Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z0mkzKD2zeIWBirXl5ZqZGWRdKU.roa
File: Z0mkzKD2zeIWBirXl5ZqZGWRdKU.roa (raw, json)
Hash identifier: cS5KSMo/mN8O4GsilBe+NbO3gB0Qc9n2Eql7E9O5JHc=
Subject key identifier: 67:49:A4:CC:A0:F6:CD:E2:16:06:2A:D7:97:96:6A:64:65:91:74:A5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191B8537486AD35C8680786C66A06A7870B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z0mkzKD2zeIWBirXl5ZqZGWRdKU.roa
Signing time: Tue 03 Sep 2024 14:39:22 +0000
ROA not before: Tue 03 Sep 2024 14:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215362
IP address blocks: 31.56.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 20:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:53:74:86:ad:35:c8:68:07:86:c6:6a:06:a7:87:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 3 14:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6749a4cca0f6cde216062ad797966a64659174a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:5f:4b:fc:11:88:17:1e:4b:4a:15:13:e1:
df:f4:f1:25:8a:47:36:0f:42:b7:58:84:f7:73:1c:
fd:8e:e4:0a:ce:b4:57:c0:21:71:6d:aa:8c:52:e7:
54:25:f1:13:65:7e:2c:51:f5:be:52:b9:5a:bd:fa:
c0:71:43:94:ec:c0:33:7c:8b:86:ff:99:b1:19:22:
21:67:75:08:37:36:c9:46:61:95:17:41:57:06:e6:
7a:55:14:11:00:9f:fa:48:63:bf:13:33:21:4c:6d:
a8:6e:1a:c1:9c:39:2d:2d:1b:22:c9:de:fc:2a:7e:
a6:73:a1:ac:25:0f:f0:91:97:b9:ed:0c:f9:19:ce:
5f:b3:e3:c3:53:f0:a6:2d:ec:25:eb:61:bb:c8:32:
da:cb:6b:3d:d7:62:26:cf:59:2f:08:9f:0b:d0:6e:
42:f9:5b:e7:c4:42:c8:39:d8:25:b6:fc:4d:d5:cf:
ae:f4:50:d1:e2:33:da:99:cd:7f:ff:b2:52:48:a9:
0b:f5:ae:86:ac:3e:2d:7a:3b:3b:7d:49:1e:80:02:
de:0c:f4:07:06:76:49:4f:16:86:6a:9a:50:f8:e8:
5c:36:7e:e6:d4:fc:fe:35:02:37:51:9b:70:00:99:
e7:d0:1c:4f:f9:db:5d:e7:d9:ae:1d:01:0e:d3:fd:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:49:A4:CC:A0:F6:CD:E2:16:06:2A:D7:97:96:6A:64:65:91:74:A5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z0mkzKD2zeIWBirXl5ZqZGWRdKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.146.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:55:39:aa:0d:5b:c7:35:a5:9e:a4:f7:96:66:bc:0f:65:b4:
5f:be:48:8d:92:29:cd:dd:cd:2d:50:4d:3b:21:8d:c7:4a:0b:
cc:fd:0b:01:92:ed:20:58:88:99:72:93:ca:c9:27:60:ae:1a:
d9:a9:37:6e:73:31:e0:1a:66:80:78:a4:72:83:a1:89:4f:7c:
a8:7f:0f:64:75:fb:2a:e9:8e:f9:46:a2:ec:ba:82:d3:ff:b1:
92:9c:48:d4:a8:79:9f:bd:e2:d3:5b:1e:c9:95:b9:ed:0e:36:
08:18:d5:b8:87:78:50:4f:16:6a:0e:1a:e7:6a:96:96:be:35:
03:b7:af:7b:3e:d9:90:d4:3e:49:ab:79:1d:34:6b:fb:b9:4b:
28:d0:bd:39:96:73:6f:a1:56:0e:54:01:7c:29:4b:e2:e6:b8:
d0:07:36:d4:c5:f1:87:22:25:24:61:c2:b5:3b:c4:67:ef:b5:
df:52:cd:6e:0b:e1:19:a9:b6:ce:bb:f9:0c:6b:67:b9:86:c0:
80:5a:27:62:04:ab:bb:99:27:cc:0b:78:65:1e:99:bb:f0:b6:
f7:47:f0:7c:f1:ce:9a:7c:36:ee:b6:7b:f2:da:2e:4f:20:cd:
2a:69:54:e6:39:c7:47:63:6f:5e:f0:c7:d6:77:0a:1a:b7:d8:
55:a6:1d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 21:26:31 2024 by rpki-client on console-fra.rpki-client.org