Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/odenMboAxiSxNdxeN15Uvpca_iU.roa
File: odenMboAxiSxNdxeN15Uvpca_iU.roa (raw, json)
Hash identifier: qXhtX7Bu9uvT0S0R3V6/z+WP2CN1pZNIzboy8LSjoX0=
Subject key identifier: A1:D7:A7:31:BA:00:C6:24:B1:35:DC:5E:37:5E:54:BE:97:1A:FE:25
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01932469709DDAB37C9D1176CB4E6C21F46A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/odenMboAxiSxNdxeN15Uvpca_iU.roa
Signing time: Wed 13 Nov 2024 07:25:10 +0000
ROA not before: Wed 13 Nov 2024 07:25:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.58.208.0/24 maxlen: 24
31.58.209.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 07:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:69:70:9d:da:b3:7c:9d:11:76:cb:4e:6c:21:f4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 13 07:25:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1d7a731ba00c624b135dc5e375e54be971afe25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:aa:bb:ea:7a:7e:71:50:23:99:3e:f0:87:
df:73:d1:10:c4:11:3c:e5:ff:ca:e9:28:de:79:dc:
56:7e:f1:0e:6a:93:2e:e3:21:fb:da:6b:57:e2:aa:
cc:bd:02:25:39:f4:d5:07:91:bd:cf:0c:9f:39:d3:
a5:dd:33:5b:b6:f0:4c:f4:45:55:2e:41:0b:0e:06:
34:b7:4e:a8:8a:d3:c8:50:28:4e:7d:5d:5f:d2:78:
73:d7:ce:5b:e3:1e:22:04:2d:56:cb:d6:64:bc:dc:
2e:b1:75:33:88:ba:d3:2d:1e:77:fb:74:08:58:a0:
d4:b0:f1:a3:c5:48:f0:88:0e:e5:82:5d:14:c5:ed:
a1:6e:39:b4:2e:94:85:ff:fb:bd:3a:82:00:31:01:
b2:60:ae:90:2e:89:95:73:4b:62:e1:ed:01:fc:7b:
90:f0:0d:98:eb:53:b2:3b:98:73:78:aa:17:db:9d:
34:cf:38:b1:61:70:94:57:fe:25:5e:75:4f:66:b4:
d7:ad:e2:8b:bf:57:16:d0:15:f1:2c:5c:16:6f:11:
7b:75:38:28:d0:f8:59:ab:7e:4d:3b:84:de:59:5f:
1f:77:9d:51:90:de:14:3e:e0:e1:81:f3:2b:58:b2:
40:df:ae:9b:94:3b:72:4a:58:fe:0b:68:40:4a:a9:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D7:A7:31:BA:00:C6:24:B1:35:DC:5E:37:5E:54:BE:97:1A:FE:25
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/odenMboAxiSxNdxeN15Uvpca_iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
31.58.208.0/23
31.59.136.0-31.59.175.255
Signature Algorithm: sha256WithRSAEncryption
86:35:bf:91:66:77:55:77:f0:5b:f9:26:6d:00:51:ee:42:ad:
33:d1:a3:73:b2:63:22:f3:62:20:96:5b:ab:a0:1b:eb:97:58:
f7:1f:46:39:c8:94:0e:bc:3f:94:60:69:3a:5b:9c:93:7f:85:
c4:9b:22:22:0e:23:c9:28:bb:92:46:16:06:ab:d0:17:40:ec:
63:c4:e6:e3:14:0c:0a:30:a3:1e:82:f2:b8:aa:1f:e9:07:44:
79:91:85:c5:78:f1:af:3b:f7:26:4f:d3:76:86:09:e4:bb:0b:
44:ca:8a:02:5f:12:e6:48:97:27:4f:dc:a7:68:77:12:9e:8d:
f6:89:7b:68:62:c4:e9:33:22:ad:40:c7:fe:3d:10:67:43:be:
00:4a:d8:fe:70:4f:3f:6a:10:56:91:3b:8d:84:f5:6d:06:16:
88:b1:69:c0:77:b2:40:b5:bd:47:c0:c2:1e:56:1d:60:5f:45:
7f:3f:89:da:82:71:3b:21:1f:d5:8c:1b:aa:e6:d2:c8:be:f0:
2f:19:b1:9c:01:83:ec:be:72:fd:7b:bd:72:36:23:c3:ef:c1:
a9:8b:7c:3d:1f:d7:be:16:75:cf:ba:68:8c:9e:f3:28:17:b8:
d0:1b:8a:6e:a6:07:dc:0a:86:11:c8:fd:46:91:13:1b:5b:7b:
66:ef:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 08:42:07 2024 by rpki-client on console-ams.rpki-client.org