Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rHEczTVUmKeUt7kf3jeAN4M8REo.roa
File: rHEczTVUmKeUt7kf3jeAN4M8REo.roa (raw, json)
Hash identifier: Rszfrebn9iOMicsNbFdWz6huSS22WDGKciFZW0uhUpM=
Subject key identifier: AC:71:1C:CD:35:54:98:A7:94:B7:B9:1F:DE:37:80:37:83:3C:44:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019294855A1BAD3A89055FD9E713985354FA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rHEczTVUmKeUt7kf3jeAN4M8REo.roa
Signing time: Wed 16 Oct 2024 08:50:20 +0000
ROA not before: Wed 16 Oct 2024 08:50:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.86.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 17:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:85:5a:1b:ad:3a:89:05:5f:d9:e7:13:98:53:54:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 16 08:50:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac711ccd355498a794b7b91fde378037833c444a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:a5:a3:38:99:05:89:c0:e7:ca:1e:44:a2:
ef:ac:0c:1d:2b:46:2a:55:96:2d:35:7b:1d:01:be:
07:7e:3c:d7:7d:fe:e8:a4:55:93:81:74:f9:3c:70:
58:5d:03:d9:64:75:c0:2a:30:74:9e:ed:e5:0a:74:
ef:5a:d2:db:eb:19:61:58:d4:d5:34:db:ea:69:35:
a2:a3:f5:df:97:af:7d:82:ad:16:60:7b:04:cb:a5:
10:4e:89:b4:a7:af:99:23:c4:a0:85:00:f2:85:62:
db:8e:01:6d:44:bb:37:05:a4:dc:95:5c:2b:06:20:
e8:1c:f0:cd:da:c5:d4:97:ed:f9:fa:ce:cd:61:52:
9c:a8:4c:e1:fc:9e:86:60:02:f7:8a:88:85:80:83:
dd:23:80:d5:10:05:48:a1:09:77:8d:f0:01:f6:cb:
5a:eb:cf:c1:58:97:42:65:98:08:8f:7a:ec:bb:ab:
34:d1:e8:a5:4e:43:f1:b1:be:d0:38:33:71:12:ab:
3a:65:7a:83:dc:9f:ae:39:0e:e1:9e:56:85:bb:b3:
2e:86:cb:5f:12:62:6c:c3:42:20:79:45:72:df:51:
4f:a6:f7:c2:29:1b:6c:70:60:6a:38:1a:eb:b6:f9:
50:0d:2d:76:2d:97:1f:da:3b:07:6c:af:d7:ce:71:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:71:1C:CD:35:54:98:A7:94:B7:B9:1F:DE:37:80:37:83:3C:44:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rHEczTVUmKeUt7kf3jeAN4M8REo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2f:46:9e:49:13:ef:b1:08:86:34:34:33:9c:99:99:ba:de:
e6:93:74:8e:d8:89:9c:59:77:86:25:d5:87:f7:e3:97:0a:fe:
02:31:b5:63:4c:4a:2c:a3:f6:de:8c:1e:c3:13:46:42:61:3a:
09:53:39:28:dd:dd:49:75:7d:25:4c:d6:ca:ee:73:d2:6b:e1:
75:6a:9c:25:1f:3e:67:e6:78:8b:f5:df:47:59:2f:92:ae:2b:
04:98:ea:9b:75:ac:fe:08:f5:a9:9d:40:19:1f:1f:ba:6a:91:
f2:6c:fb:03:d5:14:54:99:48:66:22:14:09:a6:ac:6f:c2:10:
f8:46:c1:0c:f0:31:0e:f9:1f:cf:27:b9:4a:3c:39:d4:ec:ae:
52:61:d1:0e:10:cc:12:fb:31:35:f0:fd:b8:ad:30:9f:35:c5:
c1:df:5b:ec:40:74:04:c5:74:e4:8d:45:f5:3e:56:15:8e:52:
50:c3:1d:c2:3c:4d:0b:25:52:fe:c7:01:1e:cd:ac:0b:a6:29:
5a:74:e8:58:fd:02:50:5a:28:11:03:f9:95:b6:72:fa:4c:27:
1f:f4:f6:97:b8:9b:90:24:7f:fa:e3:fb:13:1d:4a:f7:ac:0c:
c8:2c:24:28:25:2e:aa:9b:3b:b5:c2:50:da:b0:42:2c:7a:c4:
39:2e:e7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 19:23:57 2024 by rpki-client on console-fra.rpki-client.org