Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b2qvH32Ik0754sjQyROJnMK-IgA.roa
File: b2qvH32Ik0754sjQyROJnMK-IgA.roa (raw, json)
Hash identifier: DSbnsBt69ZizL7rteUomPfSnH6dblAj/evTxo4LAJs8=
Subject key identifier: 6F:6A:AF:1F:7D:88:93:4E:F9:E2:C8:D0:C9:13:89:9C:C2:BE:22:00
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01926B717C521BB94565F46204F437FAEE33
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b2qvH32Ik0754sjQyROJnMK-IgA.roa
Signing time: Tue 08 Oct 2024 09:24:12 +0000
ROA not before: Tue 08 Oct 2024 09:24:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.138.0/24 maxlen: 24
31.56.139.0/24 maxlen: 24
31.56.140.0/24 maxlen: 24
31.56.145.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.130.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 08 Oct 2024 16:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:71:7c:52:1b:b9:45:65:f4:62:04:f4:37:fa:ee:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 8 09:24:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f6aaf1f7d88934ef9e2c8d0c913899cc2be2200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1a:c3:3f:df:6f:7c:cd:68:ec:ac:0d:e4:62:
fe:07:4c:cc:27:e3:88:8e:03:48:cb:a2:a8:9f:8a:
6a:bd:ee:f2:f1:0b:9b:dc:f7:fb:fe:f5:f4:31:04:
f0:f3:30:7d:c2:72:b2:11:84:19:25:5c:fe:41:f7:
86:7a:50:04:97:6e:de:44:d7:9b:80:f2:50:7e:11:
df:a8:0d:64:84:99:1d:ee:3a:5f:7e:c1:f5:ec:82:
d3:f4:22:74:66:62:22:40:d4:39:76:a4:c0:e2:21:
90:05:d2:2d:24:f6:27:4d:d3:04:ea:5b:63:33:e8:
e1:b8:f5:01:39:8c:f9:8f:0b:e9:c7:c0:c3:30:3e:
4a:6a:21:f7:11:4b:95:32:a8:31:16:11:f7:e6:c8:
6e:8f:e6:b0:47:6c:2d:c1:1f:a4:e2:58:8c:5f:bc:
c0:9c:a0:65:24:ce:55:a9:7c:6b:19:6d:68:d3:b6:
3e:82:5c:99:fb:fc:15:54:59:97:35:2a:b9:40:6a:
a8:34:88:7d:cb:b2:0b:f7:08:8e:5f:95:38:e1:e7:
3f:15:79:2a:e2:6b:fb:0e:e8:9c:9a:06:06:99:b5:
b8:62:6f:79:aa:fa:e9:fc:59:1f:6d:04:ea:93:51:
a8:43:bc:a9:9c:c3:f5:46:bc:96:45:cf:08:49:6e:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6A:AF:1F:7D:88:93:4E:F9:E2:C8:D0:C9:13:89:9C:C2:BE:22:00
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b2qvH32Ik0754sjQyROJnMK-IgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.44.0/24
31.56.89.0/24
31.56.112.0/21
31.56.137.0-31.56.140.255
31.56.145.0/24
31.56.147.0/24
31.57.0.0-31.57.9.255
31.57.130.0-31.57.133.255
Signature Algorithm: sha256WithRSAEncryption
0b:0e:6d:87:e0:89:bf:27:ba:e0:48:f6:46:c0:18:b3:92:50:
c3:bc:a8:45:07:78:48:65:e9:66:a4:10:00:45:a1:eb:47:af:
b0:3c:53:4e:00:4f:84:20:1b:76:de:84:08:a3:e0:ce:11:3f:
e5:46:92:c6:7a:bf:f8:cf:64:f9:19:64:b7:a7:92:db:be:3d:
a4:ab:bd:60:ed:9e:49:f0:ee:34:e1:df:05:a3:59:a2:fc:f6:
a4:a0:76:7e:ba:44:3f:31:68:ea:06:3c:64:86:8d:ac:c6:73:
9d:54:b3:89:5b:55:06:cf:8f:7a:b2:26:11:cd:05:de:4e:f7:
6a:c7:12:80:97:53:80:53:36:04:70:c5:34:c5:1d:b8:dd:fd:
4e:6c:bc:f7:46:81:ec:57:5d:3a:11:07:20:8f:00:1a:37:62:
f7:92:43:2e:6b:6b:94:3b:0e:fb:f1:05:54:32:8d:d5:d8:0c:
58:67:1b:da:64:6c:4a:b7:80:25:93:e6:12:11:06:96:15:2f:
c3:b6:41:9f:96:3d:8c:ca:3b:1c:f9:42:06:7b:bd:c0:9d:3f:
64:2e:60:2e:76:01:20:10:c6:3a:a0:f0:44:68:73:1a:73:bb:
d4:e0:25:8e:7c:bd:2d:54:d1:f1:96:7e:12:da:48:d3:b7:3d:
3a:8a:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:29:12 2024 by rpki-client on console-ams.rpki-client.org