Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y-iIHKQXnkS_jJX2UVTZiHny3a0.roa
File: Y-iIHKQXnkS_jJX2UVTZiHny3a0.roa (raw, json)
Hash identifier: rDIjwRIDlWlgZ16tnlC7xOtnv7eV59pFjQe//cKGiVg=
Subject key identifier: 63:E8:88:1C:A4:17:9E:44:BF:8C:95:F6:51:54:D9:88:79:F2:DD:AD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01912E1837C3EE69BE255654AA523CC22210
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y-iIHKQXnkS_jJX2UVTZiHny3a0.roa
Signing time: Wed 07 Aug 2024 18:27:04 +0000
ROA not before: Wed 07 Aug 2024 18:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61254
IP address blocks: 31.56.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 19:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2e:18:37:c3:ee:69:be:25:56:54:aa:52:3c:c2:22:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 7 18:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63e8881ca4179e44bf8c95f65154d98879f2ddad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:68:e2:88:5f:c7:86:6a:01:8c:ba:ef:d1:
c6:81:b6:52:37:3e:8a:c5:f2:6f:3e:86:1a:cc:d2:
74:4c:42:b2:c1:8c:8c:b7:a0:01:f3:1e:8d:ea:00:
db:b6:1d:c6:9f:54:09:fd:8e:b9:90:92:1a:d9:db:
c2:d7:7a:85:39:0c:be:7e:c0:b3:29:5b:a1:01:34:
e4:8b:1a:6f:29:2a:ea:c9:f9:68:4f:4b:7b:33:5c:
38:24:6b:a7:7b:8b:d0:17:43:e4:d6:c0:44:08:ac:
d6:7d:cb:e6:32:0d:17:95:ae:47:5d:c3:0a:f1:98:
a5:31:18:d9:e6:c9:37:09:be:1a:a1:fb:21:da:58:
6c:14:15:d3:ae:e3:ae:9e:5b:36:68:72:7e:30:4c:
b1:8d:8a:de:87:4b:f2:86:85:e8:54:2c:e2:d9:1e:
8d:1a:f8:25:47:20:71:68:1d:ac:2e:18:54:c8:fe:
d5:94:62:41:8d:00:ba:bd:10:7e:8d:6c:4a:28:34:
c0:02:b5:5e:81:f1:57:72:09:75:21:c7:bc:f1:83:
d0:1c:74:d7:fd:ed:56:ff:88:c1:63:22:97:1c:ed:
47:85:f2:88:57:ba:14:6c:e9:48:8d:d6:46:13:2f:
ea:a2:11:1d:27:39:65:74:3b:a9:03:b6:8b:d1:29:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:88:1C:A4:17:9E:44:BF:8C:95:F6:51:54:D9:88:79:F2:DD:AD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y-iIHKQXnkS_jJX2UVTZiHny3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b9:c3:55:b7:f6:66:3b:fe:50:48:07:4d:11:c2:3a:7e:41:
55:48:b2:b1:84:97:2a:b9:8e:f3:f5:7d:30:b9:88:17:d5:09:
c8:dd:e9:2e:0b:46:b1:cb:5a:91:82:7e:37:e8:17:08:99:d4:
60:7c:f3:88:1f:f7:53:0e:d1:b1:25:3d:dc:ef:f0:fb:6a:4b:
09:f9:9e:bb:b2:34:21:6b:af:b8:7b:ed:60:15:52:c9:13:97:
5c:4a:fa:0b:84:6a:a3:c3:32:01:dd:61:e9:36:95:c3:88:12:
cb:1c:ea:c4:30:de:1c:99:ea:d5:aa:4b:a5:94:f7:52:0c:e8:
89:4c:e0:b8:cd:19:3d:e7:90:3c:f3:99:45:fc:db:5f:7d:ea:
1a:11:8e:b6:26:48:66:d3:92:cf:e4:fd:ea:a7:df:23:56:78:
33:aa:3f:fc:24:05:f6:21:d1:08:8c:2a:15:dc:85:08:28:23:
01:93:07:af:39:58:e7:c6:29:40:14:3f:3e:e7:b1:21:91:e9:
9b:da:e5:72:1b:06:34:db:20:1d:e7:e5:92:22:5d:af:7d:de:
f3:c4:82:4c:bc:64:8a:cf:e5:7d:2b:49:05:a6:85:3f:ab:f9:
a9:1f:3f:49:32:16:66:39:43:76:fb:19:fd:b9:1c:49:6c:27:
15:00:bf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 21:37:28 2024 by rpki-client on console-fra.rpki-client.org