Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cElbAumP39tq8pLjaoE1acqwk1o.roa
File: cElbAumP39tq8pLjaoE1acqwk1o.roa (raw, json)
Hash identifier: 0BUyb5vcc8aRQNVzeOZ0iB4qm37Tj1i/8DgF3eEoY50=
Subject key identifier: 70:49:5B:02:E9:8F:DF:DB:6A:F2:92:E3:6A:81:35:69:CA:B0:93:5A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019267EE14DE166068B9AC9E16404AB8572D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cElbAumP39tq8pLjaoE1acqwk1o.roa
Signing time: Mon 07 Oct 2024 17:01:49 +0000
ROA not before: Mon 07 Oct 2024 17:01:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36530
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 14:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:67:ee:14:de:16:60:68:b9:ac:9e:16:40:4a:b8:57:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 7 17:01:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70495b02e98fdfdb6af292e36a813569cab0935a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:ea:7f:bf:4f:0d:41:9b:84:c8:37:e1:6c:
37:0c:ce:00:9b:39:c5:25:cf:95:e5:5e:3d:59:9d:
36:32:f8:fe:56:94:47:ad:1c:3d:1d:95:0c:aa:45:
b3:a8:e1:25:90:64:5a:ad:c5:86:f8:45:9b:05:a8:
41:fe:2b:fd:f5:52:09:6f:6d:05:c4:6d:a9:e1:44:
97:00:24:cb:46:03:2d:62:52:bb:12:05:8b:67:44:
51:ca:87:c2:7e:67:7e:87:55:4a:29:e4:a3:66:df:
34:af:df:04:e6:33:ea:66:7b:58:ad:30:a1:77:ec:
7e:15:ca:7c:fc:be:fc:36:93:60:d1:38:c2:d7:c7:
59:e7:82:b4:bb:5b:af:6d:bf:6c:ce:2d:4b:f9:6f:
56:82:43:52:0c:94:aa:d2:6c:6e:4a:a1:94:21:6e:
30:b7:d0:21:99:f2:55:df:36:b9:0f:f3:03:e8:1a:
63:c9:47:82:70:a9:c8:62:ff:90:d7:aa:ca:3a:d2:
04:82:ce:84:ff:e9:2e:98:7a:be:c4:4d:73:09:29:
f1:5b:02:b0:15:87:96:1f:5b:c5:1e:4f:50:6b:84:
8a:6e:fc:41:52:10:f3:eb:3c:22:a2:a7:27:4c:1c:
61:49:3c:57:25:f7:06:30:11:e2:9f:14:29:ce:3d:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:5B:02:E9:8F:DF:DB:6A:F2:92:E3:6A:81:35:69:CA:B0:93:5A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cElbAumP39tq8pLjaoE1acqwk1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.126.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:54:6d:43:99:6d:d6:99:7f:7a:13:4f:d9:08:7a:9f:1c:8c:
ff:f2:1c:5d:55:de:34:5f:16:1c:2f:b6:d4:bf:c0:b5:95:80:
fe:53:db:c2:da:4d:38:d9:55:6c:6a:a1:b9:f6:c4:2c:a3:72:
01:5a:d6:9d:6d:58:ce:bc:7f:50:69:18:5d:ea:f1:84:d2:ea:
e8:6c:cc:e8:84:61:19:2b:be:1b:a3:70:42:c3:ab:26:f2:67:
44:15:56:8d:f2:06:a9:d9:03:0c:e3:18:4b:9c:b2:18:37:2d:
f3:cc:e3:bd:97:1d:64:1d:61:1a:9f:d5:a0:a8:35:f0:92:75:
da:0d:28:4d:b7:8a:65:6c:b1:48:67:15:2c:35:3e:8e:2f:c8:
c9:84:03:04:62:c6:d2:93:74:9d:c7:4c:c4:18:85:c3:e5:e9:
9c:67:ef:6b:18:2c:13:cb:01:a7:94:06:f4:61:38:0e:f1:05:
88:f8:1d:e2:63:52:88:16:81:b1:1f:de:80:6d:3f:19:55:1c:
6a:c6:13:6a:74:52:35:b6:e1:01:0b:4f:6e:42:47:72:2b:43:
9b:c4:a7:66:7e:14:e2:07:af:50:42:91:c2:8d:d4:66:60:43:
b0:38:89:77:57:f4:ab:c2:f8:18:43:4a:07:2c:28:be:22:64:
0d:7b:8b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 18:49:55 2024 by rpki-client on console-fra.rpki-client.org