Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iisnChftFeN7WQD0AGOUE9s2wzE.roa
File: iisnChftFeN7WQD0AGOUE9s2wzE.roa (raw, json)
Hash identifier: KdnrqM58D0S+btyJFYbLbMRlIEBnlMo/QK2sX/0JMZw=
Subject key identifier: 8A:2B:27:0A:17:ED:15:E3:7B:59:00:F4:00:63:94:13:DB:36:C3:31
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019183A8AFD4DFF09A06061EAD9C8ED65E47
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iisnChftFeN7WQD0AGOUE9s2wzE.roa
Signing time: Sat 24 Aug 2024 09:12:35 +0000
ROA not before: Sat 24 Aug 2024 09:12:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 10:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:83:a8:af:d4:df:f0:9a:06:06:1e:ad:9c:8e:d6:5e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 24 09:12:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a2b270a17ed15e37b5900f400639413db36c331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:02:1a:1c:f0:42:65:95:70:fc:7a:c5:3d:
3b:43:00:22:49:4f:2d:41:4a:b4:57:5d:f9:fd:c0:
ec:dc:34:af:71:97:18:7e:20:66:05:0c:ed:51:ce:
c3:35:cb:76:47:1e:75:59:1d:47:3e:32:54:c1:63:
b4:e4:1e:92:cc:e7:53:36:96:18:1c:a5:5f:91:78:
f9:4c:a2:b1:cd:d0:0a:c4:43:f3:35:e8:d0:ab:1a:
a2:64:32:d0:fa:fb:0c:ca:eb:a0:f9:4f:41:55:76:
57:08:96:ee:a3:d7:58:ee:18:55:5f:dd:75:8f:ac:
5b:76:02:39:fd:2a:1e:6d:3c:52:e7:5d:53:9c:73:
57:5c:a0:76:94:c3:e0:0c:07:ba:aa:ba:f1:24:dc:
c6:96:33:a5:c3:7f:91:19:6f:eb:68:02:29:2b:6c:
6c:dc:20:fd:67:70:70:6f:7e:0c:7b:c6:5f:e1:f5:
20:65:d1:66:dd:5c:9d:da:4a:d3:7c:1f:44:9a:ae:
28:cf:2a:7f:a2:77:69:bf:b6:a8:6d:69:bf:64:ca:
93:8e:9e:48:a9:05:c7:aa:bb:0e:4b:60:b9:4b:3f:
7e:8f:18:a7:c9:f0:fa:57:ef:4e:1a:8a:7f:9b:71:
4e:37:93:a4:a8:ac:44:d1:3c:e2:af:16:b7:8f:36:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2B:27:0A:17:ED:15:E3:7B:59:00:F4:00:63:94:13:DB:36:C3:31
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iisnChftFeN7WQD0AGOUE9s2wzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0-31.56.2.255
31.56.89.0/24
Signature Algorithm: sha256WithRSAEncryption
42:77:86:6a:9a:b3:99:ea:f4:3b:91:fc:5a:70:7d:39:08:a4:
01:84:18:98:db:75:d0:a6:6e:71:f7:27:2f:54:b8:29:a0:37:
3b:3b:8d:43:05:2c:ff:59:2f:bc:4d:17:07:0e:58:60:14:65:
ba:74:2b:b4:7c:b1:54:b0:3e:b4:fa:11:10:8c:51:c1:34:9d:
23:4d:8f:fb:18:a4:01:88:8f:9c:a9:29:26:9d:d8:44:1e:93:
92:67:56:e1:62:fd:ab:ad:46:87:9c:6b:85:1f:69:4f:13:50:
98:64:6c:91:76:aa:00:8e:65:8f:c8:5a:b6:70:be:2a:b2:1b:
3e:48:1b:06:2c:8b:c4:4c:9d:74:33:9c:a3:a5:3d:64:94:9f:
83:18:89:76:a6:94:e8:30:3f:fc:51:a7:ea:c7:42:bd:47:5d:
2e:de:33:0b:4b:74:f9:54:1f:a4:1e:c9:dc:71:59:b0:f6:7b:
f2:5b:85:f9:8e:92:06:bd:f9:a2:21:f6:2e:cf:0b:b6:22:9d:
59:90:50:68:31:d2:23:d1:a4:64:f5:3e:41:cc:95:35:5c:d2:
79:ef:fe:1d:90:2c:a7:2f:8d:bb:0a:92:4c:d7:a6:0c:8b:23:
5a:a6:92:75:33:e4:39:f0:5f:ee:25:8b:43:19:11:ad:6f:12:
c6:7b:b8:ca
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZGDqK/U3/CaBgYerZyO1l5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwODI0MDkxMjM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTJiMjcwYTE3ZWQxNWUzN2I1OTAwZjQwMDYzOTQxM2RiMzZjMzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhoCGhzwQmWVcPx6xT07QwAiSU8t
QUq0V135/cDs3DSvcZcYfiBmBQztUc7DNct2Rx51WR1HPjJUwWO05B6SzOdTNpYY
HKVfkXj5TKKxzdAKxEPzNejQqxqiZDLQ+vsMyuug+U9BVXZXCJbuo9dY7hhVX911
j6xbdgI5/SoebTxS511TnHNXXKB2lMPgDAe6qrrxJNzGljOlw3+RGW/raAIpK2xs
3CD9Z3Bwb34Me8Zf4fUgZdFm3Vyd2krTfB9Emq4ozyp/ondpv7aobWm/ZMqTjp5I
qQXHqrsOS2C5Sz9+jxinyfD6V+9OGop/m3FON5OkqKxE0Tzirxa3jzam0wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIorJwoX7RXje1kA9ABjlBPbNsMxMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaWlzbkNoZnRGZU43V1FEMEFHT1VFOXMyd3pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAfOAED
BAAfOAIDBAAfOFkwDQYJKoZIhvcNAQELBQADggEBAEJ3hmqas5nq9DuR/FpwfTkI
pAGEGJjbddCmbnH3Jy9UuCmgNzs7jUMFLP9ZL7xNFwcOWGAUZbp0K7R8sVSwPrT6
ERCMUcE0nSNNj/sYpAGIj5ypKSad2EQek5JnVuFi/autRoeca4UfaU8TUJhkbJF2
qgCOZY/IWrZwviqyGz5IGwYsi8RMnXQznKOlPWSUn4MYiXamlOgwP/xRp+rHQr1H
XS7eMwtLdPlUH6QeydxxWbD2e/JbhfmOkga9+aIh9i7PC7YinVmQUGgx0iPRpGT1
PkHMlTVc0nnv/h2QLKcvjbsKkkzXpgyLI1qmknUz5DnwX+4li0MZEa1vEsZ7uMo=
-----END CERTIFICATE-----
Generated at Sun Aug 25 13:03:14 2024 by rpki-client on console-fra.rpki-client.org