Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lLiPBrj5rbFQoqAtM7YicEFkyWs.roa
File: lLiPBrj5rbFQoqAtM7YicEFkyWs.roa (raw, json)
Hash identifier: ZHGdaI1Fyhd5vD3os7T7r2Ukg4YMjtk7/77sTMcFQlg=
Subject key identifier: 94:B8:8F:06:B8:F9:AD:B1:50:A2:A0:2D:33:B6:22:70:41:64:C9:6B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192564B9D0F82C14FFF039885753F7C9B45
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lLiPBrj5rbFQoqAtM7YicEFkyWs.roa
Signing time: Fri 04 Oct 2024 06:50:48 +0000
ROA not before: Fri 04 Oct 2024 06:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.2.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.35.0/24 maxlen: 24
31.56.39.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.138.0/24 maxlen: 24
31.56.139.0/24 maxlen: 24
31.56.140.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 07:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:4b:9d:0f:82:c1:4f:ff:03:98:85:75:3f:7c:9b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 4 06:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94b88f06b8f9adb150a2a02d33b622704164c96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:0b:7a:f7:1a:11:56:94:55:fa:4f:12:46:
dc:c3:b6:7f:2e:cf:bc:3e:03:f2:1d:00:73:0b:42:
97:16:48:98:a9:86:d8:c0:bb:dd:1e:b1:35:c3:c9:
85:ef:42:00:6e:12:18:22:23:75:7c:41:3b:fb:21:
98:27:2c:7d:70:bd:60:5f:d6:8f:06:7f:ec:ee:02:
55:8c:66:99:9e:a3:4b:29:b2:69:21:9d:6a:4a:3d:
ab:dc:08:39:92:e8:ea:fa:a0:a2:18:0d:dc:0c:11:
fa:fe:98:7e:1c:20:a7:49:b5:c6:e3:b1:99:05:3c:
30:03:98:24:73:9f:ac:f0:ef:f5:a8:7c:95:45:90:
2f:d5:de:7f:be:ab:38:c8:0f:a3:f8:82:60:3c:9c:
e1:ee:ba:e9:ef:be:cc:f3:80:43:c8:58:90:e1:7a:
2f:46:93:a2:b2:41:9d:1f:7e:d1:c1:69:b3:e7:cd:
b4:5b:81:c9:0c:bf:61:5d:4b:5c:38:b8:f2:b1:68:
9b:2f:af:f5:37:4b:ff:2d:71:da:c1:4f:26:9d:91:
50:f7:a6:37:94:39:68:51:fa:61:c3:d4:5d:32:c0:
90:7f:4d:c2:30:b1:34:f8:9a:79:ad:02:44:05:18:
7d:5e:d9:cf:1c:ae:e4:f2:65:a1:e2:a6:61:aa:af:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B8:8F:06:B8:F9:AD:B1:50:A2:A0:2D:33:B6:22:70:41:64:C9:6B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lLiPBrj5rbFQoqAtM7YicEFkyWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.2.0/24
31.56.4.0/23
31.56.35.0/24
31.56.39.0/24
31.56.59.0/24
31.56.63.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.89.0/24
31.56.112.0/21
31.56.126.0/24
31.56.137.0-31.56.140.255
