Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SzjkboaMsZoq6b7ubGtjapo-tMM.roa
File: SzjkboaMsZoq6b7ubGtjapo-tMM.roa (raw, json)
Hash identifier: +llG4WXjeeRNKqETWHqv+SOnKEoUEEpwO5PUNsHTjfI=
Subject key identifier: 4B:38:E4:6E:86:8C:B1:9A:2A:E9:BE:EE:6C:6B:63:6A:9A:3E:B4:C3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019253C7FF2D602CD4C7FCF02E57D328B2FA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SzjkboaMsZoq6b7ubGtjapo-tMM.roa
Signing time: Thu 03 Oct 2024 19:07:48 +0000
ROA not before: Thu 03 Oct 2024 19:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.6.0/24 maxlen: 24
31.56.37.0/24 maxlen: 24
31.56.52.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.114.0/24 maxlen: 24
31.56.115.0/24 maxlen: 24
31.56.116.0/24 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.118.0/24 maxlen: 24
31.56.119.0/24 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 15:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:c7:ff:2d:60:2c:d4:c7:fc:f0:2e:57:d3:28:b2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 3 19:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b38e46e868cb19a2ae9beee6c6b636a9a3eb4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:3e:1f:be:08:57:6d:20:aa:41:b0:c8:6f:
0c:83:2a:53:27:d9:14:cd:8c:34:7c:da:a8:ec:31:
3f:02:4a:97:f3:f3:05:57:b6:53:9d:22:ff:ea:ba:
0d:33:6b:d1:97:ff:73:2c:c6:c2:72:44:76:31:3b:
57:e9:32:a7:6b:19:03:51:58:4d:d6:79:2d:f3:7a:
93:ef:0a:8b:36:0a:c8:27:b7:b7:c8:9a:e9:19:77:
da:29:b9:94:4c:a7:89:91:3a:8e:5f:e2:ee:59:55:
55:9d:ed:80:a4:2c:de:bb:30:80:f4:0b:8d:2f:c0:
13:50:54:c4:49:4b:78:df:69:60:24:68:df:b2:b8:
11:40:61:dc:27:ee:8d:26:d1:7d:0b:da:3b:3f:f4:
ae:a7:48:1b:d5:51:c0:10:d4:63:20:f3:bd:ae:02:
c0:64:e9:ed:6a:da:56:f9:5f:68:bc:94:ce:c1:67:
c2:e5:bb:c1:8c:be:6a:23:27:d5:9b:fb:5f:77:57:
96:31:ae:38:da:40:52:93:99:6c:20:ae:04:47:1b:
1b:08:8c:6a:34:fc:93:45:25:a7:b4:61:33:a4:fc:
0b:34:91:af:5e:9f:70:42:de:3f:20:69:dd:f2:ac:
4f:1e:8b:e4:d6:23:73:41:b9:33:46:71:3b:08:4f:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:38:E4:6E:86:8C:B1:9A:2A:E9:BE:EE:6C:6B:63:6A:9A:3E:B4:C3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SzjkboaMsZoq6b7ubGtjapo-tMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.6.0/24
31.56.37.0/24
31.56.52.0/22
31.56.112.0/21
31.57.196.0/23
31.57.238.0/24
Signature Algorithm: sha256WithRSAEncryption
11:cb:49:48:0d:f1:7b:00:bd:52:24:1d:1b:a7:f2:a1:2a:bd:
54:af:0f:66:f0:c9:7d:ae:68:86:1c:2b:60:10:a4:37:1d:69:
59:8d:69:02:58:c4:05:7e:78:d8:70:82:2d:5a:6c:c0:15:c6:
d4:96:46:a8:65:11:fa:bf:96:09:ab:ae:e3:ab:cb:0e:87:67:
7c:a2:1d:a2:7c:9e:9d:6e:9c:e3:d0:79:2e:f5:5f:a0:96:ee:
c0:dd:e5:ea:57:3e:cb:b2:01:ee:bb:de:c3:33:01:08:9d:47:
01:7f:2a:38:42:5f:33:41:86:6c:0d:e8:12:26:75:8b:28:24:
63:48:00:21:e1:d1:76:26:9c:55:c8:c1:f3:25:08:cb:a7:09:
5c:95:aa:db:53:7b:8c:d2:88:4b:ef:2b:b5:50:df:08:39:dd:
12:ac:03:13:8d:34:c9:2c:5c:ac:1a:9d:8e:19:1c:95:f0:2b:
ba:5c:cc:aa:55:90:cd:92:0d:fb:93:51:ae:6b:5e:20:1a:1b:
ec:79:d2:2d:5e:9f:7f:df:e4:b9:c3:ad:ae:51:c5:87:7d:10:
c8:bf:a8:63:1e:80:b0:15:f0:6c:c9:f8:85:5e:42:75:3b:3f:
b1:03:a9:2a:1c:dc:7d:55:1a:be:fe:35:1c:fd:1b:9c:41:8e:
c6:f3:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 17:33:53 2024 by rpki-client on console-fra.rpki-client.org