Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ncm50rS1FehVbzZipoT559HigUo.roa
File: ncm50rS1FehVbzZipoT559HigUo.roa (raw, json)
Hash identifier: RK+oHDUC6eePCQ+RduSBLBygZbA3K18TZd0WL06Y424=
Subject key identifier: 9D:C9:B9:D2:B4:B5:15:E8:55:6F:36:62:A6:84:F9:E7:D1:E2:81:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019135F9200FA1781D50A3C3B120C73CAF70
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ncm50rS1FehVbzZipoT559HigUo.roa
Signing time: Fri 09 Aug 2024 07:10:04 +0000
ROA not before: Fri 09 Aug 2024 07:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 31.56.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 11:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:35:f9:20:0f:a1:78:1d:50:a3:c3:b1:20:c7:3c:af:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 9 07:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dc9b9d2b4b515e8556f3662a684f9e7d1e2814a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:6c:2a:7e:19:ed:c8:aa:fc:10:78:82:ae:
79:f4:de:6f:c8:96:42:b7:24:42:01:6b:ca:c7:5f:
27:ee:f8:cc:2c:6a:46:8e:0b:09:20:49:e7:bc:f9:
55:87:79:60:29:31:59:fb:24:4e:3a:b3:9f:c2:02:
d9:38:1e:d3:ce:d9:42:d0:97:30:03:42:89:58:2f:
b8:7a:b8:29:a0:2b:e5:2e:4f:7c:a3:fc:e1:0d:bf:
14:e7:a6:57:b6:34:c3:ad:dd:4f:68:19:04:97:c4:
4f:19:25:47:99:40:f1:10:79:ba:1c:57:ce:b4:d4:
6c:71:f9:0f:1e:64:eb:e9:bb:26:4c:ce:6d:17:8e:
3e:e5:a7:df:ed:1c:c6:2b:9c:fc:fc:19:c3:5b:e8:
89:a5:b7:e0:3a:33:f9:da:16:c2:85:67:d6:22:d9:
fa:2b:bc:65:44:7d:1b:2e:21:ba:6b:a8:c4:e1:bd:
1c:c1:1d:63:b1:3b:17:fc:02:89:6c:03:ef:94:83:
4c:8f:42:77:a4:26:db:e2:2c:08:7c:09:09:b3:1b:
27:65:6a:69:da:fd:53:02:a9:96:5a:43:54:15:ef:
c0:be:33:f3:5c:49:ca:31:b6:75:32:6a:3c:e3:5f:
2f:36:76:10:ef:1d:c7:9a:21:f6:7c:0f:9d:44:9b:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C9:B9:D2:B4:B5:15:E8:55:6F:36:62:A6:84:F9:E7:D1:E2:81:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ncm50rS1FehVbzZipoT559HigUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.47.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f4:09:d8:ea:fb:a8:e4:e5:d6:df:40:be:8c:b4:35:2e:cd:
15:9e:c0:b7:35:76:fc:62:ab:69:71:41:c4:85:c1:45:b0:84:
9f:52:e2:59:00:11:86:6a:e2:42:64:7b:d4:6e:d8:bc:03:ae:
a1:29:c1:24:2e:8f:bf:91:00:93:b5:03:48:6a:f8:13:a5:f2:
c0:55:ad:44:41:54:db:12:46:e5:4c:33:88:94:b4:86:9d:fc:
aa:1f:19:c0:66:fa:d0:00:ec:ce:79:3b:a2:19:2f:df:61:de:
f5:31:5c:05:a0:27:47:0f:5d:25:f4:89:1c:7f:18:7d:3c:61:
48:5d:6f:08:a7:b5:25:cc:2b:46:a4:b9:a8:a6:6f:ea:6c:8f:
0b:0a:e8:ca:a9:cc:6f:11:ab:a2:c8:58:01:08:4c:88:9b:0a:
02:1d:0d:4b:9b:d4:dd:dd:28:1d:c5:75:83:16:b9:19:a5:da:
c2:7e:30:04:f8:03:84:65:01:85:98:50:01:df:4e:0f:ba:d4:
93:d9:7c:35:d1:09:af:3e:1b:ba:15:b0:38:b2:5c:0f:ff:02:
e7:65:45:58:eb:e4:0a:6e:cc:c5:5b:74:ad:56:e7:37:66:8d:
d0:23:ee:55:d3:73:47:d9:f0:34:f8:e3:2f:ad:09:0f:e1:c7:
4d:37:5d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 13:30:06 2024 by rpki-client on console-fra.rpki-client.org