Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o6w_h9rKMP5PmDdT90ey_bQwDtM.roa
File: o6w_h9rKMP5PmDdT90ey_bQwDtM.roa (raw, json)
Hash identifier: u40Rqzp7yGVmZ3AttOnYGon9h5pZkfIO9leXlvkkZ2I=
Subject key identifier: A3:AC:3F:87:DA:CA:30:FE:4F:98:37:53:F7:47:B2:FD:B4:30:0E:D3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192153B6CCB5E9EEF8A929BA42F31F5445E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o6w_h9rKMP5PmDdT90ey_bQwDtM.roa
Signing time: Sat 21 Sep 2024 15:37:48 +0000
ROA not before: Sat 21 Sep 2024 15:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215727
IP address blocks: 31.56.141.0/24 maxlen: 24
31.57.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 05:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:15:3b:6c:cb:5e:9e:ef:8a:92:9b:a4:2f:31:f5:44:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 21 15:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3ac3f87daca30fe4f983753f747b2fdb4300ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:75:b5:81:e7:d4:d9:c4:20:6f:3e:41:27:
0d:46:76:7b:c5:17:96:ca:9c:8e:ea:7f:81:26:36:
a3:aa:03:da:a7:e3:23:73:33:37:63:81:ca:42:71:
83:b6:d4:61:eb:a7:39:ab:12:22:70:5c:3d:a3:73:
4c:6a:47:20:be:d3:ce:9f:b3:cb:55:26:df:85:83:
c2:44:6c:a2:63:a9:69:21:dc:1b:cf:06:f5:6d:82:
25:dc:c3:09:49:f5:9e:e3:33:f3:30:39:2b:af:f3:
c3:d1:94:66:e9:1b:8f:10:ff:51:a3:3f:ee:ac:cc:
82:d5:af:42:de:81:63:20:3c:b6:8b:11:04:16:b7:
50:e2:ed:d4:f5:6f:d4:c4:02:34:61:6f:77:0c:55:
11:81:34:dd:ae:ea:f2:a2:54:8f:f8:32:fc:43:e8:
40:f5:26:c7:17:1d:37:da:2b:92:0d:7d:bb:55:f9:
24:35:5f:54:df:f8:ba:14:81:cf:83:3d:6e:12:13:
d7:35:0c:ab:3c:e2:ff:78:cc:a5:00:2a:1b:35:23:
69:17:5f:27:8a:92:1f:40:dd:24:53:81:aa:48:34:
bd:e4:4b:99:94:cf:01:c0:02:23:26:b5:0f:a9:16:
0f:cc:10:ee:22:41:f5:29:06:99:60:5b:19:49:3a:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:3F:87:DA:CA:30:FE:4F:98:37:53:F7:47:B2:FD:B4:30:0E:D3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o6w_h9rKMP5PmDdT90ey_bQwDtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.141.0/24
31.57.155.0/24
Signature Algorithm: sha256WithRSAEncryption
af:01:99:51:75:f2:24:cb:37:33:cf:05:90:a8:ab:90:c7:ff:
4a:f4:81:c6:77:84:e6:76:ee:f8:9b:91:48:ff:01:67:30:82:
91:bf:62:f6:73:6a:13:53:19:2d:55:02:2b:d8:21:81:fb:4d:
68:ea:b8:72:08:a1:7a:55:50:44:d5:96:2c:37:d3:ab:f5:4d:
68:25:88:af:65:e0:57:eb:7d:34:86:63:c0:42:5a:f4:83:49:
f4:75:98:e0:7b:7a:30:48:b3:e0:bd:1f:58:38:92:36:ea:0e:
a9:79:80:71:99:e7:9b:d0:f8:92:4b:d4:8c:54:fe:9c:b2:09:
50:16:9a:1e:0d:db:f8:d1:b8:b4:29:5c:86:16:7d:ee:7f:9c:
d2:77:8e:b4:08:9b:7b:84:92:32:78:0b:2d:bc:89:fa:db:52:
9c:f9:7c:97:8a:24:3d:f4:35:e0:ac:f5:86:20:81:e6:17:d4:
85:17:f9:3c:bb:de:b3:72:a7:81:30:87:28:4c:a1:1b:29:16:
99:65:c5:58:e9:07:36:2d:a8:42:ca:a0:32:6e:82:90:be:f0:
f0:72:49:b2:83:df:83:4d:ae:08:18:68:4d:e2:33:6a:19:1c:
d9:70:79:70:d5:ca:2e:e6:7b:98:b0:7e:49:3d:23:8c:38:80:
77:20:07:e6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIVO2zLXp7vipKbpC8x9UReMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTIxMTUzNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2FjM2Y4N2RhY2EzMGZlNGY5ODM3NTNmNzQ3YjJmZGI0MzAwZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUh1tYHn1NnEIG8+QScNRnZ7xReW
ypyO6n+BJjajqgPap+MjczM3Y4HKQnGDttRh66c5qxIicFw9o3NMakcgvtPOn7PL
VSbfhYPCRGyiY6lpIdwbzwb1bYIl3MMJSfWe4zPzMDkrr/PD0ZRm6RuPEP9Roz/u
rMyC1a9C3oFjIDy2ixEEFrdQ4u3U9W/UxAI0YW93DFURgTTdruryolSP+DL8Q+hA
9SbHFx032iuSDX27VfkkNV9U3/i6FIHPgz1uEhPXNQyrPOL/eMylACobNSNpF18n
ipIfQN0kU4GqSDS95EuZlM8BwAIjJrUPqRYPzBDuIkH1KQaZYFsZSTphuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKOsP4fayjD+T5g3U/dHsv20MA7TMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbzZ3X2g5cktNUDVQbURkVDkwZXlfYlF3RHRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHziNAwQA
HzmbMA0GCSqGSIb3DQEBCwUAA4IBAQCvAZlRdfIkyzczzwWQqKuQx/9K9IHGd4Tm
du74m5FI/wFnMIKRv2L2c2oTUxktVQIr2CGB+01o6rhyCKF6VVBE1ZYsN9Or9U1o
JYivZeBX6300hmPAQlr0g0n0dZjge3owSLPgvR9YOJI26g6peYBxmeeb0PiSS9SM
VP6csglQFpoeDdv40bi0KVyGFn3uf5zSd460CJt7hJIyeAstvIn621Kc+XyXiiQ9
9DXgrPWGIIHmF9SFF/k8u96zcqeBMIcoTKEbKRaZZcVY6Qc2LahCyqAyboKQvvDw
ckmyg9+DTa4IGGhN4jNqGRzZcHlw1cou5nuYsH5JPSOMOIB3IAfm
-----END CERTIFICATE-----
Generated at Mon Sep 23 06:26:21 2024 by rpki-client on console-fra.rpki-client.org