Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k9JTj0bb3F6I8j5lhxyV_DOJnf0.roa
File: k9JTj0bb3F6I8j5lhxyV_DOJnf0.roa (raw, json)
Hash identifier: oKpJ4SxysQ/aO9DAwIdS+NxgRcK4Y/eL0YWpoAdX+iM=
Subject key identifier: 93:D2:53:8F:46:DB:DC:5E:88:F2:3E:65:87:1C:95:FC:33:89:9D:FD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191460E9581E829E106CB8273AD380098D7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k9JTj0bb3F6I8j5lhxyV_DOJnf0.roa
Signing time: Mon 12 Aug 2024 10:07:26 +0000
ROA not before: Mon 12 Aug 2024 10:07:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214967
IP address blocks: 31.56.62.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 04:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:0e:95:81:e8:29:e1:06:cb:82:73:ad:38:00:98:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 12 10:07:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93d2538f46dbdc5e88f23e65871c95fc33899dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:09:8a:c2:29:8e:71:71:f7:fc:d8:2d:1e:
74:66:d2:66:b9:1d:2f:10:55:ba:af:90:c2:c0:63:
3b:42:ba:0a:a5:d3:f7:7b:a7:62:c0:ff:ce:04:af:
88:ad:bd:3a:af:64:9c:4e:b2:f3:cc:bf:99:af:ba:
43:4c:65:21:6f:55:12:c9:8e:24:d9:3d:c2:fe:dd:
2d:fd:10:4b:eb:a2:ad:7f:ba:31:e8:2f:a6:1b:01:
92:44:a4:53:4a:58:db:04:ad:0f:83:b0:80:e4:05:
2e:17:cd:1e:73:76:0f:d8:e4:2a:01:69:6b:1f:ca:
d9:22:1e:00:47:38:03:d3:ce:ed:e7:45:6c:b9:3c:
fa:0f:a7:49:92:65:e6:d7:64:e6:08:de:fe:d2:5f:
d5:80:98:29:ee:f8:d3:39:cb:c3:3f:d7:e5:2b:b4:
aa:b8:bb:d2:06:f3:7f:6f:3a:6a:45:80:33:88:f3:
88:03:56:b0:40:5e:b3:fc:b4:00:94:eb:ba:75:bc:
99:40:a3:65:74:81:ae:b2:5e:53:ed:d2:e6:ef:89:
18:81:53:42:ae:24:9d:25:d1:54:b9:8d:e3:19:68:
99:d4:f8:65:16:68:d1:bb:86:9c:41:00:c0:06:6f:
37:c2:d3:d0:9d:4f:b1:e3:e5:13:3e:d5:72:83:e3:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D2:53:8F:46:DB:DC:5E:88:F2:3E:65:87:1C:95:FC:33:89:9D:FD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k9JTj0bb3F6I8j5lhxyV_DOJnf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
31.56.67.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a8:0b:f0:f9:fe:34:48:0a:95:d3:b4:33:00:ff:83:3c:74:
c5:c0:b3:e9:d3:20:ab:7b:38:a2:5c:00:3b:e5:db:6f:c4:1b:
19:b0:6d:1e:05:ba:b9:3f:4b:ed:58:05:f6:b4:e2:a5:cc:2b:
17:21:71:35:c2:01:ac:98:c2:a7:33:24:8c:5c:81:b3:63:fb:
1b:41:2e:82:cd:ff:6d:76:e2:93:80:b1:63:d4:21:16:1c:4b:
65:2a:22:84:82:87:d7:5a:33:4d:73:e5:83:09:be:80:c4:28:
33:8c:93:c4:ff:84:27:f9:5c:26:9b:27:fc:50:13:37:0d:30:
81:db:40:7f:a8:6f:50:03:59:2c:aa:65:84:c2:12:b3:58:a6:
1e:20:5a:9c:13:3d:c1:98:6f:08:98:36:11:50:35:10:8b:a5:
7a:d0:3b:f7:44:9e:5c:7f:ff:a9:ef:63:84:06:45:9b:ae:e1:
4a:96:82:58:d0:31:12:60:7f:f9:9d:8b:9b:50:32:6f:79:da:
a7:c1:de:ba:04:bb:b1:54:d9:3c:12:59:82:fa:00:8a:4d:3c:
64:cf:07:31:85:ea:c3:94:fc:5e:69:5d:7d:c4:93:94:e1:ef:
47:42:3d:20:c8:67:f3:58:ca:2e:62:3a:a7:f4:21:06:11:da:
b0:a4:99:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 06:20:33 2024 by rpki-client on console-fra.rpki-client.org