Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/r_4myBT-lPZg1V-aYN_0VEetVj0.roa
File: r_4myBT-lPZg1V-aYN_0VEetVj0.roa (raw, json)
Hash identifier: gEeknR4d5RlD+zBMjw3rLB6dIxm3nlu543X+KqDbSRE=
Subject key identifier: AF:FE:26:C8:14:FE:94:F6:60:D5:5F:9A:60:DF:F4:54:47:AD:56:3D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019189213DACBC3038D666BC5BBC2C96ADF2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/r_4myBT-lPZg1V-aYN_0VEetVj0.roa
Signing time: Sun 25 Aug 2024 10:42:22 +0000
ROA not before: Sun 25 Aug 2024 10:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 04:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:89:21:3d:ac:bc:30:38:d6:66:bc:5b:bc:2c:96:ad:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 25 10:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=affe26c814fe94f660d55f9a60dff45447ad563d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:af:97:78:4a:89:aa:cc:c8:12:fd:0c:70:
75:a2:97:53:c1:bc:4a:7c:72:5f:d2:76:2a:b6:15:
57:5e:6d:c5:61:fa:3a:4d:c7:8a:4c:59:ad:4f:a5:
f2:b9:cf:4a:c9:81:80:a8:a4:d2:d9:98:a3:91:49:
30:27:74:4d:3d:b8:b5:67:c4:43:97:43:22:67:82:
f2:14:68:72:dc:82:f0:aa:21:69:b5:3e:83:dc:6d:
69:09:cf:42:e8:22:8a:94:1b:94:12:32:67:4f:1e:
07:66:a6:be:72:fb:a2:5b:48:61:36:5b:b6:b5:5a:
5a:2b:f6:44:75:ce:bf:8c:ec:c7:75:04:bc:91:a1:
0f:78:fe:0f:ab:3f:cd:4a:fa:58:6e:88:01:b8:58:
2a:74:9e:c1:f8:52:a5:b2:04:68:c8:18:e3:69:31:
78:49:30:4d:45:39:56:a9:f1:2f:ae:f9:5e:ba:0b:
49:76:5d:72:6a:e7:e8:cd:c2:6c:35:37:8e:be:04:
07:2e:9c:ac:a8:bc:b9:04:0e:8f:15:39:69:82:bf:
0f:1b:50:a1:8f:52:3a:f2:9a:79:20:ab:92:f2:1d:
4d:a9:7e:14:72:2d:b9:0d:2d:49:0b:d4:f5:12:11:
ed:24:4d:e7:a7:5a:0f:f0:01:b9:58:06:08:4e:b4:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FE:26:C8:14:FE:94:F6:60:D5:5F:9A:60:DF:F4:54:47:AD:56:3D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/r_4myBT-lPZg1V-aYN_0VEetVj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0-31.56.2.255
31.56.4.0/23
31.56.89.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:95:2b:e6:c2:cb:17:38:ad:0b:d3:4f:f0:d4:6b:03:50:3b:
69:86:93:fe:d3:bd:0b:24:68:f7:32:c1:3c:7c:33:0c:0b:3b:
c9:49:c6:db:09:fd:c1:d2:a4:fe:02:d9:5f:95:e9:4b:75:a7:
f8:11:ad:37:ea:e0:5b:3f:8e:39:a5:b5:17:fe:b5:0f:94:f0:
74:32:84:84:71:bd:7b:5d:8c:4a:d0:a7:8b:3a:16:12:08:e4:
1a:e1:6c:d1:de:11:52:e2:72:57:e2:39:bc:2b:0c:c5:5a:02:
d2:d0:ad:67:b7:66:17:21:a5:66:34:52:7d:95:55:41:51:b7:
f2:fe:67:0c:43:fe:15:94:63:9e:2c:de:ee:89:46:bf:c9:b1:
62:9e:c9:a0:2f:9a:3c:2f:b7:38:6e:40:4f:4c:18:03:eb:8e:
58:69:28:f2:fd:6b:ff:6f:d2:0c:48:75:26:bf:21:a3:87:bf:
9b:14:7e:cd:c6:fb:ef:05:e1:de:dd:b8:5f:4d:fa:86:65:33:
0f:46:14:ae:7d:9b:de:b9:93:f6:fb:3b:9a:a3:1f:d1:4f:38:
49:c4:b9:3e:96:88:6e:40:52:a8:cb:10:14:cc:8a:97:f0:cf:
2b:c9:ba:9a:c0:05:81:b1:8b:54:cb:34:71:e2:40:24:e2:9e:
7e:d6:ce:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 06:11:48 2024 by rpki-client on console-fra.rpki-client.org