Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/epsRbphVaTputKZ_7cUOD7umdQo.roa
File: epsRbphVaTputKZ_7cUOD7umdQo.roa (raw, json)
Hash identifier: Q2cYvE939wqjGm7YUuHFEpns6pS0rqkyG7CDLuYpFgY=
Subject key identifier: 7A:9B:11:6E:98:55:69:3A:6E:B4:A6:7F:ED:C5:0E:0F:BB:A6:75:0A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0190B6FEDD6C75BB706EFCCCD23E699B5C03
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/epsRbphVaTputKZ_7cUOD7umdQo.roa
Signing time: Mon 15 Jul 2024 15:24:34 +0000
ROA not before: Mon 15 Jul 2024 15:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215211
IP address blocks: 31.56.0.0/14 maxlen: 14
31.56.0.0/16 maxlen: 16
31.59.0.0/16 maxlen: 16
31.59.255.0/24 maxlen: 24
46.224.0.0/15 maxlen: 15
91.98.0.0/16 maxlen: 16
2a14:6e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 16 Jul 2024 05:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b6:fe:dd:6c:75:bb:70:6e:fc:cc:d2:3e:69:9b:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 15 15:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a9b116e9855693a6eb4a67fedc50e0fbba6750a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:f7:7f:51:62:cc:63:b0:e7:b3:a7:d0:da:
18:bc:27:03:07:b1:f2:1a:34:94:fc:6a:9d:cc:f0:
c4:36:c1:cf:3d:20:97:10:1f:ce:fa:c3:77:a0:8e:
56:cf:b6:5e:4c:f2:08:98:20:09:76:78:45:dc:4f:
76:10:28:93:28:1f:64:da:40:12:6d:86:f8:fc:d3:
ee:d4:de:4c:f7:90:d0:94:c3:fc:25:30:a1:28:7d:
c8:ce:bb:48:c4:54:66:f7:2b:7b:2b:83:40:f1:ef:
41:b3:e5:54:20:73:ab:0d:1f:54:76:8f:9a:6a:9c:
7f:43:cf:b1:e3:4e:34:7a:e7:d3:fc:22:06:12:8b:
46:b4:7d:f1:d1:50:a0:b9:65:ed:2e:31:20:c4:9e:
31:1b:2c:ac:3b:34:fb:a4:ce:ff:4a:d8:1e:38:98:
b0:1a:2b:5f:52:98:3e:0d:3f:12:41:fa:cb:40:ea:
03:47:0a:59:47:76:fb:53:45:ed:75:8e:fc:35:47:
ac:6b:f2:c3:cb:e3:e7:c6:bd:37:c2:c4:c6:94:95:
98:ee:06:9a:0e:4d:ba:38:9a:40:5d:2a:81:6b:ca:
1c:c2:19:8c:a7:75:26:1e:a9:b1:8d:00:0f:a6:a3:
88:17:40:41:13:00:78:8c:0e:0f:d6:55:79:c5:34:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9B:11:6E:98:55:69:3A:6E:B4:A6:7F:ED:C5:0E:0F:BB:A6:75:0A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/epsRbphVaTputKZ_7cUOD7umdQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/14
46.224.0.0/15
91.98.0.0/16
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
7e:94:38:7b:cf:7f:a3:4a:8e:da:40:e1:31:5b:9b:82:28:14:
76:31:89:41:25:f9:fb:9d:b3:bd:23:5a:30:da:a3:11:88:76:
4d:eb:d2:ee:e8:1d:53:09:a1:ce:29:d9:b5:44:0f:7e:99:fc:
36:74:7d:ef:ae:c1:07:c9:84:84:3a:14:79:92:64:31:2a:8a:
86:ab:23:d2:f1:06:e0:e1:be:c1:cf:c0:54:7d:76:af:15:6f:
63:69:e4:03:d7:51:38:23:2c:32:0c:f0:a2:2e:b5:f5:0d:cd:
92:00:18:fe:63:16:a1:7c:c3:f2:08:33:45:0e:fb:5d:b2:c1:
a4:fa:ab:a5:5b:40:ec:d2:b5:43:86:1a:2a:0a:d8:e3:a6:30:
92:1f:84:51:e2:a3:9d:cc:6a:b7:d0:08:d3:d9:db:13:13:a2:
62:33:78:e2:85:c0:dd:11:da:3c:ec:54:e4:95:2d:47:ab:3d:
db:7c:47:b8:4e:a5:98:82:c6:04:93:27:1a:b4:7d:a4:db:1c:
f9:ad:6f:0d:b2:ef:f5:af:a2:4d:47:d9:e1:ac:49:e0:2f:c8:
83:55:90:2c:cc:9f:88:0e:78:1c:a2:bc:53:8a:27:fa:fd:e3:
f0:41:4f:cb:02:95:7d:d3:79:3c:3a:50:66:52:57:e4:58:e5:
e4:1b:28:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 07:31:35 2024 by rpki-client on console-ams.rpki-client.org