Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q7vVSP2Yv-x4ZRKDc9GyPx4y1xY.roa
File: q7vVSP2Yv-x4ZRKDc9GyPx4y1xY.roa (raw, json)
Hash identifier: oYpf39/z2/O/68WsB2uM9z0FvIvgOieriV4GHfj5UCE=
Subject key identifier: AB:BB:D5:48:FD:98:BF:EC:78:65:12:83:73:D1:B2:3F:1E:32:D7:16
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191B36148CB83801A1302FCD0EFCC348036
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q7vVSP2Yv-x4ZRKDc9GyPx4y1xY.roa
Signing time: Mon 02 Sep 2024 15:36:22 +0000
ROA not before: Mon 02 Sep 2024 15:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.65.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 14:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:61:48:cb:83:80:1a:13:02:fc:d0:ef:cc:34:80:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 2 15:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abbbd548fd98bfec7865128373d1b23f1e32d716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:4c:0d:6c:91:38:7c:e0:1d:a0:d1:6d:54:
ee:08:20:01:5b:06:26:e5:8b:c9:49:0a:ae:5d:35:
37:12:11:d0:91:da:63:da:64:2f:bf:07:71:19:28:
7f:87:c3:f6:22:2a:02:b4:34:24:42:6c:7e:b5:38:
25:bb:ee:49:14:b6:b2:06:e5:38:eb:3e:68:43:67:
50:e2:98:d0:97:e5:f2:c1:06:2b:92:db:ff:96:9a:
76:8f:ea:57:5c:28:3b:2f:6f:a0:36:46:30:5b:b4:
db:30:da:eb:ee:f5:bb:09:82:81:d2:47:88:69:86:
83:cb:e2:63:5f:3b:7b:a8:8a:8a:76:cd:27:89:9e:
59:cf:39:06:68:27:f2:cb:b7:d8:90:74:e0:69:00:
51:00:96:b9:fe:83:dc:a7:c1:40:8f:cf:cd:e7:98:
02:32:ac:1b:87:da:7d:40:24:87:73:66:b8:49:24:
f1:72:90:b3:92:e1:85:f2:98:19:1a:87:2d:27:f8:
c2:a1:79:22:97:41:15:a2:73:a3:7a:ad:a0:68:2e:
b5:a5:89:ef:80:72:a4:3e:18:8c:37:1c:c6:11:a5:
4d:76:ef:54:24:29:57:db:a7:d5:5d:37:cf:be:25:
b3:9f:b6:71:2d:cb:1d:14:4d:1b:57:28:a3:a2:f9:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BB:D5:48:FD:98:BF:EC:78:65:12:83:73:D1:B2:3F:1E:32:D7:16
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q7vVSP2Yv-x4ZRKDc9GyPx4y1xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.65.0/24
31.56.89.0/24
31.56.112.0/21
31.56.126.0/24
Signature Algorithm: sha256WithRSAEncryption
03:65:81:fc:90:de:4d:f5:53:ef:d1:5a:66:f6:92:ea:b5:d8:
07:ea:b5:d9:a6:50:0c:8d:d2:2b:73:c1:51:42:59:b6:c6:5e:
ea:ef:b9:b7:a0:2d:3d:96:98:90:19:5d:c8:45:18:af:62:46:
a2:44:85:97:3e:85:bb:2e:fe:69:9c:ab:96:22:5f:5f:52:aa:
8e:34:19:72:6e:4d:54:29:b3:c7:55:d0:52:22:af:da:20:c2:
52:05:8f:39:ab:1b:c3:f4:8c:66:a3:80:11:a0:f5:45:c0:48:
ec:f5:e9:90:29:4c:c5:95:30:f4:9c:d5:53:5f:8b:94:6e:8b:
60:97:68:60:b1:7a:46:a2:c7:08:75:22:83:ed:f3:2f:a1:e4:
bb:76:be:c0:38:09:82:0d:73:b5:eb:a2:ea:56:53:48:c3:1c:
a4:d6:5b:10:3d:c8:7d:e4:6f:51:a0:61:53:78:a2:c1:af:e3:
e5:16:fa:dc:82:20:6e:16:f1:a0:a9:58:b5:8b:76:7a:45:5f:
78:3e:7b:86:80:07:0d:15:f8:64:a0:05:b6:93:50:71:64:ca:
2f:27:4a:3e:3a:e7:08:20:73:b5:78:df:e6:93:7d:27:07:27:
ca:6d:30:1c:90:61:01:23:87:e6:39:b6:fa:92:90:00:42:66:
ab:7a:db:e0
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZGzYUjLg4AaEwL80O/MNIA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTAyMTUzNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmJiZDU0OGZkOThiZmVjNzg2NTEyODM3M2QxYjIzZjFlMzJkNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH1MDWyROHzgHaDRbVTuCCABWwYm
5YvJSQquXTU3EhHQkdpj2mQvvwdxGSh/h8P2IioCtDQkQmx+tTglu+5JFLayBuU4
6z5oQ2dQ4pjQl+XywQYrktv/lpp2j+pXXCg7L2+gNkYwW7TbMNrr7vW7CYKB0keI
aYaDy+JjXzt7qIqKds0niZ5ZzzkGaCfyy7fYkHTgaQBRAJa5/oPcp8FAj8/N55gC
Mqwbh9p9QCSHc2a4SSTxcpCzkuGF8pgZGoctJ/jCoXkil0EVonOjeq2gaC61pYnv
gHKkPhiMNxzGEaVNdu9UJClX26fVXTfPviWzn7ZxLcsdFE0bVyijovnutQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKu71Uj9mL/seGUSg3PRsj8eMtcWMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvcTd2VlNQMll2LXg0WlJLRGM5R3lQeDR5MXhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBHzgEAwQA
HzhBAwQAHzhZAwQDHzhwAwQAHzh+MA0GCSqGSIb3DQEBCwUAA4IBAQADZYH8kN5N
9VPv0Vpm9pLqtdgH6rXZplAMjdIrc8FRQlm2xl7q77m3oC09lpiQGV3IRRivYkai
RIWXPoW7Lv5pnKuWIl9fUqqONBlybk1UKbPHVdBSIq/aIMJSBY85qxvD9Ixmo4AR
oPVFwEjs9emQKUzFlTD0nNVTX4uUbotgl2hgsXpGoscIdSKD7fMvoeS7dr7AOAmC
DXO166LqVlNIwxyk1lsQPch95G9RoGFTeKLBr+PlFvrcgiBuFvGgqVi1i3Z6RV94
PnuGgAcNFfhkoAW2k1BxZMovJ0o+OucIIHO1eN/mk30nByfKbTAckGEBI4fmObb6
kpAAQmaretvg
-----END CERTIFICATE-----
Generated at Tue Sep 3 16:46:29 2024 by rpki-client on console-fra.rpki-client.org