Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d9p4oDA6pgHys5dAIGc8qVbxGOE.roa
File: d9p4oDA6pgHys5dAIGc8qVbxGOE.roa (raw, json)
Hash identifier: 8/EIUjfi6iwfiXAXSNWkMA2Gtz0RoXtphpOwyGvi844=
Subject key identifier: 77:DA:78:A0:30:3A:A6:01:F2:B3:97:40:20:67:3C:A9:56:F1:18:E1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019144C14E2C3581E1C5B7A61EDEA46A5D77
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d9p4oDA6pgHys5dAIGc8qVbxGOE.roa
Signing time: Mon 12 Aug 2024 04:03:24 +0000
ROA not before: Mon 12 Aug 2024 04:03:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216099
IP address blocks: 31.56.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 14:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:44:c1:4e:2c:35:81:e1:c5:b7:a6:1e:de:a4:6a:5d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 12 04:03:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77da78a0303aa601f2b3974020673ca956f118e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:53:d4:b2:5d:ac:4c:bd:23:54:ce:cf:57:
8e:6a:f9:73:5f:e0:48:1b:ca:35:db:b6:f1:b0:fd:
58:da:d4:b0:f4:15:4b:4d:d3:19:be:42:a5:6a:43:
52:54:2a:e5:36:98:1e:84:57:7b:54:46:53:81:fe:
a4:23:6d:47:64:80:54:b5:39:a8:2d:3a:91:ab:b5:
75:21:6b:97:b0:a4:77:a3:79:b3:bf:de:5e:db:22:
be:34:76:c7:0c:86:ee:83:1d:7c:34:a5:f4:5f:48:
eb:05:12:c2:8b:e9:4b:b6:2d:18:84:8d:cf:91:6d:
6b:27:de:da:92:e7:7f:46:bd:f4:8d:43:7e:df:97:
5a:ff:df:d8:53:d4:08:eb:56:57:e5:d4:01:32:a9:
38:db:0d:cc:1e:3d:4e:70:43:dd:95:5c:21:2f:57:
b1:16:18:6e:e0:f1:78:46:1c:17:d8:c8:3c:b7:8e:
3e:e6:1b:da:4f:d0:59:b3:2d:9d:ba:4d:cc:c8:ec:
67:bf:5c:68:07:59:ea:9a:ae:9f:b6:22:01:97:b9:
95:86:df:13:04:a8:d6:f2:58:d9:c1:ff:85:86:33:
1f:19:24:d1:52:d4:99:1b:50:fe:4d:5e:af:5c:65:
f9:fd:68:24:13:96:b3:92:72:21:98:c6:fd:3d:e6:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DA:78:A0:30:3A:A6:01:F2:B3:97:40:20:67:3C:A9:56:F1:18:E1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d9p4oDA6pgHys5dAIGc8qVbxGOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.126.0/24
Signature Algorithm: sha256WithRSAEncryption
76:bf:a9:c3:f1:fb:64:a9:05:99:6b:3f:8f:e3:ae:af:3f:9e:
e0:81:63:75:79:d3:40:b0:ac:ab:10:29:b0:c2:f4:84:f1:4c:
d5:45:c3:8a:9b:a8:10:0b:e3:fe:67:29:d7:c9:6b:dd:df:cc:
dc:80:46:14:23:ee:e7:65:6a:c1:3c:33:b3:dd:d5:71:d9:27:
83:12:e1:72:ec:88:cc:c4:d9:1b:41:c7:29:16:f2:ed:b7:a7:
24:77:31:6c:e6:1d:12:0d:8d:9d:8d:ce:23:bf:2a:c2:18:2b:
5c:08:94:99:8a:62:94:5b:20:f3:fe:24:04:15:74:02:cb:67:
23:7a:15:e6:17:92:ec:b5:a4:a4:50:8c:4f:e0:13:6e:11:d0:
c4:ca:b8:10:eb:a8:a0:96:c9:26:3b:31:f1:f5:b5:ad:0a:76:
56:76:c7:ab:0e:0a:ec:16:1b:47:fb:fc:ac:c2:e0:60:85:61:
9f:fa:d0:1a:32:2a:59:63:9f:ef:c1:76:9e:c2:51:fe:b9:42:
2e:04:d9:77:10:d5:03:2d:3e:53:ab:f3:61:e0:60:cb:a8:92:
c9:1a:ba:d4:2c:c3:e2:6c:b7:0c:03:2e:6c:bd:dc:78:ae:ca:
80:c2:4f:f5:ae:40:a1:14:51:c0:d8:c1:54:ec:f1:40:35:b1:
07:90:b6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 19:04:16 2024 by rpki-client on console-ams.rpki-client.org