Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dh3Tzd44IQ2kAPREZOIs6hIDKNM.roa
File: dh3Tzd44IQ2kAPREZOIs6hIDKNM.roa (raw, json)
Hash identifier: BfCDT7kzt5wztjXBaDI3clD3RPZH7ZgFCAKxGjhkDeY=
Subject key identifier: 76:1D:D3:CD:DE:38:21:0D:A4:00:F4:44:64:E2:2C:EA:12:03:28:D3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019137C5F077539649F6696C16AA0863E727
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dh3Tzd44IQ2kAPREZOIs6hIDKNM.roa
Signing time: Fri 09 Aug 2024 15:33:24 +0000
ROA not before: Fri 09 Aug 2024 15:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214402
IP address blocks: 31.56.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 11:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:37:c5:f0:77:53:96:49:f6:69:6c:16:aa:08:63:e7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 9 15:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=761dd3cdde38210da400f44464e22cea120328d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:b2:92:be:47:db:46:77:5c:a7:24:f4:db:
53:be:ac:b8:b6:c9:80:02:89:7d:f4:a5:60:dd:92:
f3:94:c6:44:d9:b8:54:c0:9e:e5:1f:1c:20:9b:96:
0d:78:d0:bd:4f:fc:a2:10:be:58:54:0f:ef:14:87:
32:db:33:ff:e9:91:2c:8f:37:6c:ae:63:de:15:50:
62:85:76:16:3c:a9:a0:1d:77:91:db:61:19:8c:de:
34:f9:94:3a:d3:15:49:29:62:05:07:ef:13:f8:ee:
5a:70:56:b6:c2:6a:44:8e:f8:9d:ae:9e:7d:d4:2b:
6e:57:f0:b6:87:21:40:a9:b8:82:ea:b5:4c:05:9c:
bc:8b:57:78:91:32:27:bc:37:f9:c2:9e:7c:aa:d7:
24:7a:89:21:2c:3e:17:8c:c6:c2:bf:f4:b0:fd:61:
6c:39:96:19:d1:95:89:eb:bb:ae:e5:1f:c5:9e:17:
6d:18:d6:e9:ea:82:0d:36:8a:c3:68:33:9a:a7:43:
05:27:40:43:d9:2e:8c:35:7f:8d:d8:30:ff:fa:af:
79:71:e7:5c:dd:e9:fd:af:3c:21:40:af:7f:14:c6:
c4:0e:51:bd:08:c1:b0:19:7c:21:08:85:a1:9e:b3:
78:5d:7c:e0:32:93:8f:7c:2a:31:48:1b:9e:cd:10:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1D:D3:CD:DE:38:21:0D:A4:00:F4:44:64:E2:2C:EA:12:03:28:D3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dh3Tzd44IQ2kAPREZOIs6hIDKNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.57.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b2:99:c0:53:a0:7d:ef:cd:85:de:0f:ea:6f:6c:58:cf:37:
9d:f9:3c:ce:56:c7:a0:3c:9f:ad:83:d6:97:fa:d8:81:f8:be:
4d:d8:43:16:90:e6:cd:d9:92:61:c2:d2:a5:7c:64:65:bd:8f:
d6:33:ba:37:f3:02:fc:48:51:f3:25:da:13:1f:a7:aa:c5:3e:
8b:06:45:c4:6a:0c:4a:93:66:34:56:45:70:43:a5:77:9d:27:
3a:ad:18:e6:15:07:9a:9f:4a:2d:83:d2:f2:69:61:5b:f8:2b:
c6:e3:c9:c9:aa:67:dc:54:58:f3:7d:93:44:9a:c4:14:77:e1:
5e:21:b8:00:ed:0f:c1:ee:d3:0b:f5:64:78:0c:12:68:b7:09:
48:59:25:28:59:12:bc:a5:c6:6a:99:72:24:46:49:f3:cc:c3:
e1:72:cc:87:1f:5b:0f:1c:a0:32:ca:ad:00:09:2b:9c:26:29:
19:cd:d3:5b:a6:3d:76:99:50:dc:83:b1:5a:2f:f3:0f:59:fe:
73:dc:0e:bf:79:5a:92:92:e3:26:44:c9:77:9e:65:94:85:4e:
e4:d5:87:c3:c0:ca:77:39:fc:64:93:f3:ad:0a:2a:06:2f:b5:
a3:76:08:f8:c7:98:7a:98:5a:ef:d0:14:a5:f2:1f:85:2b:e2:
70:93:98:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZE3xfB3U5ZJ9mlsFqoIY+cnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwODA5MTUzMzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjFkZDNjZGRlMzgyMTBkYTQwMGY0NDQ2NGUyMmNlYTEyMDMyOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQCykr5H20Z3XKck9NtTvqy4tsmA
Aol99KVg3ZLzlMZE2bhUwJ7lHxwgm5YNeNC9T/yiEL5YVA/vFIcy2zP/6ZEsjzds
rmPeFVBihXYWPKmgHXeR22EZjN40+ZQ60xVJKWIFB+8T+O5acFa2wmpEjvidrp59
1CtuV/C2hyFAqbiC6rVMBZy8i1d4kTInvDf5wp58qtckeokhLD4XjMbCv/Sw/WFs
OZYZ0ZWJ67uu5R/FnhdtGNbp6oINNorDaDOap0MFJ0BD2S6MNX+N2DD/+q95cedc
3en9rzwhQK9/FMbEDlG9CMGwGXwhCIWhnrN4XXzgMpOPfCoxSBuezRA+3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHYd083eOCENpAD0RGTiLOoSAyjTMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZGgzVHpkNDRJUTJrQVBSRVpPSXM2aElES05NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzg5MA0G
CSqGSIb3DQEBCwUAA4IBAQBgspnAU6B9782F3g/qb2xYzzed+TzOVsegPJ+tg9aX
+tiB+L5N2EMWkObN2ZJhwtKlfGRlvY/WM7o38wL8SFHzJdoTH6eqxT6LBkXEagxK
k2Y0VkVwQ6V3nSc6rRjmFQean0otg9LyaWFb+CvG48nJqmfcVFjzfZNEmsQUd+Fe
IbgA7Q/B7tML9WR4DBJotwlIWSUoWRK8pcZqmXIkRknzzMPhcsyHH1sPHKAyyq0A
CSucJikZzdNbpj12mVDcg7FaL/MPWf5z3A6/eVqSkuMmRMl3nmWUhU7k1YfDwMp3
Ofxkk/OtCioGL7Wjdgj4x5h6mFrv0BSl8h+FK+Jwk5jj
-----END CERTIFICATE-----
Generated at Fri Nov 15 14:01:49 2024 by rpki-client on console-fra.rpki-client.org