Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jwLZjmrJ6nqEJqT8TyyfUbRRDFc.roa
File: jwLZjmrJ6nqEJqT8TyyfUbRRDFc.roa (raw, json)
Hash identifier: FdnHm0B/pQthvWDF+APAx3PtDyf2LTRrXDX5y13ezsQ=
Subject key identifier: 8F:02:D9:8E:6A:C9:EA:7A:84:26:A4:FC:4F:2C:9F:51:B4:51:0C:57
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01923C0710C7B25A929B434952D3C5D1BD9C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jwLZjmrJ6nqEJqT8TyyfUbRRDFc.roa
Signing time: Sun 29 Sep 2024 04:25:48 +0000
ROA not before: Sun 29 Sep 2024 04:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 05:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3c:07:10:c7:b2:5a:92:9b:43:49:52:d3:c5:d1:bd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 29 04:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f02d98e6ac9ea7a8426a4fc4f2c9f51b4510c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:1c:a7:a7:4c:44:0c:3e:f1:40:de:48:76:
16:23:fc:b0:cf:29:88:fc:35:c8:cb:5c:ab:b9:9e:
26:db:dc:03:10:b0:7c:71:d0:da:3d:72:9a:c1:e2:
c8:7d:c6:48:ea:90:bd:6e:e7:6f:c6:35:3f:8e:d3:
55:f5:e5:99:51:88:e3:3f:e9:be:2b:50:97:f4:f2:
7d:c5:4b:2c:f2:a0:55:79:31:6e:81:90:0c:fb:b3:
ac:e2:84:c7:40:0f:5f:fd:3c:4d:a1:ab:68:30:70:
93:aa:f6:12:89:af:98:5d:65:75:b9:30:5d:9d:4f:
74:85:2a:b4:a8:6c:60:bb:5e:b9:e9:84:b1:66:db:
0a:74:b9:84:40:4a:df:0f:2a:a3:20:83:bf:a5:1a:
db:72:68:4a:32:20:89:4e:9f:34:d0:b8:db:3e:e0:
73:3a:9e:15:89:af:25:85:0f:45:75:d1:a8:99:c0:
bb:29:09:83:a9:a1:0f:85:42:11:1e:3a:11:cd:48:
9f:11:2c:4c:24:0f:a7:80:d3:ec:f0:28:f3:94:21:
45:b7:c9:29:00:d2:32:fe:29:71:37:67:91:96:dd:
cc:00:fc:0d:5b:c0:b4:05:b2:68:25:5c:4d:6e:cf:
62:cd:f8:ce:d8:f8:42:13:02:27:e6:9c:09:57:be:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:02:D9:8E:6A:C9:EA:7A:84:26:A4:FC:4F:2C:9F:51:B4:51:0C:57
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jwLZjmrJ6nqEJqT8TyyfUbRRDFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.59.0/24
31.56.63.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.89.0/24
31.56.112.0/21
31.56.126.0/24
31.56.147.0/24
31.57.0.0-31.57.9.255
Signature Algorithm: sha256WithRSAEncryption
b6:45:01:59:d7:f2:bd:c1:75:de:61:f6:d8:a1:69:f1:90:13:
da:f4:16:b6:90:d1:94:99:dc:02:c0:1f:06:34:82:ee:47:b9:
89:02:00:8e:a9:3f:99:d4:29:21:a7:8d:9f:3f:9f:4d:c3:c8:
5f:e1:f8:73:7e:ee:89:c2:35:ac:f8:f3:03:c7:e2:79:ae:92:
85:ed:c1:4f:d8:14:ba:ae:a2:09:fe:0b:b4:51:f3:2a:f5:b1:
b3:61:61:01:88:33:f7:5b:78:84:01:84:d6:65:a7:7e:7d:a8:
7f:3a:12:cc:ad:5a:2e:8b:14:00:cc:80:cd:c0:4d:90:7d:eb:
b7:7c:95:82:4c:73:f7:0b:92:88:6f:7d:25:5b:92:ee:e5:2a:
d4:e8:b8:15:eb:ff:06:27:e6:66:82:e3:19:6f:75:df:56:3c:
43:65:c8:84:2c:e3:9e:c2:14:63:c5:20:ec:61:ba:9c:6c:f7:
25:80:40:57:7a:ea:11:d3:89:a9:77:2d:f9:f7:0d:b5:91:99:
4d:af:45:f5:6b:fb:01:eb:07:e0:8a:ad:a2:f7:f6:b1:12:a3:
d2:8f:77:23:46:ab:8a:f1:2f:35:97:06:49:99:39:c0:52:7d:
69:76:93:83:fa:b5:e3:eb:88:ac:d7:35:69:da:bf:97:e0:c1:
26:3a:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:06 2024 by rpki-client on console-ams.rpki-client.org