Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dCchBfmQRjuBYhel510Cgb-pMFA.roa
File: dCchBfmQRjuBYhel510Cgb-pMFA.roa (raw, json)
Hash identifier: YMQ+TBb/lxz+MbMcnHTbL8xLqvNqgjPXSkUDCNwmbEs=
Subject key identifier: 74:27:21:05:F9:90:46:3B:81:62:17:A5:E7:5D:02:81:BF:A9:30:50
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01933ABC2B22DA2C5C43ED385F8C217534F1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dCchBfmQRjuBYhel510Cgb-pMFA.roa
Signing time: Sun 17 Nov 2024 15:27:10 +0000
ROA not before: Sun 17 Nov 2024 15:27:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 09:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3a:bc:2b:22:da:2c:5c:43:ed:38:5f:8c:21:75:34:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 17 15:27:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74272105f990463b816217a5e75d0281bfa93050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:6b:fe:33:44:3e:23:3f:54:e5:fa:a5:87:
16:e0:5a:fb:fd:e2:1f:4f:77:8e:52:1a:38:28:b2:
4e:63:96:a2:a6:4e:49:2f:5e:e4:e9:b6:f5:e8:07:
52:e8:37:04:ad:c8:3c:40:80:d9:14:72:8d:7f:f5:
64:6b:a4:50:f7:c9:90:c2:a6:5e:63:85:07:39:d0:
99:dc:80:54:65:7c:61:52:6f:7d:0b:9f:56:b4:71:
56:65:10:eb:01:11:77:f8:7a:61:36:56:50:2e:36:
43:b3:41:7d:02:fb:90:e1:5b:2d:2d:50:0d:2c:6d:
5b:3a:bd:67:66:df:b5:cb:0c:ab:fb:3c:1c:70:0c:
23:9d:99:8b:c9:dd:f0:1f:3e:8b:e5:ab:b2:0f:5d:
8e:f9:5b:69:3f:41:bc:55:8e:06:63:b0:22:07:60:
d8:47:b9:52:82:1d:09:f7:c4:f4:09:d0:58:f0:e4:
19:67:0a:d4:20:b0:6e:ec:e0:ba:58:0a:8d:65:a0:
18:68:6e:66:f3:2b:dd:d0:9b:47:a9:65:a3:77:52:
68:52:b1:ac:fb:1f:02:52:61:07:af:e9:8d:35:9f:
46:e9:46:19:9d:11:f0:f5:ca:06:d2:62:8f:f1:cc:
ea:c9:b6:e7:17:cf:0c:4e:75:06:d7:ba:f8:71:d5:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:21:05:F9:90:46:3B:81:62:17:A5:E7:5D:02:81:BF:A9:30:50
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dCchBfmQRjuBYhel510Cgb-pMFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.48.0/24
31.56.57.0/24
31.56.85.0/24
31.56.89.0/24
31.56.120.0/22
31.56.127.0/24
31.57.132.0/23
31.57.146.0/23
31.57.176.0/21
31.57.192.0/22
31.57.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:6f:b6:fe:78:87:e8:a0:a0:c5:eb:8b:fc:c8:2a:93:04:e9:
0d:0c:3a:70:98:d6:38:ce:da:f5:1c:05:8e:d2:5c:c5:f8:fd:
43:bb:7a:5b:3d:fb:9d:5a:69:f9:0e:87:5e:bb:18:17:dc:28:
0b:f0:5b:9d:79:f4:38:66:59:5f:b0:5b:cf:7e:89:c4:8f:e7:
4f:4b:38:5d:17:b6:79:df:a0:f5:28:fc:ff:0c:ed:18:bd:81:
b8:44:fb:95:17:c1:b5:82:0f:0d:92:7d:76:00:e5:ea:3d:0f:
96:62:34:b4:d5:b8:d7:74:dd:ad:d5:4a:60:9f:8c:3d:5c:f4:
2e:24:bb:b5:9f:2d:03:58:54:c8:65:ee:5a:41:d6:2a:9b:93:
dd:40:e8:87:23:d6:50:94:13:33:ca:db:2c:b1:31:55:03:da:
87:e3:24:07:a5:64:27:89:d2:fa:5f:33:50:c8:17:40:31:de:
6c:22:ac:b8:9e:1f:4b:cc:02:1c:5c:76:99:d0:b7:cc:c5:13:
15:31:f5:a7:66:38:f9:12:f8:45:b3:64:58:f4:b1:aa:8b:93:
d8:06:60:51:62:fb:e2:3b:f4:e3:c0:40:b2:e9:16:20:3b:5d:
62:64:6a:f4:de:a9:c5:58:fa:7e:ee:43:72:c5:c3:45:69:45:
64:50:50:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 11:06:26 2024 by rpki-client on console-fra.rpki-client.org