Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rg6w3teuQntssTx-GXZBF-c3cOA.roa
File: rg6w3teuQntssTx-GXZBF-c3cOA.roa (raw, json)
Hash identifier: dUhm/Uv6gIWtTAIsxg486DHpQTbIMMV6l9up3gq6dNE=
Subject key identifier: AE:0E:B0:DE:D7:AE:42:7B:6C:B1:3C:7E:19:76:41:17:E7:37:70:E0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191211FE2E311287648027A039F6752A848
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rg6w3teuQntssTx-GXZBF-c3cOA.roa
Signing time: Mon 05 Aug 2024 06:00:23 +0000
ROA not before: Mon 05 Aug 2024 06:00:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200465
IP address blocks: 31.56.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 11:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:1f:e2:e3:11:28:76:48:02:7a:03:9f:67:52:a8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 5 06:00:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae0eb0ded7ae427b6cb13c7e19764117e73770e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:62:7d:1d:c1:a2:ee:9a:f6:f3:b8:50:20:
29:c6:18:1c:50:23:ef:bb:aa:2e:03:0c:47:1f:5a:
92:3b:d6:85:05:56:60:c7:f4:4b:b5:ac:13:34:79:
25:a4:f3:2f:ed:92:b5:a4:7c:6c:96:31:74:12:53:
74:5a:b2:83:f2:b2:63:e8:81:b6:05:ea:8b:7a:a5:
87:b7:e4:9b:9a:a5:72:eb:a6:14:db:8d:21:df:e6:
d4:f6:6e:3f:40:6b:02:41:6b:65:1f:49:89:76:7b:
26:cc:e8:7e:32:00:44:2d:4a:24:d2:9f:ae:65:56:
56:67:f5:ca:72:15:f8:96:0c:a3:3a:8c:a0:13:0e:
7d:3e:dc:36:68:96:87:5b:9b:a4:48:e7:01:3d:dd:
b3:f3:b3:c6:c4:8a:a7:e7:eb:2f:42:84:9d:95:a6:
42:c4:6c:a2:22:5c:d4:32:d1:99:ef:88:7f:01:23:
ab:29:bc:29:48:e9:bd:d8:c0:13:b9:8d:4b:51:36:
b2:87:75:53:a2:1b:9b:c0:55:2a:3b:1a:d9:b5:3a:
c5:e1:87:39:99:cf:61:37:8c:5c:ee:f2:63:37:2d:
6a:72:83:b8:7d:68:d6:80:c8:f9:63:d5:20:fe:d3:
98:0f:81:23:1a:98:e3:2c:77:65:4b:84:24:b0:87:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0E:B0:DE:D7:AE:42:7B:6C:B1:3C:7E:19:76:41:17:E7:37:70:E0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rg6w3teuQntssTx-GXZBF-c3cOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c7:6d:3a:85:de:9b:46:c7:f6:ec:7a:d6:37:01:f8:a2:37:
52:e0:cf:f7:69:9d:68:24:ed:84:51:47:27:fe:74:b5:bd:22:
c8:19:de:2e:39:45:50:b9:b3:16:2b:24:92:af:92:0c:73:2d:
39:a1:7a:af:b5:fb:fe:fd:b9:15:d2:70:f5:27:76:be:a8:5b:
fe:c6:d7:2c:7d:36:e1:e9:59:bd:3e:50:84:9b:2d:6e:7d:b9:
2b:05:43:cb:30:dc:e6:ab:3b:0f:c1:94:b5:a4:fc:8f:3b:e2:
97:e8:e8:e5:65:21:15:67:7f:55:cc:ad:47:dd:c2:4e:b9:80:
22:f3:f4:76:03:91:07:85:13:4e:ea:af:c8:1a:ec:bb:7d:14:
b0:46:22:50:3f:68:b7:fe:44:cb:02:c4:f0:74:93:d4:70:99:
f6:f2:e9:2d:5c:67:c8:04:1b:fe:2f:c4:bd:39:7a:c1:3d:a0:
02:20:ac:fa:1c:f8:4f:9f:69:02:d5:9b:14:ff:6d:59:2c:a8:
31:f6:b4:a9:4b:29:c0:41:a7:a3:40:45:de:4d:64:44:6a:d1:
5b:06:09:16:51:b0:80:91:9b:36:1b:09:90:7d:e2:ce:9c:89:
6b:28:39:e3:9e:8f:7f:12:8a:14:35:12:01:84:a9:d0:75:c8:
cb:84:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 14:11:18 2024 by rpki-client on console-fra.rpki-client.org