Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cJs5VEN2veBePNYtEEVPK27-OEk.roa
File: cJs5VEN2veBePNYtEEVPK27-OEk.roa (raw, json)
Hash identifier: 9KVFydVH4U6g9cYz3Ktjyz6CeaR6pALvrq4V2wPUlU8=
Subject key identifier: 70:9B:39:54:43:76:BD:E0:5E:3C:D6:2D:10:45:4F:2B:6E:FE:38:49
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019296961841F09FFF42C2E0A2510249BEBB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cJs5VEN2veBePNYtEEVPK27-OEk.roa
Signing time: Wed 16 Oct 2024 18:27:51 +0000
ROA not before: Wed 16 Oct 2024 18:27:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 31.56.139.0/24 maxlen: 24
31.57.90.0/24 maxlen: 24
31.59.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 17:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:96:96:18:41:f0:9f:ff:42:c2:e0:a2:51:02:49:be:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 16 18:27:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=709b39544376bde05e3cd62d10454f2b6efe3849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4a:c7:a6:92:76:5b:1e:ad:26:96:dd:9a:4e:
99:52:ce:be:34:00:68:bb:de:81:14:31:fe:ef:c1:
9a:5e:24:ca:65:7b:01:f9:c8:69:f9:02:2e:65:37:
24:46:3c:d4:a8:65:90:1f:85:52:09:ad:94:bf:15:
dd:ea:c1:dd:0d:c4:a5:68:ee:77:14:31:83:66:98:
f8:e2:5a:48:e1:d3:ef:5d:f4:8e:69:a2:36:4c:53:
8c:0d:cd:d7:31:b7:f1:b3:de:db:fd:25:53:14:d7:
1f:47:13:f4:e1:88:89:e4:88:87:a1:6a:3e:cd:86:
13:f8:20:fd:dd:ac:51:75:6f:f4:4a:6d:29:c1:e1:
97:8e:46:b8:50:08:9e:57:06:29:05:32:5e:89:16:
d7:7f:75:37:a0:da:22:ba:dd:73:70:03:c9:c2:b3:
9f:42:7a:a5:fc:e9:c2:3b:40:50:63:6f:0a:a1:fc:
b1:ac:d1:8a:c4:87:c8:e7:b8:ef:c0:b4:03:cc:e4:
f9:b8:60:69:34:b1:eb:fc:a7:cb:f1:f5:5c:e4:a3:
8e:2c:b8:bd:34:17:ae:c8:9a:43:f4:72:af:89:96:
c5:66:48:9e:8c:8b:bf:1b:9a:75:07:ea:ae:94:46:
5c:85:11:a9:51:67:36:7e:e6:96:fe:5e:d2:36:ea:
ed:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:39:54:43:76:BD:E0:5E:3C:D6:2D:10:45:4F:2B:6E:FE:38:49
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cJs5VEN2veBePNYtEEVPK27-OEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.139.0/24
31.57.90.0/24
31.59.11.0/24
Signature Algorithm: sha256WithRSAEncryption
61:20:db:a4:53:d7:9e:ff:0f:89:90:fa:a6:f4:10:a8:c6:72:
84:26:c7:44:a2:51:cd:2c:45:f5:81:4d:48:71:b8:c2:d2:e5:
72:25:e1:39:28:4e:f5:ed:ef:c7:f7:23:ff:87:4d:49:2d:10:
e2:5f:c3:a2:47:c9:10:b5:6c:e7:9d:c7:7e:c8:4c:a0:6d:a0:
28:0a:48:87:3a:4a:df:4a:e5:4e:85:1b:4d:c2:b4:a3:ed:11:
2d:37:0c:f9:3b:f8:c8:32:eb:0f:51:94:8a:41:fe:1a:d7:2c:
92:06:3e:ab:aa:6e:1e:f3:c0:d3:9e:7c:ff:92:e6:9a:4a:cd:
00:49:bf:72:1a:33:08:c2:fd:78:a6:7b:0e:7e:ee:78:43:17:
6c:9f:56:c1:a5:24:9d:78:04:3d:fd:03:c4:eb:37:bb:9e:cb:
ca:fe:8a:ce:d0:6c:7a:66:47:2a:1c:7a:be:f9:b7:28:d7:a4:
fd:7b:6e:62:18:c7:02:20:c2:83:a7:8d:50:8c:98:53:04:cf:
06:97:1a:6c:a4:9a:3f:be:09:f1:32:33:cb:f9:44:ff:e0:98:
5a:6b:dc:8c:6c:f8:cf:5d:14:23:f3:71:00:d6:fe:d8:3e:4a:
e1:c5:21:5d:42:05:d0:50:07:c8:0a:cb:bc:6e:ac:96:d2:b9:
bd:60:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 19:37:37 2024 by rpki-client on console-fra.rpki-client.org