Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pcEpo9e8sNyNn2_LNFDyWMg9pyU.roa
File: pcEpo9e8sNyNn2_LNFDyWMg9pyU.roa (raw, json)
Hash identifier: /KgasJJs+ZZs9o1KjowR3jOP34Jta+Nv/PTu0MHnm6s=
Subject key identifier: A5:C1:29:A3:D7:BC:B0:DC:8D:9F:6F:CB:34:50:F2:58:C8:3D:A7:25
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192AF38A27EFF5BCBDD10DA749DD0F066D9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pcEpo9e8sNyNn2_LNFDyWMg9pyU.roa
Signing time: Mon 21 Oct 2024 13:16:17 +0000
ROA not before: Mon 21 Oct 2024 13:16:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.120.0/22 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.64.0/21 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.153.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 10:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:38:a2:7e:ff:5b:cb:dd:10:da:74:9d:d0:f0:66:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 21 13:16:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5c129a3d7bcb0dc8d9f6fcb3450f258c83da725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:5f:53:fd:fd:2b:b3:de:d5:21:f8:ed:fc:
91:0d:32:ea:56:55:9e:1c:21:ee:fc:93:ea:a4:79:
a6:ac:8a:0b:b9:23:5b:b0:c4:fb:0c:37:ec:ec:86:
d6:8a:36:2e:55:f8:b1:62:b2:39:e9:98:e5:d8:53:
81:13:e1:f7:1f:3f:dc:98:65:2e:07:3b:d0:7f:ca:
34:8d:43:cb:17:af:4d:50:50:36:2f:12:60:ff:7e:
d7:a8:34:f2:e6:8d:5b:90:c3:25:fd:e4:12:3d:96:
56:c4:76:d6:ad:17:68:b4:97:73:79:e7:2c:16:bd:
6e:5b:53:69:b0:f9:ca:af:7a:c7:03:58:a4:fa:bc:
c4:41:ca:92:5c:ff:67:57:fe:d3:09:a0:61:e1:d6:
f9:d3:85:16:e7:e8:68:ff:26:91:62:3a:0d:e3:ff:
f3:b7:a2:64:6f:f4:c3:d3:24:d2:01:a4:eb:c5:13:
d9:0d:2f:33:58:e7:63:21:38:04:32:03:c8:62:d5:
95:59:2d:9f:23:96:09:e4:aa:14:0b:5b:11:14:c7:
54:1d:71:e7:ad:a9:d3:a8:18:40:d8:52:07:33:df:
bd:eb:0d:cf:2a:a8:23:46:68:87:ef:a7:94:fd:25:
ab:a0:cb:13:47:bd:8f:80:1e:2b:e1:77:c1:72:d1:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:29:A3:D7:BC:B0:DC:8D:9F:6F:CB:34:50:F2:58:C8:3D:A7:25
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pcEpo9e8sNyNn2_LNFDyWMg9pyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.42.0/23
31.56.66.0/24
31.56.85.0/24
31.56.89.0/24
31.56.112.0-31.56.123.255
31.57.0.0-31.57.9.255
31.57.64.0/21
31.57.132.0/23
31.57.153.0/24
31.57.176.0/21
Signature Algorithm: sha256WithRSAEncryption
47:9b:06:83:b3:61:a7:1c:10:84:bf:43:8a:8b:96:32:67:72:
65:1e:d0:9d:d1:a3:bb:9d:b0:5a:13:32:a0:a5:d6:55:f2:b2:
c7:83:09:3a:f4:35:9a:7d:cc:e0:85:13:ab:c3:90:1d:64:58:
2f:1f:c3:ba:da:ed:1c:67:ff:0e:59:3d:c9:7f:7e:ee:bb:a2:
45:29:18:06:2b:fa:a3:d2:dc:6e:16:e1:9e:e8:c4:2e:71:ef:
b8:66:2c:48:5b:d2:4b:d8:ca:6d:9e:0d:ea:7d:b9:a2:d1:48:
83:7c:73:af:32:5f:30:52:5d:0a:b1:75:bb:c4:a8:65:44:0f:
26:7e:fe:1e:07:e2:1c:2f:e5:06:4c:dc:d1:7a:74:7a:36:bb:
96:b3:ba:cb:59:0a:a9:be:98:d4:cc:a3:f6:8f:ba:e8:bf:c8:
df:75:57:b7:c3:45:f0:70:5f:e3:3c:04:40:77:b4:da:31:3a:
e0:4f:c6:9d:64:fd:d2:cd:16:da:ac:6f:fe:61:f3:1e:a3:1d:
f6:62:b0:79:3f:28:23:55:33:ec:c3:d6:4b:35:2d:a0:90:95:
08:f7:b8:29:19:8b:04:56:58:03:20:d0:7a:db:56:e0:dd:60:
0c:cc:5f:c1:f0:33:10:dd:7a:5b:62:07:74:0d:aa:60:46:0e:
6a:73:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 13:52:12 2024 by rpki-client on console-fra.rpki-client.org