Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rsgN_xdyy_GmlV71PMnTldswvy8.roa
File: rsgN_xdyy_GmlV71PMnTldswvy8.roa (raw, json)
Hash identifier: R0R7nROnDGhTXrizOTxuboez4chUyn5gpAFDMEBdmSM=
Subject key identifier: AE:C8:0D:FF:17:72:CB:F1:A6:95:5E:F5:3C:C9:D3:95:DB:30:BF:2F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192A3B4A2C2E970443E4FB3D222ADA86D3E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rsgN_xdyy_GmlV71PMnTldswvy8.roa
Signing time: Sat 19 Oct 2024 07:36:17 +0000
ROA not before: Sat 19 Oct 2024 07:36:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.120.0/22 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.152.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Oct 2024 15:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a3:b4:a2:c2:e9:70:44:3e:4f:b3:d2:22:ad:a8:6d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 19 07:36:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aec80dff1772cbf1a6955ef53cc9d395db30bf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:2f:58:f0:7e:d5:76:e4:50:3a:e0:ef:12:
2f:03:2a:30:f7:53:a2:81:81:86:f4:89:94:7b:24:
c1:0d:b0:a6:a4:d8:45:f2:cd:28:3c:c5:c5:8c:99:
4d:de:2e:81:b4:c1:65:e0:19:03:6f:da:18:0b:61:
73:19:33:78:2c:00:05:57:23:be:91:29:f4:71:26:
d1:31:d2:a9:19:c9:a1:31:8f:3d:5e:e4:e2:a1:fe:
ef:c2:b6:2a:62:2f:d8:1b:ac:c1:a9:da:2b:c6:6e:
4e:57:c7:c3:5c:a9:1d:00:78:3f:67:58:24:5b:d2:
c5:1c:fb:a2:67:5c:d5:83:84:34:ba:9e:f2:83:9c:
fd:37:b4:aa:ae:4d:3d:8c:91:8c:17:a7:42:f8:92:
07:c9:0c:c7:6b:02:bb:f5:68:36:1d:a2:48:a8:24:
40:f9:58:61:e4:d2:dd:3c:15:07:f5:e2:bb:36:b0:
2d:78:e9:7c:f8:d6:05:d3:cd:92:bc:50:dd:3c:18:
99:4a:c8:49:ad:e8:e6:7b:16:55:7b:18:47:4a:ac:
a2:e9:91:81:b8:66:6c:d3:34:fc:75:f8:54:57:ce:
f9:06:a8:bf:62:14:56:73:73:d7:d0:6f:98:f1:4f:
28:75:a2:74:45:8c:89:d2:f0:dc:05:37:22:fb:af:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C8:0D:FF:17:72:CB:F1:A6:95:5E:F5:3C:C9:D3:95:DB:30:BF:2F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rsgN_xdyy_GmlV71PMnTldswvy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.42.0/23
31.56.66.0/24
31.56.85.0/24
31.56.89.0/24
31.56.112.0-31.56.123.255
31.57.0.0-31.57.9.255
31.57.132.0/23
31.57.152.0/24
31.57.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:ad:90:83:55:44:38:5f:9e:fe:0a:b9:d8:eb:8b:70:a0:4d:
c7:df:07:41:6b:83:74:f8:7e:ee:0c:1a:2e:82:fa:bc:69:3e:
62:a0:5e:f6:9e:75:9a:a7:75:97:bf:c8:1e:a7:63:45:7b:ba:
29:94:db:d4:c2:51:b1:2f:46:25:b2:e2:96:93:17:75:d9:9e:
51:0f:57:7e:26:3e:db:52:7f:02:70:53:f2:75:2b:64:63:35:
93:7d:27:df:98:ce:13:6c:26:ee:08:4b:9f:cf:96:2d:fb:3d:
1e:4d:e5:9b:0c:c8:9c:5a:0b:56:c0:b2:d2:80:2d:10:d5:d8:
be:14:52:b3:2c:f9:c1:40:28:40:04:76:f9:f3:6d:2f:ef:a5:
70:a7:4f:39:44:6d:3f:c7:02:fa:b7:93:ba:b4:96:73:23:1f:
80:67:18:c5:a0:34:e7:2e:82:49:16:45:b8:93:62:b4:9a:b6:
1b:c8:0f:46:5f:4a:90:7c:8f:cc:b1:5c:e1:6c:84:af:5b:ae:
34:4e:37:53:66:c3:64:71:83:c0:c2:88:e1:51:99:de:f7:fd:
cb:c9:71:b2:2c:46:fa:24:5a:98:8a:ef:c0:a9:71:45:fe:9f:
63:f2:42:42:3f:7e:69:cd:5b:b2:13:69:11:5b:46:53:db:fe:
c4:3b:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 18:11:12 2024 by rpki-client on console-ams.rpki-client.org