+M28=
Subject key identifier: 49:1F:BC:80:CB:10:74:C5:E3:B6:E0:28:53:14:9E:B0:16:93:0C:44
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0190EDF27F2E9CE6B978DCD45EC9BA6795D3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SR-8gMsQdMXjtuAoUxSesBaTDEQ.roa
Signing time: Fri 26 Jul 2024 07:30:10 +0000
ROA not before: Fri 26 Jul 2024 07:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.4.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 03 Aug 2024 16:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ed:f2:7f:2e:9c:e6:b9:78:dc:d4:5e:c9:ba:67:95:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 26 07:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=491fbc80cb1074c5e3b6e02853149eb016930c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:0f:51:06:af:15:f4:db:b7:80:82:d1:46:
1b:11:6b:4b:9c:55:d4:57:ba:2d:62:1d:0a:0b:cf:
1d:f7:fe:cb:5c:4a:92:07:e3:9c:a8:e2:6a:2a:d2:
24:de:96:cf:18:6d:c3:5e:25:3c:81:e8:93:1b:aa:
fa:a2:a1:15:15:ba:eb:82:44:40:b7:7d:d9:d4:48:
72:da:26:4a:87:7b:0b:1c:c1:ad:83:de:37:76:90:
05:24:58:d7:0e:87:af:33:78:8f:54:eb:24:69:0f:
e9:b1:30:89:7a:09:88:fd:fe:ad:3f:eb:4c:49:70:
a4:af:41:4a:c3:62:5d:e8:f4:dc:d6:d1:f0:b7:a3:
ed:14:83:72:d2:0b:8c:27:b4:c4:5d:4b:ca:1b:b2:
21:6f:c2:98:44:30:a3:bb:0e:75:c8:8b:0d:27:35:
a0:82:d7:9e:18:18:2b:03:de:d3:1b:74:8c:a4:fc:
bc:7c:09:09:c3:4d:02:52:c0:4c:9b:73:f3:ad:62:
cf:b0:b8:57:bc:f3:97:9a:45:72:98:83:15:cd:7f:
57:44:ff:a7:cc:36:7e:04:c9:a2:bb:6d:2c:18:67:
2e:15:d1:00:9e:f2:67:6b:64:82:da:ce:d4:a4:3f:
04:13:6c:08:0d:e3:23:c8:59:ed:77:d4:f6:c1:6e:
09:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1F:BC:80:CB:10:74:C5:E3:B6:E0:28:53:14:9E:B0:16:93:0C:44
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SR-8gMsQdMXjtuAoUxSesBaTDEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:17:21:36:10:e2:82:30:f2:f2:2b:b3:cd:35:bf:31:d5:1b:
04:ab:18:d2:e3:24:aa:09:24:d1:25:79:f9:f7:c9:c3:c3:f9:
79:2d:42:f4:21:62:93:65:de:4d:1c:c5:85:f7:0e:10:94:b4:
ce:0c:6c:6f:56:7d:96:34:a4:b9:cc:14:c4:f6:8c:aa:7c:32:
03:34:8d:7a:76:9d:de:f6:70:4e:2e:7a:77:33:e7:06:c5:f7:
b1:7c:48:79:b5:ad:99:49:e8:27:c3:b6:bb:1e:32:ed:65:ab:
9f:22:d1:02:10:68:d2:bb:3f:21:4a:71:68:00:13:cf:bd:45:
23:b6:2d:70:04:87:99:fd:b6:af:3f:9d:d9:7b:4a:6a:3a:db:
04:a6:b4:5a:69:36:17:98:1a:19:d9:45:3c:8b:f2:4c:12:4b:
37:30:ba:b5:40:65:c1:24:68:af:e9:b2:17:6d:80:1f:90:82:
a9:72:a0:d3:2c:1d:94:fc:00:c1:3f:19:79:5f:12:9c:ca:25:
ea:8a:69:bb:29:de:40:6e:a0:73:fa:f9:3c:e8:42:bc:89:0b:
6a:ee:63:ca:b0:0f:9a:7a:07:a1:24:9c:a6:1f:7b:50:f9:f2:
3a:a0:dd:d1:54:2c:38:cf:48:3a:ef:0a:46:59:95:1f:34:41:
ac:97:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 18:59:17 2024 by rpki-client on console-fra.rpki-client.org