31.56.147.0/24
31.57.0.0-31.57.9.255
Signature Algorithm: sha256WithRSAEncryption
3e:92:cf:5d:ac:22:3b:64:e6:73:1b:5f:89:4c:c3:14:06:d2:
42:2b:63:f7:42:52:ad:83:f9:e9:81:54:04:50:76:7a:b2:c1:
f9:1c:b0:e8:a9:23:0a:c4:e9:6d:5b:37:13:80:b9:19:46:02:
f4:34:4c:26:8c:87:42:0c:ba:4d:d1:db:61:05:83:b2:55:4c:
b2:8f:17:9c:a8:f2:9a:b8:4f:8c:81:a9:76:0e:9d:b0:a2:53:
c6:91:63:7e:e4:3e:bc:2a:d9:4a:0f:ab:0f:ee:a0:58:36:50:
5f:26:f1:d9:3c:bd:5c:16:5f:8c:11:21:f5:01:19:12:fc:d0:
3b:93:19:6d:63:7d:0b:ff:de:e7:e7:ef:3b:d8:69:dc:07:1a:
56:8e:72:b6:86:6d:61:dc:8c:b0:2e:c2:c3:90:9c:53:af:15:
b1:ed:57:c1:56:34:da:82:d9:39:83:dd:1c:29:d6:df:ca:77:
64:ba:af:4e:28:b7:36:06:27:4a:2f:4d:35:c9:88:60:4e:9f:
03:8b:fb:40:0c:d4:f5:f2:bf:cc:5a:e2:90:c9:01:05:e1:e7:
30:48:6a:b0:e5:4b:e9:fb:6e:41:1d:6d:82:72:7a:14:e8:61:
2b:82:8c:d5:83:8a:b2:ff:4b:f7:7c:f6:06:32:59:5a:89:e4:
43:a0:1b:9c
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgISAZJWS50PgsFP/wOYhXU/fJtFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA0MDY1MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGI4OGYwNmI4ZjlhZGIxNTBhMmEwMmQzM2I2MjI3MDQxNjRjOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmwLevcaEVaUVfpPEkbcw7Z/Ls+8
PgPyHQBzC0KXFkiYqYbYwLvdHrE1w8mF70IAbhIYIiN1fEE7+yGYJyx9cL1gX9aP
Bn/s7gJVjGaZnqNLKbJpIZ1qSj2r3Ag5kujq+qCiGA3cDBH6/ph+HCCnSbXG47GZ
BTwwA5gkc5+s8O/1qHyVRZAv1d5/vqs4yA+j+IJgPJzh7rrp777M84BDyFiQ4Xov
RpOiskGdH37RwWmz5820W4HJDL9hXUtcOLjysWibL6/1N0v/LXHawU8mnZFQ96Y3
lDloUfphw9RdMsCQf03CMLE0+Jp5rQJEBRh9XtnPHK7k8mWh4qZhqq8YCQIDAQAB
o4ICczCCAm8wHQYDVR0OBBYEFJS4jwa4+a2xUKKgLTO2InBBZMlrMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbExpUEJyajVyYkZRb3FBdE03WWljRUZreVdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwdQQCAAEwbwMEAB84AgME
AR84BAMEAB84IwMEAB84JwMEAB84OwMEAB84PwMEAB84QwMEAB84RQMEAB84SAME
AB84VAMEAB84WQMEAx84cAMEAB84fjAMAwQAHziJAwQAHziMAwQAHziTMAsDAwAf
OQMEAR85CDANBgkqhkiG9w0BAQsFAAOCAQEAPpLPXawiO2TmcxtfiUzDFAbSQitj
90JSrYP56YFUBFB2erLB+Ryw6KkjCsTpbVs3E4C5GUYC9DRMJoyHQgy6TdHbYQWD
slVMso8XnKjymrhPjIGpdg6dsKJTxpFjfuQ+vCrZSg+rD+6gWDZQXybx2Ty9XBZf
jBEh9QEZEvzQO5MZbWN9C//e5+fvO9hp3AcaVo5ytoZtYdyMsC7Cw5CcU68Vse1X
wVY02oLZOYPdHCnW38p3ZLqvTii3NgYnSi9NNcmIYE6fA4v7QAzU9fK/zFrikMkB
BeHnMEhqsOVL6ftuQR1tgnJ6FOhhK4KM1YOKsv9L93z2BjJZWonkQ6AbnA==
-----END CERTIFICATE-----
Generated at Sat Oct 5 09:21:52 2024 by rpki-client on console-fra.rpki-client.org