Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W--l6byhi_vhRYlr3-vfVcqnt1I.roa
File: W--l6byhi_vhRYlr3-vfVcqnt1I.roa (raw, json)
Hash identifier: OyZT0ERRfzawEQR3/8vQuFQa8ZV67CgU7ezhlBo3Yso=
Subject key identifier: 5B:EF:A5:E9:BC:A1:8B:FB:E1:45:89:6B:DF:EB:DF:55:CA:A7:B7:52
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191239EA4CB354CFB0F7071D9909F05D7DB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W--l6byhi_vhRYlr3-vfVcqnt1I.roa
Signing time: Mon 05 Aug 2024 17:38:05 +0000
ROA not before: Mon 05 Aug 2024 17:38:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 28 Aug 2024 10:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:9e:a4:cb:35:4c:fb:0f:70:71:d9:90:9f:05:d7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 5 17:38:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5befa5e9bca18bfbe145896bdfebdf55caa7b752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:4a:2e:9c:f6:14:c6:91:d9:71:91:06:88:
5f:47:6a:d5:1b:c6:f2:18:aa:5e:f2:bc:23:5d:49:
1d:ab:90:48:46:02:92:6f:10:76:07:af:ad:e1:39:
66:2f:7e:a0:7c:a9:f9:d5:c1:be:38:47:c2:70:97:
5f:68:e8:64:ba:e2:48:5e:83:4a:3d:e7:7f:db:ec:
35:f5:c4:18:dc:00:0b:da:14:34:9e:81:02:04:cb:
90:15:c0:3f:2f:70:fd:88:ee:7a:d0:1f:6c:56:5b:
3f:12:51:a8:b1:7c:b7:0f:0b:81:74:39:f7:e2:f1:
ec:a0:a9:20:f2:c4:9d:11:f4:33:db:a0:47:63:c8:
29:3b:66:de:32:cf:33:3c:b3:b8:89:fb:0a:92:75:
0c:2b:bf:f9:02:f3:32:91:d0:e2:f4:fa:25:db:58:
62:4b:e8:72:3c:c1:d3:d9:e8:ca:69:0b:76:c6:48:
c5:5e:83:c6:fe:68:89:c1:3d:b0:d9:ac:aa:52:5f:
02:57:fa:2e:fe:7a:4d:26:e8:95:19:01:13:f1:33:
d9:01:ec:5f:fa:de:5c:73:29:da:4d:2d:55:49:e3:
f2:54:79:2f:4e:d9:f0:94:88:78:76:2b:81:c1:fd:
31:ac:0c:76:58:f7:0b:c8:4c:26:69:4a:3b:e0:f4:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EF:A5:E9:BC:A1:8B:FB:E1:45:89:6B:DF:EB:DF:55:CA:A7:B7:52
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W--l6byhi_vhRYlr3-vfVcqnt1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.112.0/21
Signature Algorithm: sha256WithRSAEncryption
07:57:16:1e:29:af:2a:a2:21:3e:5b:fa:04:aa:b0:5c:d3:19:
c5:fb:9c:c1:e9:1f:86:68:2a:33:34:e7:6e:ca:1b:90:d8:14:
9a:70:9a:47:1b:28:dc:06:5d:37:63:22:6b:de:c4:d7:af:14:
b1:3f:89:66:fb:5f:63:ee:1d:64:84:98:a5:74:f3:7c:0b:a1:
b4:81:0a:c0:b4:68:0c:1a:3b:d4:e7:2b:5e:90:2d:db:6c:6c:
7e:65:3d:ca:90:52:8f:42:d3:a5:35:39:cd:d9:fc:2a:3f:67:
4c:45:92:bb:a3:ca:c0:21:0e:b8:a6:c1:dd:9b:e2:9d:f2:e6:
71:95:7a:c8:cd:0f:8a:d1:64:40:de:d5:bc:ec:2e:f7:b7:61:
42:e0:ad:29:92:8a:60:05:a8:22:f8:81:6a:eb:5d:63:9a:d5:
b7:a5:6e:78:3f:1c:6f:51:e3:7b:67:07:6c:d1:db:4d:3d:4e:
9b:bf:1b:0c:c3:24:98:8c:7f:d4:f3:e3:1a:29:d6:bd:bc:47:
22:20:8a:e2:8c:6d:f9:45:af:73:4a:77:ca:6c:fc:8a:e8:b1:
54:2b:a8:ab:65:86:07:d3:98:6d:6e:89:13:5f:94:b3:33:5e:
23:38:ba:03:ee:43:d6:d9:55:0b:49:20:de:e3:20:f2:da:2c:
dc:f7:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 13:39:37 2024 by rpki-client on console-fra.rpki-client.org