Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WEg3kARffB2Zulm_IgnsTHdplfI.roa
File: WEg3kARffB2Zulm_IgnsTHdplfI.roa (raw, json)
Hash identifier: BoQvtEnYMxR+avyOrDlgcppHV9VsAwyAEyVGjHGaGPE=
Subject key identifier: 58:48:37:90:04:5F:7C:1D:99:BA:59:BF:22:09:EC:4C:77:69:95:F2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019302A5D1C91294EF4A28B7370EA07578B9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WEg3kARffB2Zulm_IgnsTHdplfI.roa
Signing time: Wed 06 Nov 2024 18:04:01 +0000
ROA not before: Wed 06 Nov 2024 18:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.39.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 16:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:02:a5:d1:c9:12:94:ef:4a:28:b7:37:0e:a0:75:78:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 6 18:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58483790045f7c1d99ba59bf2209ec4c776995f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:63:68:44:b7:70:48:b2:61:30:dd:3f:14:
77:c8:a6:00:46:a8:bf:e1:44:09:d3:31:30:a5:01:
f3:56:e9:09:6d:83:c4:db:ae:5b:a2:00:0d:df:5f:
07:cb:d2:2f:2c:e7:08:57:09:c4:7e:f0:12:6a:36:
59:0d:fe:f6:7b:ae:3e:16:57:08:6e:77:eb:a1:12:
e5:1a:ed:95:7b:76:87:cb:43:9d:5e:af:c2:48:1b:
e1:0d:55:84:f0:f5:cf:56:87:37:cb:23:93:fd:ee:
36:58:63:69:d6:18:d4:c2:77:68:b2:59:2d:50:b8:
bf:49:8c:a2:e6:ca:34:5e:d4:b4:a8:8b:ab:d1:f4:
73:b6:3f:55:78:a6:92:24:8b:79:cb:b3:32:85:78:
ba:fa:7b:b0:c9:d2:1c:20:ed:61:73:14:98:4c:ee:
96:61:77:e5:f6:0f:26:d4:1b:64:5c:5b:32:0f:cf:
f3:e4:70:31:c6:7b:be:22:9a:61:ad:32:38:a0:fd:
df:c5:c5:d3:e8:41:46:e1:5d:e4:e9:d5:87:e6:6f:
72:6c:2a:16:63:af:73:1f:cd:98:bf:ef:4b:c7:9d:
78:5f:b6:ef:d8:ca:ab:98:55:76:03:6a:ca:9d:2e:
70:75:e4:93:53:a5:0c:fb:6a:2a:1b:9a:6d:37:b5:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:48:37:90:04:5F:7C:1D:99:BA:59:BF:22:09:EC:4C:77:69:95:F2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WEg3kARffB2Zulm_IgnsTHdplfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.39.0/24
31.56.42.0/23
31.56.66.0/24
31.56.85.0/24
31.56.89.0/24
31.56.120.0/22
31.56.127.0/24
31.57.0.0-31.57.9.255
31.57.132.0/23
31.57.176.0/21
31.57.192.0/22
31.57.232.0/22
31.57.244.0/22
Signature Algorithm: sha256WithRSAEncryption
11:37:60:98:17:95:c7:d0:10:b6:b0:ba:89:ae:b6:d6:1f:14:
2e:88:8f:d4:c7:4a:e3:8d:24:c3:e3:0d:db:5d:73:e5:f9:b4:
30:7c:b8:b4:ee:d7:c6:d2:3e:e2:4f:26:8f:26:2f:46:c4:a9:
24:c0:62:87:7c:e1:6b:a0:3d:f0:7d:a7:ed:4e:9e:e8:f6:85:
39:d1:3f:85:9e:fd:18:78:90:a8:ed:1f:75:2c:ad:c9:6a:e3:
a8:51:c9:0a:ea:55:16:39:03:5e:f3:21:8a:de:00:ee:b3:5a:
23:d5:5e:08:56:b7:f6:24:fa:64:c1:e9:72:21:b3:83:d1:0e:
eb:d3:ae:6e:46:1b:de:52:00:ce:e0:08:52:7d:8c:a6:45:da:
93:2c:fd:03:2f:14:81:35:46:0b:42:f9:18:56:d8:ac:13:39:
6f:44:7e:d7:42:24:32:ba:f2:82:9a:8b:6e:96:40:1d:f8:03:
99:62:22:0d:ae:78:dc:60:15:c4:80:ad:f8:00:cb:b2:8d:e9:
44:07:38:cc:87:c5:a9:91:5e:37:d5:f3:f5:62:26:5b:c6:26:
7f:fe:3b:49:0b:02:ba:a8:a6:80:dd:82:fa:28:39:11:bc:89:
fb:8e:b5:33:91:ee:fe:fe:cb:14:e9:f6:e4:59:68:22:ec:6a:
16:80:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 20:13:12 2024 by rpki-client on console-fra.rpki-client.org