Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZgJlZmmVjvnZ7g_bWGJjqR_GF64.roa
File: ZgJlZmmVjvnZ7g_bWGJjqR_GF64.roa (raw, json)
Hash identifier: wXuCauycbxK/bKsIIpRd+iiB78+eaQfllXQ9CtZWrig=
Subject key identifier: 66:02:65:66:69:95:8E:F9:D9:EE:0F:DB:58:62:63:A9:1F:C6:17:AE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01925B9119DD30C925111622881F013ECF30
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZgJlZmmVjvnZ7g_bWGJjqR_GF64.roa
Signing time: Sat 05 Oct 2024 07:24:48 +0000
ROA not before: Sat 05 Oct 2024 07:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.2.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.35.0/24 maxlen: 24
31.56.39.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.138.0/24 maxlen: 24
31.56.139.0/24 maxlen: 24
31.56.140.0/24 maxlen: 24
31.56.145.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 07:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5b:91:19:dd:30:c9:25:11:16:22:88:1f:01:3e:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 5 07:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6602656669958ef9d9ee0fdb586263a91fc617ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:fe:e6:72:a3:81:c7:11:a2:f8:3b:99:c1:
66:17:b5:52:c3:93:3a:0e:13:24:e2:f7:3a:9a:db:
eb:c4:87:2d:ea:2b:81:69:54:10:6f:40:77:33:9f:
87:e9:52:9b:9c:2e:b3:a7:5d:b7:ae:66:bf:10:62:
0e:6d:e8:6b:27:3f:90:41:22:bf:24:19:bd:ff:aa:
b8:e8:1e:28:f8:9a:29:11:bb:df:1f:30:c7:52:2f:
e6:ac:3b:cd:46:db:ee:b3:c5:6a:ab:33:9c:3c:cb:
85:dd:a5:c2:d9:4a:38:f9:d5:11:04:67:cd:b1:46:
55:0f:85:d3:bf:89:e2:47:aa:9a:a7:93:50:88:19:
01:3a:4f:1c:7d:e5:d3:35:96:65:5d:ea:00:2c:1c:
e7:c4:9a:de:6c:cb:c1:7b:72:0a:96:88:6c:e4:32:
ad:6f:91:84:3c:ad:56:e7:b4:bf:da:b3:48:e5:ca:
82:fa:7a:a0:e4:1c:4c:f4:99:c0:48:3e:88:36:36:
d3:2b:77:0e:de:b6:e3:6b:46:50:9d:b3:29:9d:06:
6d:c3:de:cd:fc:25:31:fc:e5:74:b0:07:58:73:f3:
2d:91:82:b7:7d:1a:d3:87:89:df:1a:71:ea:31:20:
0f:d4:d8:f3:1a:28:09:29:db:82:09:4e:dd:7f:4f:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:02:65:66:69:95:8E:F9:D9:EE:0F:DB:58:62:63:A9:1F:C6:17:AE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZgJlZmmVjvnZ7g_bWGJjqR_GF64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.2.0/24
31.56.4.0/23
31.56.35.0/24
31.56.39.0/24
31.56.59.0/24
31.56.63.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.89.0/24
31.56.112.0/21
31.56.126.0/24
31.56.137.0-31.56.140.255
