Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aggDoeu6lnGwJM-OyaC0f5rdxqA.roa
File: aggDoeu6lnGwJM-OyaC0f5rdxqA.roa (raw, json)
Hash identifier: FjtVy1lQiWLixqvCd7LKoFdddRXjLCBzPugUpN02I+U=
Subject key identifier: 6A:08:03:A1:EB:BA:96:71:B0:24:CF:8E:C9:A0:B4:7F:9A:DD:C6:A0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191B365DC3534B1E617CC64DE3F8B2D4BDE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aggDoeu6lnGwJM-OyaC0f5rdxqA.roa
Signing time: Mon 02 Sep 2024 15:41:22 +0000
ROA not before: Mon 02 Sep 2024 15:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 06:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:65:dc:35:34:b1:e6:17:cc:64:de:3f:8b:2d:4b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 2 15:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a0803a1ebba9671b024cf8ec9a0b47f9addc6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:1e:23:1b:25:b7:1d:02:01:97:ac:41:20:
66:d4:25:d0:ab:b3:d8:b4:ed:9a:f6:7e:fd:ae:f4:
01:5e:a7:d0:f3:ed:b4:a4:0d:55:24:93:01:d1:cb:
9b:c4:21:31:a3:20:eb:ef:72:22:97:d2:4d:f8:47:
fd:3c:57:77:30:74:e0:21:6f:36:aa:d6:df:c3:55:
9f:4e:e9:9d:d3:f0:dd:0c:17:e1:1e:53:6a:ca:c1:
8e:6f:53:f9:50:87:ab:7d:9e:3f:59:7e:08:28:60:
1c:0c:8d:91:f1:96:03:81:15:b2:f7:dc:3e:94:44:
ac:df:fa:4d:6b:33:11:bf:b8:f1:a6:6e:ad:71:81:
04:ab:b2:39:18:80:a2:2a:55:8d:fa:70:07:21:b0:
f2:ec:c4:94:bb:7e:07:d0:7e:21:50:c6:6a:35:3c:
4d:07:9b:8d:08:d7:12:72:92:dc:9f:2c:dc:f4:b8:
d1:ae:cc:0d:de:de:33:02:65:fc:cf:6a:3b:c3:fa:
3b:aa:aa:d8:19:e2:ba:57:c7:15:af:41:a7:a0:93:
4b:b1:7a:e8:6c:3d:91:2c:1e:c3:87:f5:22:82:62:
55:cd:1b:36:de:71:cd:a9:26:8c:d6:a2:44:10:f1:
5a:ad:44:74:8e:9f:3b:2b:a4:69:13:28:ef:7a:c5:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:08:03:A1:EB:BA:96:71:B0:24:CF:8E:C9:A0:B4:7F:9A:DD:C6:A0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aggDoeu6lnGwJM-OyaC0f5rdxqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0-31.56.2.255
31.56.137.0-31.56.138.255
Signature Algorithm: sha256WithRSAEncryption
02:ec:c7:42:02:2e:b5:4f:d6:db:2f:56:93:cb:6a:88:12:14:
fa:84:d8:bb:3d:5c:d7:a8:74:7c:fb:52:a7:1d:22:02:b0:89:
9e:31:c0:1a:77:4a:98:cc:17:57:43:81:39:09:ac:a1:a3:56:
af:e9:d5:58:77:71:a0:64:a5:90:53:b9:81:6f:b5:a0:b0:70:
d7:9c:d7:25:c9:66:ba:d4:82:c4:f6:e6:ff:4e:4d:da:17:96:
1f:38:d5:00:63:a5:61:9d:4a:38:bd:aa:2e:c1:47:20:ec:6e:
da:e7:80:42:e2:d9:c4:3b:59:69:b2:e1:4d:9e:2e:19:13:c9:
93:7f:4b:6f:a1:e4:bd:dd:0f:59:7d:df:b6:40:57:de:d3:62:
ee:a6:7d:b2:7d:a5:40:36:5e:42:e5:db:6f:79:48:f2:c6:ef:
e8:da:df:15:13:e4:d4:df:fb:5a:59:91:9b:8a:1a:04:88:2d:
ee:ad:0f:58:86:5d:c7:a7:5a:71:22:e5:11:a8:54:a2:fd:d7:
da:f2:13:58:b7:ac:8f:03:46:d1:26:6c:14:d7:c1:e7:23:0e:
09:47:9f:33:57:ec:2d:94:f0:c9:9b:3e:dc:2e:20:62:80:23:
54:8c:53:9e:bf:8d:93:e7:1d:fc:13:e0:9e:6c:ff:94:79:88:
78:64:6a:5a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZGzZdw1NLHmF8xk3j+LLUveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTAyMTU0MTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTA4MDNhMWViYmE5NjcxYjAyNGNmOGVjOWEwYjQ3ZjlhZGRjNmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVgeIxsltx0CAZesQSBm1CXQq7PY
tO2a9n79rvQBXqfQ8+20pA1VJJMB0cubxCExoyDr73Iil9JN+Ef9PFd3MHTgIW82
qtbfw1WfTumd0/DdDBfhHlNqysGOb1P5UIerfZ4/WX4IKGAcDI2R8ZYDgRWy99w+
lESs3/pNazMRv7jxpm6tcYEEq7I5GICiKlWN+nAHIbDy7MSUu34H0H4hUMZqNTxN
B5uNCNcScpLcnyzc9LjRrswN3t4zAmX8z2o7w/o7qqrYGeK6V8cVr0GnoJNLsXro
bD2RLB7Dh/UigmJVzRs23nHNqSaM1qJEEPFarUR0jp87K6RpEyjvesXUxwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFGoIA6HrupZxsCTPjsmgtH+a3cagMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYWdnRG9ldTZsbkd3Sk0tT3lhQzBmNXJkeHFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAAfOAED
BAAfOAIwDAMEAB84iQMEAB84ijANBgkqhkiG9w0BAQsFAAOCAQEAAuzHQgIutU/W
2y9Wk8tqiBIU+oTYuz1c16h0fPtSpx0iArCJnjHAGndKmMwXV0OBOQmsoaNWr+nV
WHdxoGSlkFO5gW+1oLBw15zXJclmutSCxPbm/05N2heWHzjVAGOlYZ1KOL2qLsFH
IOxu2ueAQuLZxDtZabLhTZ4uGRPJk39Lb6Hkvd0PWX3ftkBX3tNi7qZ9sn2lQDZe
QuXbb3lI8sbv6NrfFRPk1N/7WlmRm4oaBIgt7q0PWIZdx6dacSLlEahUov3X2vIT
WLesjwNG0SZsFNfB5yMOCUefM1fsLZTwyZs+3C4gYoAjVIxTnr+Nk+cd/BPgnmz/
lHmIeGRqWg==
-----END CERTIFICATE-----
Generated at Fri Sep 20 08:12:27 2024 by rpki-client on console-fra.rpki-client.org