Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cPUz80mg-Ib485300lwa-n-yoKA.roa
File: cPUz80mg-Ib485300lwa-n-yoKA.roa (raw, json)
Hash identifier: Jv+jFBuMLayqFNnvijvgiPuF2ZYM4sTPte1LLMdidAY=
Subject key identifier: 70:F5:33:F3:49:A0:F8:86:F8:F3:9D:F4:D2:5C:1A:FA:7F:B2:A0:A0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01926FFC3304CE5A919EFB031F2172326D9D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cPUz80mg-Ib485300lwa-n-yoKA.roa
Signing time: Wed 09 Oct 2024 06:34:12 +0000
ROA not before: Wed 09 Oct 2024 06:34:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.138.0/24 maxlen: 24
31.56.139.0/24 maxlen: 24
31.56.140.0/24 maxlen: 24
31.56.145.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 09 Oct 2024 10:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6f:fc:33:04:ce:5a:91:9e:fb:03:1f:21:72:32:6d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 9 06:34:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70f533f349a0f886f8f39df4d25c1afa7fb2a0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:39:ca:7e:38:49:b3:91:d8:bd:a1:67:df:0a:
15:63:58:69:bd:2e:93:33:5e:74:4c:be:c1:ca:89:
56:5a:df:f9:b9:8f:17:86:7c:58:af:03:f2:8b:5d:
2e:93:e8:80:60:55:98:b8:06:58:8a:35:9b:55:78:
ce:ec:52:d1:5e:b9:c0:bf:76:01:27:7a:b1:74:0d:
f1:4e:3b:b9:8d:38:23:e6:85:eb:7e:0c:23:ac:4a:
8d:dc:0d:86:d6:08:7a:bc:ed:f2:31:23:96:af:30:
cf:e6:70:04:90:58:c7:c5:77:b8:73:7c:14:f9:d9:
a9:75:80:69:3c:0c:05:45:11:6d:5b:70:62:6c:95:
c6:9e:6f:64:16:3a:4f:c5:ae:ac:c8:de:27:63:da:
45:57:94:3f:94:b6:fd:99:f9:e5:9f:ff:d1:f7:b5:
4c:28:db:8b:e6:b8:9b:da:23:ed:c7:46:bb:19:1a:
da:41:55:26:28:ec:39:4a:8c:4d:8d:d9:57:b5:00:
23:e0:c9:44:aa:a7:95:16:f2:06:cc:5b:60:ee:35:
53:c6:3b:e8:28:1a:bb:02:fa:c8:12:90:50:a0:c1:
a3:75:fd:76:29:36:4f:f9:d5:e3:2f:49:25:ab:79:
10:b1:f7:6f:a0:29:0e:aa:9e:11:84:2d:5d:fd:b4:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F5:33:F3:49:A0:F8:86:F8:F3:9D:F4:D2:5C:1A:FA:7F:B2:A0:A0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cPUz80mg-Ib485300lwa-n-yoKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.89.0/24
31.56.112.0/21
31.56.137.0-31.56.140.255
31.56.145.0/24
31.56.147.0/24
31.57.0.0-31.57.9.255
31.57.132.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:5e:a8:dd:77:d2:d9:94:6d:9b:ff:52:71:5e:4e:0e:f4:9d:
0d:48:4e:fb:f6:1e:cb:3e:9e:81:1f:76:37:bc:89:53:35:0e:
83:27:81:77:ab:58:e4:45:88:3b:a8:b8:25:b9:2a:4f:28:0a:
16:f1:4b:79:81:5f:a3:44:b7:4b:d7:9f:79:a3:56:0e:8c:51:
50:aa:95:a9:75:89:b9:f8:3b:ef:06:79:49:59:e4:19:ff:da:
2b:a2:83:91:5b:a6:f3:6d:2f:7f:3a:2d:1f:76:fd:00:8c:8f:
4b:b7:c2:0e:c0:06:f9:e9:24:5d:a0:fd:39:55:f5:ba:86:9f:
a2:49:a0:c3:15:c4:82:7b:67:5c:ff:61:64:5a:2c:53:43:19:
ee:6d:4d:4d:b7:84:30:de:58:a0:03:9e:a0:8f:e3:09:18:83:
f7:20:1e:5b:0d:d4:b6:3a:74:2a:a3:09:6a:fb:e6:5f:7e:d9:
d9:a8:94:61:99:47:fe:62:8c:b5:9e:3a:c4:83:2e:80:0f:af:
5c:d6:f7:58:e6:d7:15:2c:ea:56:a0:35:88:04:68:96:ef:58:
48:b9:2c:45:59:e6:54:f1:29:16:53:5b:32:8e:cd:4e:a8:f8:
49:9b:26:d2:db:a0:d1:4f:33:2c:37:4d:5e:bb:5f:8d:fb:a8:
09:c0:51:80
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZJv/DMEzlqRnvsDHyFyMm2dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA5MDYzNDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGY1MzNmMzQ5YTBmODg2ZjhmMzlkZjRkMjVjMWFmYTdmYjJhMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jnKfjhJs5HYvaFn3woVY1hpvS6T
M150TL7ByolWWt/5uY8XhnxYrwPyi10uk+iAYFWYuAZYijWbVXjO7FLRXrnAv3YB
J3qxdA3xTju5jTgj5oXrfgwjrEqN3A2G1gh6vO3yMSOWrzDP5nAEkFjHxXe4c3wU
+dmpdYBpPAwFRRFtW3BibJXGnm9kFjpPxa6syN4nY9pFV5Q/lLb9mfnln//R97VM
KNuL5rib2iPtx0a7GRraQVUmKOw5SoxNjdlXtQAj4MlEqqeVFvIGzFtg7jVTxjvo
KBq7AvrIEpBQoMGjdf12KTZP+dXjL0klq3kQsfdvoCkOqp4RhC1d/bRQkwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFHD1M/NJoPiG+POd9NJcGvp/sqCgMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvY1BVejgwbWctSWI0ODUzMDBsd2Etbi15b0tBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTBLBAIAATBFAwQBHzgEAwQA
HzgnAwQAHzhZAwQDHzhwMAwDBAAfOIkDBAAfOIwDBAAfOJEDBAAfOJMwCwMDAB85
AwQBHzkIAwQBHzmEMA0GCSqGSIb3DQEBCwUAA4IBAQBcXqjdd9LZlG2b/1JxXk4O
9J0NSE779h7LPp6BH3Y3vIlTNQ6DJ4F3q1jkRYg7qLgluSpPKAoW8Ut5gV+jRLdL
1595o1YOjFFQqpWpdYm5+DvvBnlJWeQZ/9orooORW6bzbS9/Oi0fdv0AjI9Lt8IO
wAb56SRdoP05VfW6hp+iSaDDFcSCe2dc/2FkWixTQxnubU1Nt4Qw3ligA56gj+MJ
GIP3IB5bDdS2OnQqowlq++ZfftnZqJRhmUf+Yoy1njrEgy6AD69c1vdY5tcVLOpW
oDWIBGiW71hIuSxFWeZU8SkWU1syjs1OqPhJmybS26DRTzMsN01eu1+N+6gJwFGA
-----END CERTIFICATE-----
Generated at Wed Oct 9 14:50:25 2024 by rpki-client on console-ams.rpki-client.org