Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b6r7LJ2bZ_sJbakntPSL75niZ4k.roa
File: b6r7LJ2bZ_sJbakntPSL75niZ4k.roa (raw, json)
Hash identifier: PT5NK6oABESbhcTuwxcPVqbZ7gXp6T1dNlU/ZI4JeGk=
Subject key identifier: 6F:AA:FB:2C:9D:9B:67:FB:09:6D:A9:27:B4:F4:8B:EF:99:E2:67:89
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01927EDA0C4501291E63EBC3EB4396AD7B35
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b6r7LJ2bZ_sJbakntPSL75niZ4k.roa
Signing time: Sat 12 Oct 2024 03:51:12 +0000
ROA not before: Sat 12 Oct 2024 03:51:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211750
IP address blocks: 31.56.157.0/24 maxlen: 24
31.57.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 13:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7e:da:0c:45:01:29:1e:63:eb:c3:eb:43:96:ad:7b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 12 03:51:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6faafb2c9d9b67fb096da927b4f48bef99e26789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:9c:08:07:2c:c2:74:0f:7c:0e:5e:e3:d0:
71:31:70:81:29:23:1e:80:c6:8f:b4:2e:a7:c0:ee:
6e:c9:07:5f:b0:9e:73:ba:b3:f3:c3:20:50:ac:8c:
4a:64:66:ea:79:8e:3f:1b:26:53:3f:41:08:67:f3:
9f:d5:5e:c5:2e:bc:fd:d8:a1:55:5b:20:1f:08:43:
ff:2d:7a:2a:25:f7:4f:4c:25:f0:66:89:1d:d3:6c:
49:fa:f2:33:a9:28:be:46:11:8e:c4:ea:11:1e:63:
23:f0:98:ab:86:dd:f4:da:17:8e:35:9d:65:20:8d:
a4:e8:2c:55:2c:80:1d:ce:66:d3:1b:56:dd:86:17:
0b:ab:19:2d:8a:61:da:c7:b3:67:73:3e:fd:04:8a:
53:0a:d2:87:63:d3:d7:12:17:63:68:3d:5d:9a:d8:
46:70:64:ad:d6:22:a5:b6:75:c1:9a:9e:25:87:07:
ca:dc:42:d5:0e:e7:98:6d:12:72:e1:20:cf:36:79:
49:41:21:be:a3:1d:7b:8c:b8:50:f4:4e:fd:8c:26:
61:a2:aa:d7:29:d0:9a:74:c9:58:63:d8:4c:6f:40:
ca:d5:fe:65:b7:e4:6e:2b:03:b5:98:51:ef:bc:0e:
ed:34:5c:5c:dd:4f:64:0a:26:a8:b7:c0:bf:85:de:
59:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AA:FB:2C:9D:9B:67:FB:09:6D:A9:27:B4:F4:8B:EF:99:E2:67:89
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b6r7LJ2bZ_sJbakntPSL75niZ4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.157.0/24
31.57.101.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:6a:15:05:86:be:18:4d:1e:ed:e2:75:9f:64:28:81:62:87:
a3:28:b3:77:56:0e:aa:ca:51:62:f9:f6:75:53:b5:27:4f:cd:
73:bb:3a:70:19:1c:c9:2f:8b:23:2f:ec:70:14:c8:e1:4c:3f:
cc:08:e0:9e:96:b7:d1:7b:69:4b:da:ba:5e:e4:e1:9e:36:79:
ee:57:ae:83:ed:e2:7d:78:e7:a8:57:f5:20:f9:0a:9e:d8:6e:
2e:ae:d7:f5:92:9e:5a:c4:7d:09:00:9d:bc:50:6b:9a:97:61:
39:92:0c:a2:84:47:0b:77:87:97:ad:f5:0a:3e:89:06:3a:85:
2c:f8:fe:d7:17:72:35:5a:66:08:3d:7f:74:22:e5:87:18:6e:
99:54:58:f0:b5:0a:09:29:80:2c:2a:8f:6a:6d:a0:56:97:f8:
a7:26:f6:6e:21:00:f5:70:1a:27:58:64:ea:9b:dc:35:bf:c3:
d9:3f:51:65:74:47:ec:9b:03:a4:c0:1c:f5:6b:54:23:d5:d0:
0e:36:ea:d7:a0:07:f5:d1:3a:ae:61:b2:dc:66:99:84:6d:cb:
f6:65:1a:78:10:91:a0:ca:70:01:e5:6b:1c:80:12:a4:fa:a9:
3e:dd:f2:2c:17:7c:9d:7a:ed:f6:d7:cd:7f:42:6c:0b:48:d3:
39:a3:49:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 18:18:44 2024 by rpki-client on console-fra.rpki-client.org