Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bVRt9B1KKSbIExSZ_VnHCuFp5oc.roa
File: bVRt9B1KKSbIExSZ_VnHCuFp5oc.roa (raw, json)
Hash identifier: Jwssw9sNiNAkxVVqMg13kLrVpU+A0TzPO5i0NosSfCs=
Subject key identifier: 6D:54:6D:F4:1D:4A:29:26:C8:13:14:99:FD:59:C7:0A:E1:69:E6:87
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01928B42A09DE38342E7634BD3E90A963E3B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bVRt9B1KKSbIExSZ_VnHCuFp5oc.roa
Signing time: Mon 14 Oct 2024 13:40:52 +0000
ROA not before: Mon 14 Oct 2024 13:40:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.138.0/24 maxlen: 24
31.56.139.0/24 maxlen: 24
31.56.140.0/24 maxlen: 24
31.56.145.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 16:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8b:42:a0:9d:e3:83:42:e7:63:4b:d3:e9:0a:96:3e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 14 13:40:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d546df41d4a2926c8131499fd59c70ae169e687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:ea:32:3c:eb:df:c5:f7:c8:c5:f7:45:85:
0a:14:54:85:a7:41:09:35:76:d8:37:db:03:90:35:
3d:b1:d3:fa:8f:a8:09:4a:b9:61:07:10:58:ed:71:
da:db:84:8e:38:4c:31:52:61:08:2b:f6:4e:4f:f2:
84:c0:8b:e5:27:09:90:a6:d4:cf:65:84:d3:4e:74:
23:0c:6f:25:44:37:c0:29:c5:9b:97:7b:9d:a1:98:
7b:e9:6f:b6:b9:f5:86:b4:72:d2:3e:f6:cf:e6:94:
a8:94:5d:4a:79:29:d8:4b:af:10:ff:a3:1b:66:a5:
4c:04:2a:79:93:9a:27:81:5d:47:f3:8d:8f:1c:c8:
48:00:2a:19:00:4e:35:c2:53:1b:49:3b:cf:ec:5d:
69:4b:b7:bc:04:ec:bd:a5:0b:23:f9:a3:c2:ba:ff:
06:8b:b3:91:20:d7:e8:b6:b8:8a:0b:78:50:4f:08:
0d:fa:7d:03:54:4c:b5:b0:1d:d3:d4:63:4b:f8:a0:
3a:79:c8:fa:09:cf:64:41:3b:af:ee:11:ad:d5:c2:
de:d7:0f:33:c5:3b:24:15:3e:bb:60:f4:89:eb:21:
a6:c0:aa:99:09:99:ad:e9:a2:74:9d:f8:f6:7f:50:
cc:93:c3:70:d8:0e:e1:23:51:5f:2f:c2:f6:f9:2f:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:6D:F4:1D:4A:29:26:C8:13:14:99:FD:59:C7:0A:E1:69:E6:87
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bVRt9B1KKSbIExSZ_VnHCuFp5oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.66.0/24
31.56.86.0/24
31.56.89.0/24
31.56.112.0/21
31.56.137.0-31.56.140.255
31.56.145.0/24
31.56.147.0/24
31.57.0.0-31.57.9.255
31.57.132.0/23
31.57.176.0/21
Signature Algorithm: sha256WithRSAEncryption
85:9a:22:4d:92:f2:b0:00:4c:23:84:0e:55:53:fa:de:0b:61:
87:0e:18:2c:b0:fd:4b:6a:a7:d6:d3:b9:d8:fb:6b:7f:e5:37:
b0:f0:d3:99:03:4c:83:71:3b:98:3c:0c:6b:1d:15:36:39:5f:
36:80:d4:8c:f7:ba:fa:19:40:20:7a:07:a0:80:f7:7b:aa:58:
61:04:57:25:6c:f9:9f:e9:af:06:1e:be:bc:75:03:44:84:78:
18:75:e5:c7:6f:06:63:39:b8:c0:d5:40:5a:05:29:48:a8:5f:
be:9d:6f:38:32:03:d9:27:4f:b0:91:fa:f7:c8:2e:39:00:ba:
63:d0:75:e3:55:ec:b8:05:ea:38:53:ef:b7:1d:37:13:6d:48:
e7:76:e1:b6:78:11:82:12:62:fe:cc:19:56:f2:02:6b:58:1f:
95:b1:69:6c:09:93:75:8b:76:db:16:f7:65:90:bf:b7:0f:5a:
74:a8:0b:f1:16:4f:e1:0d:d2:16:07:29:1d:8e:32:3c:43:14:
78:74:8c:33:ec:53:8b:c1:e1:89:11:36:e4:65:81:cf:58:63:
35:10:9c:3c:2b:bd:41:89:28:5c:0a:4d:56:64:83:3c:93:47:
4e:ac:0c:3e:8e:2a:d3:2e:fc:c9:f7:04:9f:0f:7c:cf:72:20:
18:de:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 20:38:01 2024 by rpki-client on console-ams.rpki-client.org