Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p51FBeGNUIn8oCJY6ZGHwqS1Aqc.roa
File: p51FBeGNUIn8oCJY6ZGHwqS1Aqc.roa (raw, json)
Hash identifier: ZatTmU7FJMRDjVthY4FNz7PWbZC6YarKX8OtTWzdtGc=
Subject key identifier: A7:9D:45:05:E1:8D:50:89:FC:A0:22:58:E9:91:87:C2:A4:B5:02:A7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01930A781764254576A0B7242EF538DDBC7C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p51FBeGNUIn8oCJY6ZGHwqS1Aqc.roa
Signing time: Fri 08 Nov 2024 06:31:02 +0000
ROA not before: Fri 08 Nov 2024 06:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.39.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.176.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 14:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0a:78:17:64:25:45:76:a0:b7:24:2e:f5:38:dd:bc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 8 06:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a79d4505e18d5089fca02258e99187c2a4b502a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:15:68:c5:f3:f5:df:ea:65:8c:25:bc:2e:
66:72:82:2e:27:18:8f:8a:3d:e1:8b:1c:b4:20:e3:
ca:0f:61:7e:aa:43:ec:88:df:4f:c1:25:4b:67:9b:
14:11:6d:be:8f:c4:35:bf:ec:bc:6e:d4:38:99:1d:
aa:a4:15:31:70:8b:6b:e2:1e:5c:81:02:69:7b:d1:
d7:f7:88:d3:be:5f:59:55:7f:bf:97:cc:b6:c8:af:
57:0d:aa:59:2e:45:9d:8a:7f:b7:19:bf:d8:25:1a:
fa:d8:5e:01:24:76:8a:4e:6b:7c:af:9b:d3:8f:43:
4e:2b:6a:0f:4a:4f:cb:64:04:bb:72:49:0f:1d:9a:
4d:3d:ea:92:3d:a7:9c:67:4a:64:cb:28:91:90:ad:
f8:59:b8:2a:7d:2f:6d:15:de:2c:b1:5a:29:74:94:
67:ac:f7:de:3a:cd:0c:dc:ef:ed:66:f0:07:b5:f4:
9d:f0:1c:ac:53:93:c6:b2:b9:20:65:69:55:aa:92:
da:64:0d:9a:7b:60:bc:61:d8:a1:9d:5d:75:1c:5f:
c0:23:fe:f0:81:82:01:ff:7b:21:e2:f9:29:a6:7b:
32:96:ef:a2:94:12:32:0e:c4:74:7a:28:00:4a:6d:
ab:04:db:32:bf:c5:e9:fa:1d:52:a9:c0:9e:cd:15:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9D:45:05:E1:8D:50:89:FC:A0:22:58:E9:91:87:C2:A4:B5:02:A7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p51FBeGNUIn8oCJY6ZGHwqS1Aqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.39.0/24
31.56.42.0/23
31.56.66.0/24
31.56.85.0/24
31.56.89.0/24
31.56.120.0/22
31.56.127.0/24
31.57.132.0/23
31.57.176.0/21
31.57.192.0/22
31.57.207.0/24
31.57.232.0/22
31.57.244.0/22
Signature Algorithm: sha256WithRSAEncryption
10:d0:9d:ca:b0:92:f8:0e:dc:2c:e1:c1:d2:02:0a:62:93:c2:
63:47:3c:3a:99:ea:6c:09:3a:43:48:6c:ea:b9:3b:44:35:a5:
e5:24:a4:7f:49:10:19:e8:4b:9e:bb:3c:e9:fa:08:e7:9a:9e:
1d:fb:bd:48:fe:66:2a:76:91:79:99:f0:a4:09:57:ca:d2:ee:
9f:22:e1:41:55:d2:f1:f5:0a:5b:20:b3:f2:8f:c9:0d:d0:f2:
a3:cd:11:eb:31:f2:67:c9:e2:f7:b5:77:27:c4:f5:5e:f7:ae:
18:95:5a:69:d3:8a:b6:83:cf:be:b0:c1:6f:da:2d:31:8f:9b:
a0:15:5e:36:69:4d:f8:69:1f:9e:28:43:62:28:f8:82:73:2d:
dc:a7:ed:be:41:8f:a7:44:e5:48:d5:e1:1f:30:0f:52:ea:15:
1f:12:cd:f9:5d:50:4f:c8:3e:42:88:d9:56:54:31:76:b9:b3:
de:7f:33:33:4b:a1:5e:77:d0:0e:9c:6e:56:e6:fa:03:5e:c4:
8b:19:ac:2f:ce:f5:de:d1:3b:15:cd:7d:e6:fb:06:1f:cc:ce:
33:f4:2e:9a:cc:d0:54:c5:3b:0b:35:87:8f:72:aa:1d:3c:ab:
34:64:fe:3b:9a:71:6b:9b:09:ad:a6:55:a9:6c:7f:aa:4b:11:
12:40:8b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 18:02:44 2024 by rpki-client on console-fra.rpki-client.org