Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gV-OguKzwcKscTcDvDXxfPwWBrM.roa
File: gV-OguKzwcKscTcDvDXxfPwWBrM.roa (raw, json)
Hash identifier: yJNwN4OrvJ0Oqhj2LWjhvpY8IX+AhkNnOFwdZwT4nX8=
Subject key identifier: 81:5F:8E:82:E2:B3:C1:C2:AC:71:37:03:BC:35:F1:7C:FC:16:06:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191B8537434E1C30AEF671136479480FBAF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gV-OguKzwcKscTcDvDXxfPwWBrM.roa
Signing time: Tue 03 Sep 2024 14:39:22 +0000
ROA not before: Tue 03 Sep 2024 14:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.35.0/24 maxlen: 24
31.56.45.0/24 maxlen: 24
31.56.65.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 05:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:53:74:34:e1:c3:0a:ef:67:11:36:47:94:80:fb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 3 14:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=815f8e82e2b3c1c2ac713703bc35f17cfc1606b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:b3:a3:7d:76:6d:73:9a:16:da:bd:d1:24:
c3:28:33:f8:10:de:f5:54:ee:18:e9:11:03:7c:0b:
ca:1b:f9:11:65:73:54:7f:2d:84:ff:2b:13:49:9f:
2b:1c:3e:0c:82:7e:3b:cb:d1:5f:17:e7:bf:bf:ed:
cc:40:51:4e:74:a1:37:8c:80:bd:f2:af:22:a8:8e:
f8:80:10:e8:ee:02:5d:52:94:29:3e:ec:3a:ba:c8:
3c:b8:e4:ce:42:df:c4:22:2d:3b:00:87:91:35:02:
df:05:a7:40:e1:79:8c:68:b5:f5:73:e9:66:29:42:
d3:f3:5f:38:8b:28:f7:2f:00:c9:46:27:f8:ed:b5:
5c:68:15:58:97:32:5b:aa:5b:a0:e0:0d:6e:d5:24:
1a:c9:e8:b0:bc:6b:51:85:49:bc:aa:a5:23:3e:3b:
db:b6:4e:89:95:bf:61:95:52:ac:11:a2:c8:a1:5c:
e0:cd:b0:6a:39:d9:fb:ce:bf:e2:b3:50:ec:49:87:
a4:9c:f6:49:91:04:91:83:43:9d:f8:43:24:54:e6:
ec:58:05:e8:b4:8d:64:66:93:b1:e1:e6:23:cb:26:
3a:9f:38:d9:2b:42:bd:29:69:f1:92:02:7b:b7:02:
42:70:9f:4b:71:cf:3f:41:f4:18:3c:82:0f:e8:2a:
da:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5F:8E:82:E2:B3:C1:C2:AC:71:37:03:BC:35:F1:7C:FC:16:06:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gV-OguKzwcKscTcDvDXxfPwWBrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.35.0/24
31.56.45.0/24
31.56.65.0/24
31.56.89.0/24
31.56.112.0/21
31.56.126.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:52:ea:89:9c:80:4f:6f:8e:7a:0b:15:2d:6b:fb:31:42:9e:
a5:d4:54:e7:a0:a5:da:55:a8:af:39:5b:84:73:bc:93:37:d1:
4b:dc:07:74:6d:1a:5c:04:28:d8:07:40:8a:91:56:11:78:5b:
80:62:00:6f:41:76:6e:fd:ec:88:fe:06:ef:91:f8:cc:ea:af:
bd:13:83:25:8e:c8:6e:2c:2c:a9:a0:02:02:52:a3:48:fe:a6:
e2:1d:71:71:69:f2:e0:c5:5f:a8:a0:cf:14:31:20:a7:6a:e2:
c5:97:b6:b1:fa:01:f6:92:4d:7c:f3:9b:90:c8:9f:b8:35:83:
c5:d4:7e:04:54:94:00:1e:da:cc:ac:46:08:8f:7f:c3:d7:c3:
df:57:3a:1c:b8:8c:25:18:0a:aa:b5:db:1a:4c:ba:d5:11:86:
1e:d0:7a:ab:35:5c:ac:68:9f:cd:2c:9b:f0:4d:f0:6e:f1:7c:
ca:59:ba:b6:3e:5f:3b:e0:fa:9f:d6:b7:bb:09:d3:4f:c8:c5:
4a:b1:16:1e:1c:c2:d1:af:4b:81:26:3c:1f:e4:49:dd:5a:71:
1e:96:da:19:3b:cd:8b:46:8b:39:ef:e8:d5:3b:64:62:87:e4:
1f:75:6c:0f:ad:a6:72:97:9b:2e:0d:0a:31:83:71:d0:66:fb:
e9:fc:b3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 07:23:12 2024 by rpki-client on console-ams.rpki-client.org