Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YDUOo5qehJlooPrOSxuENvB9n-0.roa
File: YDUOo5qehJlooPrOSxuENvB9n-0.roa (raw, json)
Hash identifier: aN8UprzB2uxlvw/ve7YqyYNuA+1BmuA719eV616BhXk=
Subject key identifier: 60:35:0E:A3:9A:9E:84:99:68:A0:FA:CE:4B:1B:84:36:F0:7D:9F:ED
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01919220B57AD1EF41D29393303236AEB5A6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YDUOo5qehJlooPrOSxuENvB9n-0.roa
Signing time: Tue 27 Aug 2024 04:38:22 +0000
ROA not before: Tue 27 Aug 2024 04:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 15:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:20:b5:7a:d1:ef:41:d2:93:93:30:32:36:ae:b5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 27 04:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60350ea39a9e849968a0face4b1b8436f07d9fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:10:20:d6:19:52:b7:56:b8:1c:e0:2b:a3:b8:
1b:78:33:91:53:7f:a6:23:ab:3a:25:75:4c:46:75:
dc:25:3a:a7:90:0f:55:3d:7c:de:77:be:30:ca:3b:
33:66:b1:e2:0b:2e:31:f6:c9:54:01:f1:98:67:a1:
72:75:5d:b6:30:e2:75:42:02:ac:08:7e:13:1d:0a:
85:bc:54:d6:70:33:6a:4f:7d:8f:46:76:b4:11:b3:
a8:fb:c1:9c:42:59:c5:db:a2:e8:cc:22:18:1a:d8:
5a:9f:8f:1e:98:28:a0:a8:c3:03:e6:ef:d5:21:a1:
47:26:09:05:b1:20:54:40:70:b7:e1:43:0b:8d:26:
66:50:28:5b:89:48:a5:66:d7:54:a3:10:cb:e9:8d:
f2:a0:d5:47:77:f0:74:5f:7d:38:76:78:46:21:3e:
d7:27:ee:14:85:d7:fa:a4:2e:a8:9a:44:87:7e:c7:
aa:94:3c:ed:48:2b:18:3f:7a:0a:0c:15:7f:7e:ae:
c1:13:da:17:57:8c:2b:a7:33:91:1f:94:13:20:a6:
44:12:0b:f8:b8:67:40:55:ce:d2:29:8a:e2:9a:ce:
5c:d6:0a:cc:9a:41:dd:d1:3c:29:01:c1:49:bb:25:
d8:e9:2c:16:12:9d:a8:1b:76:99:74:3c:76:a1:2f:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:35:0E:A3:9A:9E:84:99:68:A0:FA:CE:4B:1B:84:36:F0:7D:9F:ED
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YDUOo5qehJlooPrOSxuENvB9n-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0-31.56.2.255
Signature Algorithm: sha256WithRSAEncryption
7f:d5:2f:77:f0:cd:ca:25:e4:12:d4:65:7b:d3:7d:19:95:d1:
60:18:76:06:6e:d7:e6:07:ec:e3:e2:0e:c9:c0:65:fd:47:3f:
0e:bc:df:80:40:b0:34:28:2e:06:0b:5d:39:40:de:fb:bc:3a:
4d:4c:31:ba:7a:88:54:3b:fc:d2:88:94:13:14:36:f7:de:47:
b2:a3:a3:75:b0:99:70:f6:d9:ee:56:cb:44:91:1d:17:eb:ac:
0b:a7:a4:3e:8d:c5:86:35:f6:f1:08:d8:46:ab:cb:e5:f6:97:
26:6d:06:ae:62:03:84:c0:0b:f1:fb:92:d1:81:03:82:39:0a:
02:69:cb:e2:b8:e9:0e:6d:4d:fd:94:a2:69:ee:32:60:b6:05:
f8:26:7e:ef:df:95:31:ac:fa:63:6d:3a:13:1f:9c:7f:cf:5e:
cf:f3:34:1b:4d:d7:c5:d5:1d:9b:48:28:9e:4d:91:b3:dc:5d:
03:b6:e8:b1:3a:e4:c1:a8:33:15:b6:3a:36:ab:87:43:c2:1e:
1d:85:c7:3f:43:59:7b:19:46:47:7b:df:39:de:6a:e3:d8:60:
ec:38:32:11:93:82:21:92:48:cb:51:4f:ea:f6:f8:b9:de:e4:
33:da:97:f5:18:56:11:8f:73:fe:fd:bc:4d:85:a3:75:24:a0:
2f:a2:49:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 18:31:11 2024 by rpki-client on console-ams.rpki-client.org