31.56.145.0/24
31.56.147.0/24
31.57.0.0-31.57.9.255
Signature Algorithm: sha256WithRSAEncryption
4c:18:88:2b:f0:3a:64:e6:e4:c7:a9:ad:6f:29:61:67:f7:ad:
36:5e:42:93:02:be:c4:c1:b1:2c:24:f0:08:74:e8:eb:3e:72:
ed:ea:7d:7b:9e:f1:44:48:41:42:69:3b:75:1d:bf:8c:8d:33:
72:a7:e8:ae:0b:ea:95:5d:81:ad:b5:a1:8c:3c:2b:62:39:2d:
94:c0:e6:f8:c3:10:b1:ad:cd:95:9a:bf:bc:d8:7a:6d:c0:b2:
a8:37:89:7e:b6:9e:ea:aa:de:44:a6:40:a6:bf:2c:4e:36:33:
ed:4a:66:b0:1c:6c:a9:c6:78:bf:ee:03:93:8e:ea:6c:99:f1:
03:2d:8d:90:a4:26:24:02:94:de:1b:0f:aa:37:06:fc:a5:2e:
b9:cf:62:3a:31:ee:ee:22:6d:5d:14:28:de:bd:a4:d9:63:59:
d0:93:1c:0f:b6:a0:29:71:29:90:ba:f2:b1:37:96:e1:5d:85:
6e:2c:cf:b9:33:26:de:90:c5:5c:7b:52:57:29:3e:49:b3:29:
17:81:d6:39:f9:4c:e1:7d:75:f7:5a:fe:17:c1:c3:67:d9:29:
ac:17:c7:80:0e:bf:f1:82:1b:85:27:5d:8e:97:15:7b:73:71:
4e:c4:4d:89:30:eb:66:d8:57:55:80:ab:8b:ee:37:a4:d6:9d:
cb:af:66:f9
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISAZJbkRndMMklERYiiB8BPs8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA1MDcyNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjAyNjU2NjY5OTU4ZWY5ZDllZTBmZGI1ODYyNjNhOTFmYzYxN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbT+5nKjgccRovg7mcFmF7VSw5M6
DhMk4vc6mtvrxIct6iuBaVQQb0B3M5+H6VKbnC6zp123rma/EGIObehrJz+QQSK/
JBm9/6q46B4o+JopEbvfHzDHUi/mrDvNRtvus8VqqzOcPMuF3aXC2Uo4+dURBGfN
sUZVD4XTv4niR6qap5NQiBkBOk8cfeXTNZZlXeoALBznxJrebMvBe3IKlohs5DKt
b5GEPK1W57S/2rNI5cqC+nqg5BxM9JnASD6INjbTK3cO3rbja0ZQnbMpnQZtw97N
/CUx/OV0sAdYc/MtkYK3fRrTh4nfGnHqMSAP1NjzGigJKduCCU7df08zXQIDAQAB
o4ICeTCCAnUwHQYDVR0OBBYEFGYCZWZplY752e4P21hiY6kfxheuMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWmdKbFptbVZqdm5aN2dfYldHSmpxUl9HRjY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wewQCAAEwdQMEAB84AgME
AR84BAMEAB84IwMEAB84JwMEAB84OwMEAB84PwMEAB84QwMEAB84RQMEAB84SAME
AB84VAMEAB84WQMEAx84cAMEAB84fjAMAwQAHziJAwQAHziMAwQAHziRAwQAHziT
MAsDAwAfOQMEAR85CDANBgkqhkiG9w0BAQsFAAOCAQEATBiIK/A6ZObkx6mtbylh
Z/etNl5CkwK+xMGxLCTwCHTo6z5y7ep9e57xREhBQmk7dR2/jI0zcqforgvqlV2B
rbWhjDwrYjktlMDm+MMQsa3NlZq/vNh6bcCyqDeJfrae6qreRKZApr8sTjYz7Upm
sBxsqcZ4v+4Dk47qbJnxAy2NkKQmJAKU3hsPqjcG/KUuuc9iOjHu7iJtXRQo3r2k
2WNZ0JMcD7agKXEpkLrysTeW4V2FbizPuTMm3pDFXHtSVyk+SbMpF4HWOflM4X11
91r+F8HDZ9kprBfHgA6/8YIbhSddjpcVe3NxTsRNiTDrZthXVYCri+43pNady69m
+Q==
-----END CERTIFICATE-----
Generated at Mon Oct 7 10:52:31 2024 by rpki-client on console-ams.rpki-client.org