Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TiZWjYchcCqSWOY5OhOMbx1kgy0.roa
File: TiZWjYchcCqSWOY5OhOMbx1kgy0.roa (raw, json)
Hash identifier: +PjROlIFA56pM9FdU8MxbrJJmR+RzQnY1Joo3YlH4Bo=
Subject key identifier: 4E:26:56:8D:87:21:70:2A:92:58:E6:39:3A:13:8C:6F:1D:64:83:2D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019203C891F3AC5AEB73D10BBBE867401850
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TiZWjYchcCqSWOY5OhOMbx1kgy0.roa
Signing time: Wed 18 Sep 2024 06:18:49 +0000
ROA not before: Wed 18 Sep 2024 06:18:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4766
IP address blocks: 31.56.172.0/24 maxlen: 24
31.56.173.0/24 maxlen: 24
31.56.242.0/24 maxlen: 24
31.56.243.0/24 maxlen: 24
31.56.244.0/24 maxlen: 24
31.56.245.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 11:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:03:c8:91:f3:ac:5a:eb:73:d1:0b:bb:e8:67:40:18:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 18 06:18:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e26568d8721702a9258e6393a138c6f1d64832d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:1b:63:b2:45:dd:8d:ab:d5:87:e6:2e:49:
07:ce:9f:37:c2:a6:20:fb:1a:ed:f8:ee:3a:ee:02:
f0:bd:02:44:c3:0f:23:1c:60:2e:d1:e2:24:91:e2:
bc:0d:aa:dc:7b:ed:de:60:04:ee:17:20:aa:15:c9:
3b:6b:0b:c7:3f:13:44:49:db:d3:bd:6c:fb:9b:a3:
3e:e0:59:68:af:70:05:58:8d:b6:2b:ef:61:4f:f0:
a2:38:85:af:4d:07:71:0f:3a:5e:d8:e0:ed:ca:93:
a1:f7:56:e6:e4:72:79:c6:ae:39:90:97:04:6b:55:
e3:cf:c5:94:cf:89:9c:16:f9:94:1a:54:d4:bc:68:
68:b1:b1:09:c6:b9:88:ca:7c:d7:2f:be:ae:44:35:
5e:54:2d:0b:46:2e:8d:40:fe:f8:04:0b:7b:bb:42:
5e:c3:22:5f:93:22:cb:8c:36:ec:74:cf:00:4c:4f:
97:b6:ac:04:95:a6:c3:d7:5a:97:40:5c:45:40:3c:
89:6d:a1:81:d0:1a:2b:61:e4:f5:47:c5:32:ba:d3:
24:d1:86:87:1e:31:a8:a4:ca:54:00:5a:60:ea:2d:
0d:28:cf:ae:4a:90:49:f9:5c:1d:c0:c2:1a:26:cd:
0d:e1:f5:dc:b3:6d:a1:8a:28:da:b2:b5:a9:3a:68:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:26:56:8D:87:21:70:2A:92:58:E6:39:3A:13:8C:6F:1D:64:83:2D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TiZWjYchcCqSWOY5OhOMbx1kgy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.172.0/23
31.56.242.0-31.56.245.255
31.57.208.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:e0:9e:0b:8c:3b:c2:3f:34:ea:74:6d:1f:b5:1d:c6:a1:c9:
ea:9e:86:4b:a8:d9:77:65:73:69:0f:bd:2c:ad:f2:78:85:51:
e7:9a:dc:df:cd:43:2b:cb:7d:e7:3b:e5:db:94:7e:aa:1a:eb:
ef:c9:bd:7b:8e:6b:d5:0f:7f:37:09:dc:bc:ef:a1:87:ee:91:
84:20:ac:ff:7e:60:56:18:83:3d:1a:4b:c1:53:01:18:05:6d:
6d:57:86:4c:55:6e:cb:cf:a4:72:07:2f:eb:ad:11:db:c3:13:
5d:70:8f:63:76:5e:54:c0:93:cb:3c:90:04:bb:a0:15:c4:8b:
47:04:af:93:51:eb:e4:60:65:fc:e5:e5:56:94:30:48:83:4f:
41:a5:36:83:65:df:1e:14:9f:00:8e:e2:7a:64:a5:c7:7c:34:
5a:5c:0f:b7:45:ab:c9:a4:5c:79:9b:e8:d0:35:ef:be:ae:1b:
df:ea:07:90:44:5b:b4:30:35:ff:fd:bb:c8:45:bc:42:d5:a0:
13:f1:59:1e:df:66:89:40:b3:5d:9d:42:6c:a2:a8:a2:3f:0a:
7e:6a:af:28:f3:b7:9c:20:6f:de:a5:7a:91:31:4c:fd:31:df:
31:83:9e:97:a8:03:93:dc:46:0b:a3:d7:17:93:5a:16:83:23:
a1:fc:3e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 19:11:14 2024 by rpki-client on console-ams.rpki-client.org