Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VDbkG8LXDHgiF1ZlQ0a8fu8Rs7I.roa
File: VDbkG8LXDHgiF1ZlQ0a8fu8Rs7I.roa (raw, json)
Hash identifier: p2T/GPLXQKtgwhpixmNl7NYpVzf/3jzVUY91dk0M4HE=
Subject key identifier: 54:36:E4:1B:C2:D7:0C:78:22:17:56:65:43:46:BC:7E:EF:11:B3:B2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019305DBF56D5BE972202B7DA5635C1F3C48
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VDbkG8LXDHgiF1ZlQ0a8fu8Rs7I.roa
Signing time: Thu 07 Nov 2024 09:02:01 +0000
ROA not before: Thu 07 Nov 2024 09:02:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.112.0/21 maxlen: 24
31.56.114.0/23 maxlen: 23
31.56.118.0/23 maxlen: 23
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.57.224.0/22 maxlen: 23
31.57.252.0/22 maxlen: 23
31.58.49.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.129.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.152.0/22 maxlen: 22
31.58.176.0/22 maxlen: 22
31.58.200.0/22 maxlen: 22
31.58.216.0/22 maxlen: 22
31.58.240.0/22 maxlen: 22
31.58.252.0/22 maxlen: 22
31.59.41.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 22
31.59.80.0/22 maxlen: 22
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 22
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 22
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 09:45:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:db:f5:6d:5b:e9:72:20:2b:7d:a5:63:5c:1f:3c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 7 09:02:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5436e41bc2d70c78221756654346bc7eef11b3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:11:3d:a2:f6:07:56:df:b9:80:1a:b0:3d:c4:
e7:79:68:b3:cb:8a:57:35:ad:fc:70:95:06:df:f2:
f0:35:f4:c9:9f:a0:d4:9f:7d:01:aa:59:6c:e8:8d:
9c:ed:45:9b:0c:11:88:b5:3c:39:30:3f:63:78:35:
72:cb:0e:73:d3:a4:0d:0c:37:46:ec:d9:c2:1e:d3:
f4:2e:6d:53:ea:dd:d6:1f:7e:97:6f:fa:85:ca:ec:
5c:f7:2e:71:ad:e9:1b:16:66:78:e4:7e:36:e1:87:
b7:aa:1e:70:dd:ac:b5:3d:dd:1b:9f:a1:44:e2:9e:
06:67:8a:8e:bb:83:9b:c0:6d:cb:4f:01:75:73:30:
4d:9c:15:d3:ff:43:19:e5:07:17:5e:8b:1b:d3:fa:
b5:72:58:d2:98:0f:a7:e3:9f:6b:01:d5:cd:3a:d4:
86:c7:d7:8a:3a:50:39:fc:cd:6d:0a:b6:9e:c4:7f:
7f:03:98:69:9d:e3:e6:01:81:ee:66:18:14:93:f6:
c3:bb:aa:d5:a6:91:4a:02:8f:fc:3c:44:54:35:4e:
53:9b:58:41:c0:29:74:d2:d4:48:a7:17:14:a5:6b:
c2:36:fa:2c:d9:84:01:19:83:ef:ac:90:f3:64:08:
93:56:3d:34:e5:fd:3f:32:71:01:e7:e4:39:8c:58:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:36:E4:1B:C2:D7:0C:78:22:17:56:65:43:46:BC:7E:EF:11:B3:B2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VDbkG8LXDHgiF1ZlQ0a8fu8Rs7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.57.194.0/24
31.57.224.0/22
31.57.252.0/22
31.58.49.0/24
31.58.59.0/24
31.58.129.0/24
31.58.142.0/24
31.58.146.0/24
31.58.152.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.41.0/24
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:49:b5:f6:a4:6c:81:11:8f:34:e7:e6:7f:df:69:b9:88:24:
ed:9e:0b:7c:99:25:02:0a:72:55:1f:55:11:f7:09:2c:7e:38:
27:71:4e:22:1c:bc:ec:a2:72:a9:04:9c:bf:ce:3c:26:c2:ad:
3b:97:82:59:88:41:e7:0b:73:da:dd:19:14:1e:12:dd:fc:ba:
d5:81:e3:0e:44:4a:83:c8:79:69:96:dc:03:e2:48:3c:4f:c6:
7f:89:fa:cd:9f:24:33:9a:b0:5a:ed:b7:21:18:27:24:c0:b6:
b7:04:a6:81:7b:c5:37:00:93:32:86:bf:fd:7c:67:a2:bb:aa:
2b:bd:a3:ad:44:19:d2:a5:33:85:d0:91:84:28:a2:8c:ef:23:
42:c5:3d:32:07:3b:d4:5e:bb:d1:06:15:72:12:b2:3c:5e:da:
fb:b8:6d:92:07:66:96:b5:7d:6e:2f:76:e7:61:e8:82:d8:f6:
bf:ae:38:be:94:7b:c8:c8:5f:b1:b2:05:f6:71:d8:b3:98:31:
60:6f:87:7a:c4:8f:3e:57:09:d6:ca:a5:5a:ce:cd:d7:3c:54:
31:96:48:f0:c1:17:e9:4f:ea:8c:ed:d7:c5:5f:ff:cb:d1:81:
e3:fa:05:96:db:58:36:8d:a9:f4:3a:5f:d3:1a:c7:3e:e3:3d:
79:d0:94:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 13:34:14 2024 by rpki-client on console-ams.rpki-client.org