Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kdK8PQZsP0e0TGssHv-tY2aAuMM.roa
File: kdK8PQZsP0e0TGssHv-tY2aAuMM.roa (raw, json)
Hash identifier: ITghAD87ORWxbUBJYsmwmboVADF9qjakWkLhsZAKqwk=
Subject key identifier: 91:D2:BC:3D:06:6C:3F:47:B4:4C:6B:2C:1E:FF:AD:63:66:80:B8:C3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191BEBED4DF6056780CF870F7DABEAFE963
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kdK8PQZsP0e0TGssHv-tY2aAuMM.roa
Signing time: Wed 04 Sep 2024 20:34:23 +0000
ROA not before: Wed 04 Sep 2024 20:34:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215362
IP address blocks: 31.56.35.0/24 maxlen: 24
31.56.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 06:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:be:be:d4:df:60:56:78:0c:f8:70:f7:da:be:af:e9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 4 20:34:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91d2bc3d066c3f47b44c6b2c1effad636680b8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:6c:1a:64:be:96:ad:d2:4e:72:77:22:ef:
2b:c9:2b:07:20:06:a5:2d:c5:61:5a:80:eb:6d:01:
cf:b9:39:87:0c:20:d5:90:9b:b1:24:94:3e:09:82:
bc:dc:24:29:84:b2:f6:5d:a3:3a:a1:64:01:14:06:
97:73:d5:1d:fc:39:e9:0e:d6:8e:9a:2e:65:19:28:
85:2c:1f:60:10:53:1a:f7:13:66:25:20:c0:ce:46:
18:c2:04:c7:d1:0f:79:00:f2:80:b2:4a:af:a1:27:
63:a2:2b:52:e6:ce:a2:74:12:1e:52:39:f3:24:a2:
01:50:ba:46:9b:80:83:e5:29:5c:69:60:8c:ff:26:
43:d5:08:96:f0:d8:0d:11:e8:78:ba:2a:22:21:37:
8a:b5:12:a1:3e:a0:92:c1:33:27:9d:d2:35:51:d3:
f6:cc:db:76:45:12:bb:71:56:c1:cb:ba:63:db:00:
19:2e:5e:2e:2d:51:1b:e9:8b:ff:17:dc:82:e9:30:
e3:a7:34:b2:d3:c0:82:16:e0:8f:55:7a:36:e9:3e:
74:b2:4f:98:7b:f8:57:8d:33:1e:74:96:4a:c3:a8:
75:6c:92:4b:20:be:2d:57:6d:7f:63:40:81:25:f0:
b5:85:0e:6a:76:43:81:b5:bb:4c:19:58:0b:d5:ab:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D2:BC:3D:06:6C:3F:47:B4:4C:6B:2C:1E:FF:AD:63:66:80:B8:C3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kdK8PQZsP0e0TGssHv-tY2aAuMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.35.0/24
31.56.146.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:51:59:ee:d1:f5:74:b5:4f:b4:9f:f4:30:b9:00:cd:18:76:
ea:82:aa:19:ed:9a:20:a2:34:cc:b8:a2:86:cf:c3:f5:9a:f4:
2c:68:fa:f5:54:fc:d2:dc:00:ca:ec:aa:f5:37:0b:96:21:d0:
c5:b3:aa:e5:88:04:96:7c:af:67:27:6e:50:69:29:95:b3:e0:
85:4d:9a:8f:91:db:b6:7c:c3:6a:99:0d:55:5f:a0:12:cd:c2:
c9:8d:7f:6d:00:8e:44:38:f7:bb:11:ef:3b:73:86:8b:48:b8:
22:19:60:c3:40:ff:1d:a8:fd:a9:b6:3c:1c:9d:a9:c5:a9:3c:
e6:4e:af:37:99:d8:76:d6:b1:7a:f1:44:4e:b1:cd:31:2b:72:
da:90:01:7e:74:3b:64:d7:df:f7:0c:36:b6:0e:ef:de:83:51:
94:1f:e5:9c:a9:0e:d8:2b:2d:cf:15:ca:0b:43:9e:75:1d:f9:
49:7d:da:e3:4e:71:92:86:73:58:f5:c8:43:0c:44:0e:5c:af:
e5:0a:3c:ab:36:52:98:1e:35:b5:78:7f:e7:f1:ff:02:74:c1:
f3:1c:92:6c:25:91:29:fc:62:ae:78:cc:93:be:70:a3:da:34:
87:80:18:5a:3b:72:57:8b:a2:28:d5:0a:c8:74:94:cc:35:28:
7c:46:62:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 10:23:21 2024 by rpki-client on console-ams.rpki-client.org