Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nLQBvEPwqMQJ-HxnlGqZxHeUY5Q.roa
File: nLQBvEPwqMQJ-HxnlGqZxHeUY5Q.roa (raw, json)
Hash identifier: dtRpijj8YYXWQFAeuos6ojms+HTbXCEufW+3RpWHBw8=
Subject key identifier: 9C:B4:01:BC:43:F0:A8:C4:09:F8:7C:67:94:6A:99:C4:77:94:63:94
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01936C9FC4F004AAAA9FBBCD235A7FA63D8F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nLQBvEPwqMQJ-HxnlGqZxHeUY5Q.roa
Signing time: Wed 27 Nov 2024 07:57:10 +0000
ROA not before: Wed 27 Nov 2024 07:57:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.3.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.22.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.26.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.67.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.186.0/23 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.49.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 12:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:9f:c4:f0:04:aa:aa:9f:bb:cd:23:5a:7f:a6:3d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 27 07:57:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cb401bc43f0a8c409f87c67946a99c477946394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:96:14:6b:49:d0:4f:f3:88:ca:eb:1a:b9:
31:f0:7c:19:d7:08:9e:24:a4:a6:61:8f:e0:b9:bc:
4d:6a:f6:1b:41:57:63:f0:b6:c9:fe:9f:09:60:e4:
fa:00:0d:85:a8:3d:e9:0f:41:69:a2:57:08:cb:70:
8f:76:e3:12:79:18:4d:de:a9:48:65:b9:bd:97:3d:
11:3a:f9:bf:a9:50:3e:b6:15:5a:d4:1c:02:ae:41:
fa:1e:82:3f:9a:5a:a7:3a:2e:33:6f:bb:10:41:c1:
1d:a7:7f:ca:a1:30:3c:5f:35:1f:00:78:04:50:fa:
56:83:9e:e5:22:90:c0:a9:ab:61:6a:8d:c9:ce:4c:
9f:8a:dc:56:a3:c5:40:15:57:6e:4d:d1:65:75:2d:
b2:d8:63:c9:4f:75:5b:51:15:dd:54:5a:1d:c0:db:
6a:57:24:ea:45:87:70:c3:96:6c:0f:49:80:cc:76:
bd:3f:be:81:df:27:af:4f:17:96:50:d6:43:55:35:
76:1b:7f:b7:0b:eb:70:e6:ea:da:a4:6b:ac:02:b6:
56:79:b4:d1:5b:69:68:b9:5c:ad:78:5d:7c:45:5c:
02:0e:d2:d2:1e:59:07:ef:a1:ee:35:88:26:77:f1:
c7:f9:6a:21:38:2d:2b:67:08:77:13:e6:80:68:7e:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B4:01:BC:43:F0:A8:C4:09:F8:7C:67:94:6A:99:C4:77:94:63:94
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nLQBvEPwqMQJ-HxnlGqZxHeUY5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.3.0-31.56.5.255
31.56.22.0/24
31.56.24.0/24
31.56.26.0/24
31.56.42.0/23
31.56.48.0/24
31.56.57.0/24
31.56.89.0/24
31.56.120.0/22
31.56.127.0/24
31.57.65.0/24
31.57.67.0/24
31.57.132.0/23
31.57.146.0/23
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.232.0/22
31.58.49.0/24
31.59.68.0/24
31.59.96.0/22
31.59.112.0/22
31.59.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:90:51:e8:25:c9:11:d9:75:fc:aa:fc:d9:5d:1c:9e:00:54:
49:03:a4:5a:60:c1:b8:07:3c:fd:eb:52:90:37:e0:83:f5:d2:
55:ea:c3:b3:54:44:fd:6c:f8:d6:ba:7f:68:3d:ca:55:a7:6e:
a3:77:7f:9a:ee:57:c5:66:05:80:59:71:de:5f:8f:63:3c:06:
0f:ed:a4:23:54:d2:41:9e:98:70:2a:35:5b:4e:fa:36:74:3b:
3f:1c:e8:9b:15:e8:bf:7f:c9:30:50:46:5f:a1:4a:6b:38:e5:
38:64:72:96:d1:cc:74:9d:2e:f7:5d:8f:80:20:2d:73:73:47:
7c:86:98:29:d4:5d:b1:eb:7b:5b:3d:41:41:b7:a2:2e:da:6f:
3f:0f:ae:78:f8:03:61:92:c0:a2:df:be:60:2e:3d:09:05:92:
36:b6:80:60:e7:f3:7c:32:25:aa:ab:dd:43:76:e9:2a:08:f5:
06:39:e5:b3:75:64:cd:70:4c:4a:27:ae:56:97:db:09:da:ec:
02:7b:47:23:86:d3:33:51:cb:4d:f8:a6:3f:a4:55:01:54:db:
4e:9a:4d:e9:30:29:3a:2c:c1:f8:2c:c3:c3:48:f9:c0:82:0b:
e7:ea:e5:2e:fd:33:11:3b:ea:02:18:8f:01:5b:db:d2:7c:a9:
aa:6c:42:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:12 2025 by rpki-client