Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gWQlULnfJB6DG_-AGjPMx2BiO9I.roa
File: gWQlULnfJB6DG_-AGjPMx2BiO9I.roa (raw, json)
Hash identifier: aA8XFMXGucFKJ7oyb+gfDBRLm1CV1ZjyDysSFpdHt7o=
Subject key identifier: 81:64:25:50:B9:DF:24:1E:83:1B:FF:80:1A:33:CC:C7:60:62:3B:D2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01919220B4DFC7CA2FD0C936F83E7040ED1F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gWQlULnfJB6DG_-AGjPMx2BiO9I.roa
Signing time: Tue 27 Aug 2024 04:38:22 +0000
ROA not before: Tue 27 Aug 2024 04:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 10:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:20:b4:df:c7:ca:2f:d0:c9:36:f8:3e:70:40:ed:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 27 04:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81642550b9df241e831bff801a33ccc760623bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:80:8b:44:e2:ff:bc:7c:ff:69:93:de:4f:
db:8e:88:60:9e:48:75:4c:f9:57:85:c7:9d:ae:86:
25:94:fe:d5:23:54:57:23:58:c0:80:20:25:3d:67:
62:8a:16:cb:5b:f3:70:7e:60:d8:49:df:66:98:06:
a6:4e:eb:e6:6f:9c:04:6c:ad:3d:9e:03:6a:85:cb:
ab:71:ee:7b:87:ed:a9:20:06:15:7d:00:a9:13:94:
7d:85:b9:80:3a:f3:0d:32:68:ce:bc:49:75:ae:03:
be:5a:93:2a:ec:c2:26:a9:eb:2c:22:c5:b4:78:c5:
8e:29:76:42:4d:95:16:5c:f6:cf:bc:48:97:5f:09:
1f:7c:00:8f:3d:fc:b7:6e:a4:8c:78:5a:46:1d:e6:
1e:5b:b6:b3:c2:bb:03:e7:ed:93:7a:82:1f:82:59:
4d:f8:54:57:48:b3:6c:a3:cc:c0:01:5c:81:1c:48:
05:87:5d:4a:a7:2d:5f:a5:6b:3f:3d:ef:3a:85:4d:
a1:81:30:56:67:80:31:81:89:dd:55:1a:84:77:7c:
9e:0f:ee:bc:ab:df:cf:a1:8d:a4:06:a1:2b:84:70:
a6:f0:d1:5e:fc:1b:86:f5:ca:e4:1b:97:2c:40:c3:
6b:9b:74:61:b8:46:f3:36:7f:48:53:8c:62:6a:8a:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:64:25:50:B9:DF:24:1E:83:1B:FF:80:1A:33:CC:C7:60:62:3B:D2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gWQlULnfJB6DG_-AGjPMx2BiO9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.89.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c4:91:1d:6f:c3:1e:05:a2:0c:f0:f8:00:d2:ba:a9:2c:ef:
e1:e3:e6:44:bc:1f:e0:bf:a6:8f:bb:9a:3f:9b:96:a1:e5:b9:
ab:54:5b:42:01:64:c7:f1:90:56:16:36:f0:02:d5:37:29:84:
f5:7c:20:b7:7b:99:02:77:93:29:08:49:5d:bb:8f:53:64:b6:
ac:a4:17:4a:ac:e6:92:4f:34:ca:5c:5b:aa:a7:d8:a7:11:c3:
7f:3f:ea:a3:33:65:af:c8:36:19:84:02:7b:9b:62:09:d0:9e:
1d:cd:1e:00:4b:71:c8:70:eb:fd:1b:24:a8:6c:0d:70:15:e6:
a0:92:07:b9:d7:e5:98:7d:47:ca:b3:aa:95:af:c2:63:e6:ec:
84:60:6c:87:ee:87:12:60:7c:4a:95:49:fd:64:d0:05:3e:c8:
c1:40:48:6b:62:04:48:01:06:af:aa:19:f6:65:86:d8:b5:17:
a9:cf:c7:90:e0:55:15:fa:99:eb:0d:91:a2:02:75:17:7c:bb:
1f:f7:e9:a8:d0:b5:8a:4e:84:d6:64:48:e3:ba:05:9e:8c:0a:
8d:d0:7f:bf:fb:8c:4f:9f:9c:95:7e:2e:68:a1:ff:f1:ec:2d:
32:cc:10:d6:85:70:2c:ed:86:1e:eb:ea:7c:33:52:d6:67:ea:
7e:46:28:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 14:17:30 2024 by rpki-client on console-ams.rpki-client.org