Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l06h5t9fyePut3gaiTA4frsxeVA.roa
File: l06h5t9fyePut3gaiTA4frsxeVA.roa (raw, json)
Hash identifier: jcLFkJzbdE7X0iR73BPkuV0TNnL/7tPyYSxnV3eNJ4U=
Subject key identifier: 97:4E:A1:E6:DF:5F:C9:E3:EE:B7:78:1A:89:30:38:7E:BB:31:79:50
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019253DDF8A06BF8C0E6A7DDEF15D5708DF8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l06h5t9fyePut3gaiTA4frsxeVA.roa
Signing time: Thu 03 Oct 2024 19:31:48 +0000
ROA not before: Thu 03 Oct 2024 19:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 22
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.58.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 10:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:dd:f8:a0:6b:f8:c0:e6:a7:dd:ef:15:d5:70:8d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 3 19:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=974ea1e6df5fc9e3eeb7781a8930387ebb317950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:4a:9a:37:16:06:4d:53:7d:e2:76:d7:60:
fe:8b:32:59:f1:0b:f0:ed:16:78:74:37:bc:94:a1:
28:f7:e0:fd:fa:a0:6c:1f:33:45:41:48:60:d2:aa:
e8:a0:4f:47:7c:55:a1:6e:b5:ba:66:a5:1c:04:71:
70:07:93:0e:7f:ab:a3:f7:c8:6a:bc:42:f3:a5:cf:
ae:41:13:73:b2:93:79:79:bf:89:cb:60:6a:12:79:
bc:48:b6:07:bc:99:f0:ac:b4:be:9b:f4:91:bb:b9:
61:2b:bd:f5:53:71:dc:04:f8:2f:c7:23:22:3f:12:
a9:09:e0:37:05:57:7d:50:ad:ec:7d:1d:c7:f7:e8:
66:a3:e7:92:57:ee:83:e2:a7:f1:96:70:8e:dc:b7:
92:bb:49:31:9f:e7:d8:45:42:0b:4d:c5:01:b3:b4:
3e:a1:b9:c5:76:93:2a:a0:52:7f:b9:8a:ee:ad:7f:
14:2e:37:cc:93:97:2b:f6:06:ec:6c:31:b1:5b:d0:
92:cb:e1:58:44:a6:c0:e4:fd:db:5b:0e:b4:d6:ae:
e0:ff:30:72:b8:b8:03:e4:4f:2b:cd:4c:8f:95:2e:
ae:9a:71:59:19:ce:f9:21:1a:7d:9b:9a:35:e0:8c:
0a:a6:44:b1:2b:a3:c3:9d:26:b4:07:57:cf:aa:f5:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4E:A1:E6:DF:5F:C9:E3:EE:B7:78:1A:89:30:38:7E:BB:31:79:50
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l06h5t9fyePut3gaiTA4frsxeVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.16.0/20
31.57.48.0/20
31.58.255.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c2:8c:39:ce:d1:05:7f:d9:8f:00:95:6c:69:eb:bf:b1:dd:
13:3f:91:b2:d2:95:2f:5b:96:e2:20:54:0a:a4:ce:a1:13:92:
ba:a1:fe:06:40:22:a5:7b:50:5d:57:28:64:01:7c:bd:83:6d:
eb:a9:ea:8a:e5:41:0a:38:21:5c:c9:30:c6:b4:42:1d:07:f4:
fb:b6:13:07:f6:c6:55:21:5f:c0:ff:7c:90:51:96:cb:b1:e7:
f7:a7:d1:05:ff:25:7b:86:a1:4d:96:b4:9e:27:17:5e:30:13:
e4:d4:f6:6d:a7:7a:09:95:5d:81:6b:66:44:bf:4f:3b:48:55:
db:c9:9a:0a:ba:c6:ef:f0:ad:ed:19:1b:cc:16:31:c0:ec:12:
fb:5c:74:97:4c:c8:2d:72:2e:5d:1f:03:29:9a:20:05:58:81:
35:28:69:a4:a3:30:b4:64:17:a8:ed:9e:e3:8c:ed:72:25:d1:
92:39:fc:77:5a:cb:82:f3:1c:9f:b0:b4:ba:72:be:c4:96:96:
0f:7a:67:33:9a:ba:bf:00:51:99:2f:5c:4b:cf:2b:aa:8e:62:
31:7c:90:a7:48:66:85:a1:01:cb:f4:0b:f3:7f:5e:33:e3:bf:
01:1d:d4:44:1f:06:10:9e:c7:c0:3e:61:f1:a7:72:21:80:74:
b0:4a:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 13:33:05 2024 by rpki-client on console-fra.rpki-client.org