Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VX7oby1kdku52kRb7x-OjXa5BAA.roa
File: VX7oby1kdku52kRb7x-OjXa5BAA.roa (raw, json)
Hash identifier: J69McOg9aUZrR8mDM5whQeSKkAlMzTUcZrhs9zmjq9Q=
Subject key identifier: 55:7E:E8:6F:2D:64:76:4B:B9:DA:44:5B:EF:1F:8E:8D:76:B9:04:00
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0190BA01BCA44C114C263DCA76A55DF92CB8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VX7oby1kdku52kRb7x-OjXa5BAA.roa
Signing time: Tue 16 Jul 2024 05:26:34 +0000
ROA not before: Tue 16 Jul 2024 05:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215211
IP address blocks: 31.56.0.0/14 maxlen: 14
31.56.0.0/16 maxlen: 16
31.58.0.0/24 maxlen: 24
31.59.0.0/16 maxlen: 16
31.59.255.0/24 maxlen: 24
46.224.0.0/15 maxlen: 15
91.98.0.0/16 maxlen: 16
2a14:6e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 16 Jul 2024 16:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:01:bc:a4:4c:11:4c:26:3d:ca:76:a5:5d:f9:2c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 16 05:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=557ee86f2d64764bb9da445bef1f8e8d76b90400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c8:d5:4c:c0:3f:f2:05:b6:d6:de:b8:25:f7:
b4:8f:89:85:40:0f:42:2c:fc:76:70:c7:68:46:94:
81:70:44:14:a7:7c:ed:d1:ab:6b:cd:53:f6:f1:35:
af:12:4e:2f:d0:40:c5:91:23:d6:ad:09:7e:c6:42:
e5:fc:50:16:ba:7f:95:00:c1:a6:86:18:4f:a8:bc:
09:ab:88:dd:c8:b3:d1:a3:c7:8a:f1:a6:4b:1d:4a:
8a:46:1c:fb:cd:7b:5d:ea:79:2b:77:e1:fc:96:2c:
d1:c4:eb:e4:b8:bd:ae:f8:15:84:cb:91:70:07:2a:
3b:3e:cb:6c:59:c0:9a:e8:28:f7:35:99:6e:d1:06:
05:d1:5e:17:e6:b5:8a:03:55:4a:96:91:f9:c1:12:
4b:bc:1d:00:84:71:03:14:90:8e:08:3a:65:11:03:
a7:2b:31:5a:4b:18:15:3b:63:0d:fd:c2:ff:8f:3e:
69:90:16:b0:48:90:43:2c:56:01:be:de:13:65:f8:
2b:c0:c2:2a:9a:06:50:db:dd:37:27:23:6b:75:a3:
d6:16:59:81:01:0e:e0:61:df:69:0f:07:a5:cf:6c:
5d:85:fc:cd:2f:b2:22:41:73:28:49:95:49:7f:d9:
c0:f0:73:4f:3d:d9:4a:f0:96:af:38:d5:a8:bf:1e:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7E:E8:6F:2D:64:76:4B:B9:DA:44:5B:EF:1F:8E:8D:76:B9:04:00
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VX7oby1kdku52kRb7x-OjXa5BAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/14
46.224.0.0/15
91.98.0.0/16
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
12:80:ed:f6:67:30:f8:8e:a1:67:e7:9c:1b:d7:b2:89:1d:50:
02:1d:64:7a:94:fd:13:d7:cb:81:47:ec:ae:b0:c0:fe:e0:da:
03:b9:11:b6:bc:58:09:b7:03:33:ea:05:a2:74:36:1c:6a:d7:
7d:e7:ae:03:63:b4:3c:5e:1b:62:e1:3d:f7:72:21:d6:5c:c5:
a4:12:ac:1f:19:9e:09:f3:73:d1:e7:30:a5:fd:fc:33:c4:a8:
2d:f1:04:65:81:17:0e:98:25:f0:f7:de:f7:51:f4:b4:99:61:
da:df:f6:67:da:ff:a0:dc:ff:ad:b4:99:c0:02:52:1a:11:eb:
9c:73:aa:71:d0:ea:96:1d:76:a3:e0:a4:27:d6:5e:ac:fd:55:
3f:76:5d:62:ff:37:3a:b6:9c:26:df:28:ae:7f:1e:36:b0:cd:
f8:e3:64:c3:0e:1b:ed:ac:f4:ee:bb:a3:40:cd:e2:bc:90:fd:
fa:7f:bf:62:ca:e2:e8:29:d9:27:d2:ae:e6:a4:ba:8e:65:c4:
db:6f:2f:e1:fc:bf:22:da:c4:4d:39:e8:30:49:4a:b3:55:17:
13:c9:df:03:a9:74:89:06:c7:da:58:9d:12:b8:26:fe:2b:72:
e3:4c:c0:d1:4c:a3:e2:e5:d4:e6:bc:de:59:9b:7b:da:ca:24:
d4:19:71:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 20:13:37 2024 by rpki-client on console-fra.rpki-client.org