Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SSSGBL_7qnkSppGFVVh2rnX6jyA.roa
File: SSSGBL_7qnkSppGFVVh2rnX6jyA.roa (raw, json)
Hash identifier: itHoheeMldNH0TvdCaUHCFGY5f5TSj3DuH0IKN7MP9k=
Subject key identifier: 49:24:86:04:BF:FB:AA:79:12:A6:91:85:55:58:76:AE:75:FA:8F:20
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01914D17EE2C710A4BF97431E5FAEC45CD4B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SSSGBL_7qnkSppGFVVh2rnX6jyA.roa
Signing time: Tue 13 Aug 2024 18:54:59 +0000
ROA not before: Tue 13 Aug 2024 18:54:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 05:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:17:ee:2c:71:0a:4b:f9:74:31:e5:fa:ec:45:cd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 13 18:54:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49248604bffbaa7912a69185555876ae75fa8f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:8c:39:b6:b1:66:f0:55:be:0f:24:5d:71:
46:63:36:23:f2:55:3d:64:21:a5:7e:21:15:3a:22:
4e:28:55:9f:5d:38:32:20:80:e9:96:47:d9:28:a3:
34:e3:42:8f:fc:a9:10:33:e8:eb:60:65:fd:cb:97:
48:11:06:3f:58:da:92:50:cc:7f:a5:80:d4:a4:5d:
20:8b:75:59:5c:f7:5f:52:81:d5:cf:23:60:90:09:
97:d2:b8:78:79:8c:b4:c5:c5:fd:92:b7:c6:d2:88:
e2:73:85:9f:34:41:88:f7:03:a2:be:38:28:24:3b:
c7:f7:e2:f0:00:79:0c:7b:b6:16:19:fc:d7:40:72:
66:1f:c1:82:ff:52:29:dc:dd:bc:6a:ca:70:4c:df:
d3:66:d6:d5:ed:e8:f3:f0:d4:91:7f:b6:47:60:e2:
36:24:ec:15:6f:3a:ae:de:c2:b0:76:71:09:eb:21:
b7:c5:c8:9d:18:63:d2:e3:90:4f:09:a8:35:aa:4e:
44:87:ba:01:ab:d4:e4:d0:85:ee:c9:df:ec:5d:f2:
ec:8a:ab:d7:14:bd:fa:59:da:ed:a1:7f:61:99:3a:
95:91:4c:e6:e2:36:02:cb:c1:7f:51:8c:eb:68:dc:
98:08:57:9b:64:c3:5c:03:56:f9:1c:21:c2:e2:9c:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:24:86:04:BF:FB:AA:79:12:A6:91:85:55:58:76:AE:75:FA:8F:20
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SSSGBL_7qnkSppGFVVh2rnX6jyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.63.0-31.56.64.255
31.56.69.0/24
31.56.72.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2e:03:07:c8:27:e4:0b:ed:97:31:e8:21:87:69:0f:01:19:
ad:07:aa:f7:dd:cf:80:f8:f3:da:1d:f3:0c:bd:90:f2:29:c7:
ac:6a:0c:d4:8f:3c:e6:d1:81:1f:a9:8b:9d:b6:75:63:5a:c7:
8b:33:10:a4:ae:c0:76:c7:a0:ff:18:19:8b:6f:fd:c3:a5:61:
72:2c:f5:97:6c:7c:60:6a:66:cd:4e:ca:28:69:2d:47:ec:30:
6f:f0:7d:cc:33:f2:de:cb:df:49:20:63:d3:4b:ba:2c:e6:96:
94:a4:03:1f:ed:2e:64:87:bc:85:cd:c6:d8:52:7f:55:b2:28:
c1:dc:34:e4:6f:34:e0:e8:12:fa:29:3c:b5:f1:f3:b3:51:a7:
0a:41:e1:2b:ba:2e:f2:1e:e4:06:d8:cb:26:ea:bd:c8:c1:74:
66:b0:33:0e:be:fa:ec:ee:ad:51:45:06:72:5c:1f:50:05:b7:
02:37:89:92:60:ad:f0:60:23:c5:6d:20:9f:fc:e8:bb:25:65:
ba:10:da:3b:01:b9:6c:68:7e:f1:c7:e0:4b:5e:39:69:9b:dc:
67:ef:a8:08:92:f7:b3:a0:e7:8d:b5:8e:87:2f:47:5f:c1:a9:
01:b9:b3:54:7b:f8:70:d4:ef:cf:ba:4e:ee:69:b8:0d:0d:49:
91:e5:8c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 07:13:16 2024 by rpki-client on console-fra.rpki-client.org