Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kJsfKwOAvbNpbtWTfpSHIcMnRKI.roa
File: kJsfKwOAvbNpbtWTfpSHIcMnRKI.roa (raw, json)
Hash identifier: +fZS/5+QGCiAT9NBgsjP0GldUBzmOGhPgl9Tz3oqcnk=
Subject key identifier: 90:9B:1F:2B:03:80:BD:B3:69:6E:D5:93:7E:94:87:21:C3:27:44:A2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192D9482714645C116F08D117F0AB4A6DED
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kJsfKwOAvbNpbtWTfpSHIcMnRKI.roa
Signing time: Tue 29 Oct 2024 17:17:17 +0000
ROA not before: Tue 29 Oct 2024 17:17:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.186.0/23 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.58.17.0/24 maxlen: 24
31.58.25.0/24 maxlen: 24
31.58.27.0/24 maxlen: 24
31.58.31.0/24 maxlen: 24
31.59.12.0/24 maxlen: 24
31.59.16.0/24 maxlen: 24
31.59.17.0/24 maxlen: 24
31.59.23.0/24 maxlen: 24
31.59.26.0/24 maxlen: 24
31.59.31.0/24 maxlen: 24
31.59.32.0/24 maxlen: 24
31.59.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 07:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d9:48:27:14:64:5c:11:6f:08:d1:17:f0:ab:4a:6d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 29 17:17:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=909b1f2b0380bdb3696ed5937e948721c32744a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:77:83:a9:7d:06:f8:af:8f:90:14:59:67:
0c:07:bb:8c:ee:26:4c:01:de:d1:35:db:ec:be:9a:
ff:4f:e8:01:5d:32:86:ce:98:a2:f8:c9:1e:14:05:
20:2c:87:f2:a8:3a:c2:2e:e9:0b:78:81:20:59:bd:
76:e0:eb:e7:eb:05:4c:7a:68:c8:2d:6a:ff:ad:9e:
2e:0b:fb:52:6e:e6:0e:f9:ee:a0:09:c3:84:df:1a:
47:4e:49:ae:49:8f:bc:38:52:78:1a:3b:df:f1:70:
6d:e7:1c:eb:b3:06:62:a7:40:19:56:aa:6e:2e:14:
3c:29:ee:2d:38:c0:9d:92:71:2b:16:31:17:0e:84:
31:05:7a:f6:08:80:04:99:a2:e9:9b:10:85:7f:18:
29:4e:a4:c5:2e:1f:a5:ca:5b:42:88:81:9d:b2:c7:
85:45:66:b2:13:72:bf:0f:d0:ba:76:c6:c7:9a:b9:
5c:4e:39:3f:cc:27:c4:b3:8e:ff:0c:dc:95:a2:dd:
6c:c6:56:ee:24:9f:b9:80:d1:7c:60:65:1f:55:16:
be:5c:c2:bb:0a:cd:d9:81:0d:96:53:97:1e:d8:8d:
49:6c:d6:50:b3:19:64:e0:54:75:eb:22:af:f6:9e:
e9:a6:ee:ef:be:c5:fb:09:6f:6c:98:13:b8:e6:4e:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9B:1F:2B:03:80:BD:B3:69:6E:D5:93:7E:94:87:21:C3:27:44:A2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kJsfKwOAvbNpbtWTfpSHIcMnRKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.64.0/24
31.56.160.0/21
31.57.184.0/22
31.57.202.0/23
31.58.17.0/24
31.58.25.0/24
31.58.27.0/24
31.58.31.0/24
31.59.12.0/24
31.59.16.0/23
31.59.23.0/24
31.59.26.0/24
31.59.31.0-31.59.32.255
31.59.34.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:b1:85:6e:e3:bc:fb:5d:94:82:0f:0a:05:4a:ad:72:6f:22:
e9:c9:6a:fd:c0:b9:90:29:8c:44:be:0b:96:37:a5:9d:70:9a:
c0:67:03:53:56:d4:ff:34:df:1b:51:07:1c:8f:40:e3:cf:9d:
c1:e4:5b:ac:76:61:05:2a:4a:1e:0c:df:d8:7c:ba:d7:40:63:
00:3a:2b:5d:cf:ad:5b:77:80:d8:e8:58:85:ed:a1:f8:48:fa:
1f:90:a7:60:1b:8d:e6:45:73:ee:de:1d:78:c3:4c:a6:de:bb:
26:07:c3:62:9c:14:4d:4e:48:36:34:83:ef:04:f5:3b:21:b2:
e2:3e:3c:66:3e:9b:f1:1f:f9:da:a2:53:1a:7d:1a:7a:07:52:
dc:c2:5f:9a:56:6e:6e:be:6a:5d:9f:45:8b:e2:3e:db:87:8c:
ab:72:d5:ac:8f:86:ee:53:e5:31:27:13:a3:9d:65:b1:57:d2:
3b:8d:14:74:bd:3c:ff:f0:5c:3a:34:58:f9:1a:42:d6:89:b5:
05:6f:9e:d3:c9:c4:66:aa:34:55:5e:55:11:63:06:db:f5:f4:
1e:67:27:22:a0:91:99:67:ce:f0:bf:73:fe:95:1a:a7:cf:4b:
b5:95:26:77:95:96:ab:95:1c:4f:3a:08:c2:4e:4f:55:00:74:
79:49:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 09:06:31 2024 by rpki-client on console-ams.rpki-client.org