Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oNBzQH2D6KXtXpiv-fzEFMVPl1Q.roa
File: oNBzQH2D6KXtXpiv-fzEFMVPl1Q.roa (raw, json)
Hash identifier: ajryLklJ3gufRfex4rIB7tRff31rQecc6w1pzOP2c1w=
Subject key identifier: A0:D0:73:40:7D:83:E8:A5:ED:5E:98:AF:F9:FC:C4:14:C5:4F:97:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192570662CC4F7E7A59194D254223E487BB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oNBzQH2D6KXtXpiv-fzEFMVPl1Q.roa
Signing time: Fri 04 Oct 2024 10:14:49 +0000
ROA not before: Fri 04 Oct 2024 10:14:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.16.0/22 maxlen: 24
31.57.20.0/22 maxlen: 22
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.58.255.0/24 maxlen: 24
217.60.0.0/18 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 11:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:06:62:cc:4f:7e:7a:59:19:4d:25:42:23:e4:87:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 4 10:14:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0d073407d83e8a5ed5e98aff9fcc414c54f9754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:0a:ba:58:57:56:6d:9b:49:52:ab:16:7b:
77:2d:ed:c8:69:81:a9:47:a2:60:b6:29:22:ea:7b:
e2:35:30:5a:70:30:97:6b:ed:a0:f5:6a:a7:89:45:
d7:29:e2:2b:9b:80:58:fa:97:1b:44:c8:3b:4a:ea:
31:04:67:4f:04:50:f6:4f:2d:1a:9f:4d:e8:0a:26:
c4:8e:b9:01:5d:90:4e:b0:1f:e5:0f:45:6c:b2:d3:
30:30:72:15:8b:70:f8:95:d7:26:00:81:8d:57:f9:
a0:b3:52:d9:20:42:c9:83:e0:aa:fa:4e:a2:72:51:
3f:79:67:36:57:36:d9:bc:ea:e4:fd:b7:35:9d:7c:
86:c0:21:50:6c:a7:95:02:9a:82:ff:5a:8c:97:86:
7c:b2:a0:3f:04:ab:59:b9:3a:f6:74:84:f8:10:f4:
4a:af:98:6a:25:01:b6:6d:6d:14:b3:4a:d7:8d:8d:
3c:48:29:03:33:6b:d8:43:8e:3a:f9:3a:13:d9:80:
9c:14:1a:e4:96:21:d4:e2:ec:80:84:60:40:05:ba:
5e:cf:ce:fd:f3:5f:48:35:67:1e:6f:cf:b1:ac:a3:
92:3d:ed:0d:76:dc:ab:4c:5d:15:14:6b:43:58:71:
19:ed:d7:0a:67:31:32:72:c2:b8:53:d1:94:fe:4f:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D0:73:40:7D:83:E8:A5:ED:5E:98:AF:F9:FC:C4:14:C5:4F:97:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oNBzQH2D6KXtXpiv-fzEFMVPl1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.16.0/20
31.57.48.0/20
31.58.255.0/24
217.60.0.0/18
Signature Algorithm: sha256WithRSAEncryption
98:75:b5:90:33:55:49:f0:07:42:e8:78:e0:68:29:a3:b1:d8:
45:47:ea:18:26:3b:c5:ed:d0:05:a5:2b:8f:81:66:b9:4c:65:
8b:7f:8d:b8:34:ac:24:ad:ec:2c:ae:ff:12:d4:12:df:9a:16:
5e:de:b0:4f:41:88:a2:db:e7:62:24:15:9a:86:bb:88:cf:8c:
04:54:7d:b2:8e:dc:1e:94:d0:91:1f:59:b8:2c:ca:2b:91:d0:
4a:5b:a9:04:d9:4d:34:de:de:40:17:37:bc:39:fd:4b:8e:b6:
e4:f2:ac:d7:c6:d7:9e:d2:a6:1c:e3:10:b6:66:12:15:53:48:
41:8d:cd:d2:83:48:2a:40:6b:54:e8:c4:dd:fd:cc:f1:c1:c0:
ff:75:3c:46:21:a3:5e:05:f4:6a:f2:2d:79:c5:f3:22:f2:d8:
7b:56:a9:17:ee:de:b3:57:3f:79:fc:80:86:98:61:b0:39:bb:
97:a4:cb:87:fe:c7:bf:70:38:c6:f4:e8:cd:36:12:cd:46:38:
b8:b9:8f:b6:84:e4:57:2a:f4:67:3c:74:a2:a8:a2:ba:88:26:
85:f3:ca:2c:43:f6:d2:e8:95:7a:29:7a:f6:1d:59:8e:fd:42:
81:90:1e:cb:dd:36:d7:86:b5:e6:77:6c:cd:60:80:ff:83:72:
33:99:00:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 16:36:55 2024 by rpki-client on console-fra.rpki-client.org