Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZjLiQeOFhzJrugv_bHLiiKcZCNo.roa
File: ZjLiQeOFhzJrugv_bHLiiKcZCNo.roa (raw, json)
Hash identifier: bD7ngkyUGLhl6jElBaeOt0kfmYyaHVcppuxMiK8IuSw=
Subject key identifier: 66:32:E2:41:E3:85:87:32:6B:BA:0B:FF:6C:72:E2:88:A7:19:08:DA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01923454DA8BDF6E254B7F2244F1CBB757D8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZjLiQeOFhzJrugv_bHLiiKcZCNo.roa
Signing time: Fri 27 Sep 2024 16:33:48 +0000
ROA not before: Fri 27 Sep 2024 16:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.186.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 06:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:34:54:da:8b:df:6e:25:4b:7f:22:44:f1:cb:b7:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 27 16:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6632e241e38587326bba0bff6c72e288a71908da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:c6:77:50:e0:42:82:bd:b1:ea:d6:e6:5e:
94:18:86:b1:7d:85:87:7d:d5:1f:99:7f:47:3c:1a:
7b:ba:c0:12:2f:f8:66:e7:2c:a1:8a:7d:70:80:24:
a0:6c:63:18:ab:b3:ae:62:09:b6:2f:17:c3:d3:6b:
ab:5c:4b:46:fc:57:22:1c:ec:9f:63:46:47:43:56:
5f:94:74:81:11:36:73:88:0f:1e:c5:3d:50:81:2f:
35:d5:c9:6f:78:c4:e3:29:29:7d:5e:1d:9c:31:34:
38:73:61:9f:f9:6e:24:88:4e:66:89:2e:3b:14:fd:
fc:fb:ac:32:d1:71:35:0b:30:fe:cd:49:56:53:d6:
92:97:55:ad:13:61:76:9f:d6:41:5c:73:42:09:24:
c5:4c:a0:d9:77:d9:fd:5a:1b:b8:57:98:c1:32:6f:
47:da:c1:fa:92:18:4c:c8:fc:30:55:f0:3c:93:63:
94:26:06:c5:28:f1:f8:38:01:6d:5b:4c:8b:a5:ee:
78:f0:f4:6b:ff:fa:83:91:ab:a8:dc:7b:13:cc:ac:
29:e9:b3:81:df:07:f6:0b:42:56:3a:d8:7f:27:2d:
0e:52:a2:15:fe:e1:d3:02:47:fb:03:ce:5f:fe:74:
c0:35:c4:73:0e:2e:9b:ad:27:df:15:bb:60:2f:bd:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:32:E2:41:E3:85:87:32:6B:BA:0B:FF:6C:72:E2:88:A7:19:08:DA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZjLiQeOFhzJrugv_bHLiiKcZCNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.64.0/24
31.56.160.0/21
31.57.176.0-31.57.187.255
Signature Algorithm: sha256WithRSAEncryption
9f:3a:5a:cc:5a:98:7b:c7:7e:93:69:22:f4:7e:2d:ec:8c:45:
2a:96:03:14:58:f9:d3:ea:98:2e:95:af:d8:30:61:ff:8f:19:
02:fb:74:29:ca:be:3d:d7:fb:aa:0f:79:64:6c:d1:7b:c7:d5:
e1:19:c0:18:2a:4a:1e:5b:d2:ff:52:0a:f6:32:1f:84:1c:48:
09:84:c6:a1:45:d3:b3:e3:d9:84:3f:67:df:d8:68:df:e6:06:
22:9e:04:50:7f:74:51:0e:1a:4b:ef:28:cd:ce:76:0c:ca:8e:
11:12:2e:51:c2:2f:1c:69:fd:7f:32:eb:cb:eb:b8:73:78:d6:
2a:1a:d8:33:c2:71:92:c9:4a:a2:73:bd:d9:fc:2e:4a:f3:f9:
57:68:98:fb:c3:54:ac:d6:58:f0:2f:0b:95:3b:7f:fa:e1:15:
8d:2e:82:71:06:8a:3b:4f:af:16:f1:75:33:9a:4a:fa:33:85:
d0:c1:fe:64:7b:b4:39:c5:bc:04:80:0b:d7:48:2b:b3:cb:29:
85:65:18:92:bd:bf:62:71:06:39:71:f3:25:b2:7e:ba:62:b9:
30:8b:ec:43:56:f4:f2:76:e1:47:1f:2b:9e:b8:fb:30:6b:92:
1a:9f:51:99:5a:a3:ac:ea:8f:d1:a8:67:78:5a:12:cd:20:a5:
86:4c:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 09:26:23 2024 by rpki-client on console-ams.rpki-client.org