Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VGksQ5d4S-Mq4dSgSWArwwFh524.roa
File: VGksQ5d4S-Mq4dSgSWArwwFh524.roa (raw, json)
Hash identifier: MuCXvuE7jkqo6O0jMyCtxqEigagb/Q6HUm1dtNHkNAo=
Subject key identifier: 54:69:2C:43:97:78:4B:E3:2A:E1:D4:A0:49:60:2B:C3:01:61:E7:6E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01922EF6A464D642D9375DFB3197CF040186
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VGksQ5d4S-Mq4dSgSWArwwFh524.roa
Signing time: Thu 26 Sep 2024 15:32:48 +0000
ROA not before: Thu 26 Sep 2024 15:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 31.56.5.0/24 maxlen: 24
31.56.128.0/24 maxlen: 24
31.56.129.0/24 maxlen: 24
31.56.130.0/24 maxlen: 24
31.56.131.0/24 maxlen: 24
31.56.132.0/24 maxlen: 24
31.56.133.0/24 maxlen: 24
31.56.134.0/24 maxlen: 24
31.56.135.0/24 maxlen: 24
31.56.136.0/24 maxlen: 24
31.56.246.0/24 maxlen: 24
31.56.247.0/24 maxlen: 24
31.56.248.0/24 maxlen: 24
31.56.249.0/24 maxlen: 24
31.56.250.0/24 maxlen: 24
31.56.251.0/24 maxlen: 24
31.56.252.0/24 maxlen: 24
31.56.253.0/24 maxlen: 24
31.56.254.0/24 maxlen: 24
31.56.255.0/24 maxlen: 24
31.59.0.0/24 maxlen: 24
31.59.1.0/24 maxlen: 24
31.59.2.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.6.0/24 maxlen: 24
31.59.7.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.246.0/24 maxlen: 24
31.59.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 18:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:f6:a4:64:d6:42:d9:37:5d:fb:31:97:cf:04:01:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 26 15:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54692c4397784be32ae1d4a049602bc30161e76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:81:b6:7c:3a:1a:90:73:f2:70:06:f5:29:
c8:1e:7f:d3:d4:ad:d7:b2:49:af:bf:80:ea:bb:1c:
89:14:db:eb:ec:be:32:7a:46:c5:d0:65:7d:0e:f1:
8f:94:f9:2e:42:fa:36:2c:48:f4:88:49:37:ff:69:
d8:70:3c:77:b9:87:42:86:7c:b6:2a:67:55:99:71:
f5:15:6e:2c:d5:a7:07:a8:14:34:27:09:4f:fb:c2:
9f:be:9b:97:ba:a9:b5:b8:53:21:56:be:c8:cf:f6:
9c:7e:01:ba:cb:76:c1:d4:b7:ca:89:09:6a:d0:e7:
22:fb:1a:48:05:21:a3:5f:01:33:68:f9:f6:92:bf:
c8:45:d5:48:72:5f:4e:19:26:8a:b1:2b:c3:ad:5d:
f5:88:07:57:99:fd:ae:1a:ed:99:4e:80:27:4e:be:
b0:f3:b9:2a:75:14:07:e9:d9:30:d9:d2:63:e9:d8:
98:9c:e8:e3:d3:a7:ce:d3:24:29:4d:3a:e1:ab:6d:
dc:11:dc:0d:50:37:e7:ef:45:fe:54:96:67:95:35:
87:79:2f:14:56:1b:5c:fc:15:5e:14:c5:d8:58:a1:
49:ed:cd:50:cb:59:89:24:55:05:e9:15:fd:0b:4d:
e6:cb:76:de:43:a9:1d:85:f5:22:9d:0a:3b:88:be:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:2C:43:97:78:4B:E3:2A:E1:D4:A0:49:60:2B:C3:01:61:E7:6E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VGksQ5d4S-Mq4dSgSWArwwFh524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.5.0/24
31.56.128.0-31.56.136.255
31.56.246.0-31.56.255.255
31.59.0.0-31.59.9.255
31.59.246.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:81:14:6a:25:d1:fb:aa:e4:7a:fd:31:5d:43:09:c0:69:cb:
16:45:6b:60:b4:2d:2a:d3:cf:2c:73:23:5f:93:55:04:a1:be:
95:51:f9:2b:79:29:8a:3f:ac:9b:76:1c:a6:36:74:df:71:4f:
10:21:73:75:67:9a:29:54:ae:6e:f5:d8:9c:08:5a:2a:03:f5:
7a:95:06:d8:b1:b9:69:4c:ce:8a:71:c6:07:e8:b7:2b:fb:07:
10:a9:e1:e5:a7:ee:d0:bc:30:0c:dc:fb:1b:b9:31:17:d4:19:
c4:2f:49:06:61:d8:c2:84:3d:cf:55:4b:5c:64:38:2d:a0:cf:
6e:a9:49:b8:32:d0:ff:fa:5c:1d:fb:c4:2b:99:21:fc:ad:cc:
93:d5:7c:1e:d1:b6:4d:d1:5b:cd:b1:49:9a:74:af:2b:86:de:
b1:da:dc:7b:bb:f2:44:e4:4b:f5:36:4b:44:4e:65:c3:83:b1:
ef:ca:0d:96:f0:69:61:4f:d7:a2:26:67:d4:a5:e0:bb:93:f1:
46:e4:61:68:2b:d4:e9:a0:2d:22:4d:81:b9:73:9e:2e:98:19:
3b:5d:ff:27:d5:a2:dc:b3:0c:5d:79:18:d1:5a:27:3d:6f:68:
5c:8d:b4:c8:75:3d:a8:aa:d2:d2:46:73:04:83:d0:f7:45:61:
f1:89:22:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 19:25:32 2024 by rpki-client on console-fra.rpki-client.org