Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c_4eluGjGeWdb4Hks5lAb-ESjDU.roa
File: c_4eluGjGeWdb4Hks5lAb-ESjDU.roa (raw, json)
Hash identifier: d3mdqmApFH9ZeOtuxOJubZrpOw5ytuwUSo1IsJp1bPM=
Subject key identifier: 73:FE:1E:96:E1:A3:19:E5:9D:6F:81:E4:B3:99:40:6F:E1:12:8C:35
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192440D836F64F867805122262FFE457C97
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c_4eluGjGeWdb4Hks5lAb-ESjDU.roa
Signing time: Mon 30 Sep 2024 17:49:49 +0000
ROA not before: Mon 30 Sep 2024 17:49:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
217.60.0.0/23 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 13:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:44:0d:83:6f:64:f8:67:80:51:22:26:2f:fe:45:7c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 30 17:49:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73fe1e96e1a319e59d6f81e4b399406fe1128c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:ff:2e:89:bc:20:e7:56:94:cd:4d:d0:04:
8a:00:ef:37:cf:6f:c5:28:88:09:5a:5c:14:80:4d:
1b:3b:dd:3c:fc:02:95:75:ec:e8:2d:18:e7:9c:f3:
f5:de:7a:3d:7c:a6:cf:cd:ad:78:1e:1d:1f:78:c2:
f4:98:00:6e:1f:c6:39:0a:06:33:d1:3d:e0:1e:ad:
ac:6a:29:46:9c:18:e0:55:b8:76:d1:ec:75:6d:5c:
e7:7d:ad:14:e0:82:99:cb:ac:2a:00:86:28:37:a1:
1e:da:06:36:d3:48:f2:e7:e8:e2:34:02:f7:68:b6:
7f:3b:a6:77:15:20:b7:ef:26:3a:67:a4:b5:79:3c:
93:35:b6:f5:69:c2:ff:1a:07:1a:81:e5:b4:7c:91:
6f:13:e3:a3:bd:9a:26:9e:fc:05:d0:fc:cd:33:a7:
5f:14:24:f2:9e:09:3e:da:67:a4:88:dc:65:eb:50:
99:c4:88:70:ba:1b:9b:e0:87:cd:10:5b:24:d6:e9:
fd:84:ea:24:c4:21:56:bb:fe:06:a7:e2:8d:ee:47:
c8:d7:d3:df:63:4a:9e:0b:46:0d:03:06:a6:1e:b1:
72:f5:db:fb:72:d8:54:b5:38:44:8d:72:31:54:54:
ef:52:f6:5e:6f:58:3d:17:1f:57:4d:a1:1f:f7:29:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FE:1E:96:E1:A3:19:E5:9D:6F:81:E4:B3:99:40:6F:E1:12:8C:35
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c_4eluGjGeWdb4Hks5lAb-ESjDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
217.60.0.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:0e:79:44:a1:26:c0:9b:f0:a1:22:7b:39:3b:fe:53:9b:4e:
51:06:38:5c:d5:48:5c:3e:da:a7:86:bb:18:57:a9:2f:93:af:
ea:b3:89:82:60:ba:a8:ff:85:3b:0d:44:03:3d:31:d4:c0:2e:
80:a9:f1:62:e1:34:63:7a:1b:38:2c:ad:80:60:2f:24:16:f1:
41:05:01:09:34:22:c9:04:c1:35:1f:43:6f:c5:65:06:ab:ac:
d0:f5:a3:ac:82:65:28:9e:c8:3b:15:4b:3e:d7:4c:34:90:7a:
2c:63:c0:2c:1e:3d:3b:a3:e7:76:5c:20:eb:20:7b:4d:0d:45:
cc:47:4c:22:c3:c7:43:01:b5:71:8e:25:0b:d8:22:73:d4:f9:
94:3d:10:1a:59:e6:df:db:e0:d7:cb:05:13:71:04:0d:22:16:
63:83:ef:dd:89:c4:62:4a:0a:5d:a5:12:89:7f:2c:5d:89:44:
8b:65:bd:a8:46:e1:56:db:95:cd:c0:b6:b6:b4:85:e8:11:fc:
ed:ac:3c:3c:97:4d:4f:07:bf:f2:4d:39:7d:53:ec:78:eb:6c:
40:e9:79:16:cc:d1:aa:de:d7:ba:67:16:bf:1b:57:a7:1f:36:
b4:15:39:86:60:b9:8b:80:29:8b:c9:2a:6d:6e:f7:63:87:8c:
1e:cd:23:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 18:45:40 2024 by rpki-client on console-ams.rpki-client.org