Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hrJAecU-1PZAHXxIT8RHE4l9yZk.roa
File: hrJAecU-1PZAHXxIT8RHE4l9yZk.roa (raw, json)
Hash identifier: AQfTstU7wNG0ynIr1kqpGxQ5fnSZHMKPgoz8j53iZQ8=
Subject key identifier: 86:B2:40:79:C5:3E:D4:F6:40:1D:7C:48:4F:C4:47:13:89:7D:C9:99
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191B3640777E26040B057FEF94938C28DAB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hrJAecU-1PZAHXxIT8RHE4l9yZk.roa
Signing time: Mon 02 Sep 2024 15:39:22 +0000
ROA not before: Mon 02 Sep 2024 15:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.6.0/24 maxlen: 24
31.56.37.0/24 maxlen: 24
31.56.52.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.114.0/24 maxlen: 24
31.56.115.0/24 maxlen: 24
31.56.116.0/24 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.118.0/24 maxlen: 24
31.56.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 19:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:64:07:77:e2:60:40:b0:57:fe:f9:49:38:c2:8d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 2 15:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86b24079c53ed4f6401d7c484fc44713897dc999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:d1:96:e1:7d:d8:19:f1:5b:e0:03:20:55:
02:79:86:c2:7d:aa:ea:fb:58:b8:ef:7d:18:3c:ac:
7d:ab:4e:cb:98:22:36:8d:18:44:dd:87:9d:25:ee:
a8:67:ce:6f:4f:12:ed:20:82:05:42:e3:32:0d:dc:
a5:a8:88:c6:30:9a:37:6b:6f:25:d8:92:aa:90:51:
ee:76:48:9b:dc:cf:1d:96:0b:93:f6:f5:2a:69:76:
ef:bc:21:7a:fa:a1:d0:e8:38:0e:b6:22:53:b2:07:
95:a8:3e:57:0d:c8:65:c6:a2:b5:59:43:f5:a3:f1:
9b:44:8c:6d:7f:35:f0:12:04:6e:ea:24:2e:e1:b9:
12:fb:38:ab:ae:c8:0e:f4:99:95:fa:0b:0b:f6:59:
b3:bd:39:df:68:d3:18:9b:8b:81:ae:ee:db:37:3b:
89:62:8e:00:10:26:ce:b7:aa:bc:38:15:10:41:2d:
a8:2e:6c:2c:87:b3:e1:67:43:2a:e8:2a:4c:71:65:
87:7f:14:ca:52:14:98:f3:b7:1d:80:6c:ea:7b:86:
d6:83:81:62:b0:5a:a8:f0:6e:06:a8:8e:fc:d2:b1:
45:58:1d:13:12:30:db:1f:75:3b:ec:88:46:36:ad:
d4:7d:59:d0:87:18:77:4d:5e:c6:79:8c:0b:d8:c1:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B2:40:79:C5:3E:D4:F6:40:1D:7C:48:4F:C4:47:13:89:7D:C9:99
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hrJAecU-1PZAHXxIT8RHE4l9yZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.6.0/24
31.56.37.0/24
31.56.52.0/22
31.56.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:8e:d5:cd:9a:78:ad:6f:6b:85:a6:a6:8a:f5:ea:a0:01:fd:
8b:33:3c:89:d1:b3:af:1e:46:3f:58:21:a5:df:00:0d:9e:cd:
bf:32:62:a0:11:e1:e6:e9:0e:7e:a1:85:62:10:e6:26:2f:cf:
cb:f6:15:78:50:d8:0e:d5:e8:32:24:66:96:09:cf:51:8e:9e:
48:ac:96:ec:db:6b:21:80:b0:41:4a:33:17:ed:73:70:7a:9f:
24:3e:b1:c1:c3:b8:81:6c:0b:1b:8e:9e:94:f7:6d:16:aa:f0:
ec:9d:3a:e8:6b:42:bd:0d:22:fd:e7:14:48:0e:3d:c0:cd:3f:
19:95:da:84:c3:32:dc:47:4c:99:c1:cd:0d:27:2a:5c:3e:8e:
72:23:39:50:f3:6b:77:7e:c3:06:2f:7a:d2:cb:1c:cf:af:11:
a2:1d:c4:c5:27:5e:b1:78:10:e8:fc:35:fb:30:b0:88:51:0c:
35:1e:3e:26:74:58:bf:4a:f1:a1:ff:16:58:8d:8e:fd:38:37:
23:bf:27:31:83:58:af:d4:cf:a7:2c:bc:21:80:aa:2c:16:73:
c2:3b:84:bc:ea:9b:78:02:ae:35:fe:02:0f:4a:6b:43:70:10:
ed:7d:97:75:4e:9e:df:2e:0f:a0:cd:3b:76:4c:f3:cf:45:7d:
c1:c2:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 21:58:07 2024 by rpki-client on console-fra.rpki-client.org