Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pnr4R2n3pgxL5LydWrmr33-tqbI.roa
File: pnr4R2n3pgxL5LydWrmr33-tqbI.roa (raw, json)
Hash identifier: eg75TTvatzT9JtKG1Eijwwl/NWQ4VOG4B5blderLcs0=
Subject key identifier: A6:7A:F8:47:69:F7:A6:0C:4B:E4:BC:9D:5A:B9:AB:DF:7F:AD:A9:B2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019252A13291D30D0CF156587E880DA5B518
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pnr4R2n3pgxL5LydWrmr33-tqbI.roa
Signing time: Thu 03 Oct 2024 13:45:48 +0000
ROA not before: Thu 03 Oct 2024 13:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.58.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 19:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:a1:32:91:d3:0d:0c:f1:56:58:7e:88:0d:a5:b5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 3 13:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a67af84769f7a60c4be4bc9d5ab9abdf7fada9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:99:44:cb:6b:eb:8a:39:46:c4:28:33:5f:
e2:33:a4:cd:06:ce:0a:b3:23:e5:0e:6b:7b:bc:aa:
92:42:18:32:d6:88:05:e9:ea:5e:75:0a:e4:49:f3:
97:9b:aa:b1:28:2c:3a:f2:ee:b2:a4:b8:69:13:88:
0e:02:2e:fe:2d:5a:73:51:3d:50:28:c5:32:62:32:
9c:d9:ee:22:66:9a:f8:f4:3e:d5:37:c5:01:09:07:
23:78:c6:5b:ae:00:2c:97:c1:af:7c:72:f5:00:ac:
b9:ff:33:21:81:fb:b2:e7:61:44:ee:ab:d7:c3:d9:
ca:91:a6:30:a2:c1:5a:37:04:00:4e:8c:f8:78:4d:
15:e8:24:6a:0a:3b:60:55:a4:38:7f:56:8f:48:39:
1a:18:83:b4:7a:04:42:15:cf:38:65:0d:d8:e5:cc:
c6:4c:7d:96:9b:45:0f:c7:92:f5:5a:76:cb:0c:09:
59:a2:e0:5f:3b:05:5d:7a:15:70:c8:8b:63:df:e3:
3d:1d:27:87:25:32:e1:95:82:a9:0f:db:05:9e:0e:
e6:c7:a9:b9:32:4f:fd:7f:37:1b:62:68:ba:55:ea:
a9:ad:43:61:e1:16:42:e4:fc:df:24:b9:0f:90:7f:
8a:35:5e:4c:ef:4c:aa:49:27:3d:bd:e8:f1:5a:14:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7A:F8:47:69:F7:A6:0C:4B:E4:BC:9D:5A:B9:AB:DF:7F:AD:A9:B2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pnr4R2n3pgxL5LydWrmr33-tqbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.58.255.0/24
Signature Algorithm: sha256WithRSAEncryption
92:db:4b:05:d1:bc:44:a3:16:06:3f:1b:72:79:fe:fa:14:32:
80:f3:dc:63:bb:13:d7:1a:02:29:59:9c:5c:d9:a0:6a:de:df:
70:83:f1:ad:66:56:50:f3:3f:e2:e7:af:01:a6:66:cf:d9:c7:
69:d8:41:d3:f5:09:22:82:d1:39:a3:cb:f2:0f:34:f4:24:0d:
52:34:7d:2a:e9:8f:57:07:17:41:dc:ec:29:9c:31:56:1c:78:
b2:25:4e:f6:43:3b:56:b1:ae:9e:17:28:98:a7:22:9e:7f:92:
8b:7e:4b:60:49:78:f4:48:8b:38:d8:1a:21:f1:8e:26:20:47:
c1:3c:ef:93:43:32:e9:9c:4c:c6:51:96:67:bd:47:0d:0f:a9:
a5:4b:24:71:20:ef:f0:ce:f0:50:3c:51:58:fa:b1:c1:4e:13:
b7:e3:66:ad:69:a7:16:44:cc:c9:2a:6b:60:0f:73:60:30:44:
7b:fd:b4:0e:60:0f:c3:86:56:21:b2:d9:e6:38:e1:68:79:a3:
2d:cb:c3:c6:2f:73:ad:8c:ac:c7:aa:f7:4b:90:24:20:1c:bd:
ec:20:1f:90:ac:c7:4a:18:55:c7:b8:33:4b:d7:ad:d1:7f:02:
75:b5:25:84:0b:62:09:1a:30:8d:a8:88:fc:3d:53:b4:07:ba:
1c:e5:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 21:58:07 2024 by rpki-client on console-fra.rpki-client.org