Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t9GXo3AKz37Ai_dvvPfKUwnVels.roa
File: t9GXo3AKz37Ai_dvvPfKUwnVels.roa (raw, json)
Hash identifier: G4j8Qdldv9xMomL9k2zoCeyjGXQgSdCXU9T/ChPEfSw=
Subject key identifier: B7:D1:97:A3:70:0A:CF:7E:C0:8B:F7:6F:BC:F7:CA:53:09:D5:7A:5B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019113537FE6EDC9E6A4378A48CE0A348706
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t9GXo3AKz37Ai_dvvPfKUwnVels.roa
Signing time: Fri 02 Aug 2024 13:42:04 +0000
ROA not before: Fri 02 Aug 2024 13:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
31.56.23.0/24 maxlen: 24
31.56.25.0/24 maxlen: 24
31.56.27.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.36.0/24 maxlen: 24
31.56.38.0/24 maxlen: 24
31.56.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 18:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:53:7f:e6:ed:c9:e6:a4:37:8a:48:ce:0a:34:87:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 2 13:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7d197a3700acf7ec08bf76fbcf7ca5309d57a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:cd:6e:75:f0:96:e2:d1:a2:e4:7f:17:05:
b0:68:a7:8a:4c:d2:04:0e:64:64:f3:05:8f:d2:c3:
4a:37:30:71:69:4c:df:f3:0f:f8:08:26:66:9c:f7:
ab:4f:56:c7:42:1f:a3:97:b1:98:8f:55:88:14:9d:
60:d9:d0:8d:62:83:54:c9:50:02:a5:86:65:42:27:
7d:f0:0d:cc:af:15:07:a6:6f:ae:e9:82:7f:bb:5d:
c4:3b:b9:34:ee:fd:e3:16:82:68:ac:fb:6a:4b:7e:
c7:0a:4b:a0:61:4b:7d:ec:ef:ad:4f:ae:09:2b:9f:
e5:e0:25:1a:b0:e9:d5:4a:76:91:2a:91:0b:9f:a2:
3a:4d:83:90:28:07:ab:4d:58:3a:a4:d3:66:6e:f8:
73:31:bb:54:de:35:4f:0b:ee:97:d5:c4:85:b8:3f:
b5:7a:68:81:66:83:a1:a3:ce:ab:3d:c1:59:eb:ce:
8c:8d:2f:91:e8:e7:f7:4a:25:d6:c4:d2:f7:fb:98:
b7:f8:46:50:4c:25:08:96:ed:65:4d:c9:67:c5:b3:
cf:34:5f:aa:5a:91:d4:68:ae:d3:b2:34:c3:3c:41:
92:aa:35:c2:78:f1:fd:b6:be:b3:ea:34:5a:c7:d3:
e0:ab:58:37:66:41:a1:3b:ad:77:55:bf:84:aa:82:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D1:97:A3:70:0A:CF:7E:C0:8B:F7:6F:BC:F7:CA:53:09:D5:7A:5B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t9GXo3AKz37Ai_dvvPfKUwnVels.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0-31.56.2.255
31.56.23.0/24
31.56.25.0/24
31.56.27.0-31.56.32.255
31.56.34.0/24
31.56.36.0/24
31.56.38.0/24
31.56.40.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ef:1c:2f:f5:b4:37:d5:54:cb:19:52:98:ca:cb:e9:f8:1b:
c1:48:70:81:77:97:28:4c:82:02:8c:8d:03:20:be:43:53:40:
9c:25:83:f4:5b:1f:1e:fd:85:fc:e5:c4:09:84:1a:ec:ae:97:
d6:16:d2:03:be:36:09:59:c5:e2:52:14:a9:58:a8:9c:d6:9d:
f2:84:e7:9e:22:c5:e3:9c:41:f6:ff:46:ab:fd:e8:a3:93:e7:
d3:59:6a:03:ff:8d:87:63:1a:1d:44:e4:95:b7:ff:18:0a:ac:
45:75:23:f0:33:08:02:4f:1e:d2:88:8c:45:e8:1c:66:67:e7:
7d:25:db:ac:1e:02:13:1b:f7:ef:d3:90:7b:a8:b7:b0:81:2d:
15:41:b7:61:a4:b0:c8:75:6f:e8:62:f6:de:f6:ea:1c:4c:21:
84:84:71:b5:eb:77:d2:37:36:16:02:ef:fb:53:30:01:fa:40:
a3:83:a6:3a:83:78:f7:72:25:f3:89:23:1b:82:0c:3d:66:7a:
27:d5:4f:85:36:85:77:28:86:51:02:ee:02:f9:f1:e3:54:0f:
85:27:65:6f:9f:b1:3a:79:99:0b:d1:5d:45:07:8f:7c:c6:dc:
6e:c2:16:ec:ec:be:b6:4d:5d:1f:2c:e1:d4:b3:f8:eb:cb:16:
74:89:61:d8
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZETU3/m7cnmpDeKSM4KNIcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwODAyMTM0MjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2QxOTdhMzcwMGFjZjdlYzA4YmY3NmZiY2Y3Y2E1MzA5ZDU3YTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvArNbnXwluLRouR/FwWwaKeKTNIE
DmRk8wWP0sNKNzBxaUzf8w/4CCZmnPerT1bHQh+jl7GYj1WIFJ1g2dCNYoNUyVAC
pYZlQid98A3MrxUHpm+u6YJ/u13EO7k07v3jFoJorPtqS37HCkugYUt97O+tT64J
K5/l4CUasOnVSnaRKpELn6I6TYOQKAerTVg6pNNmbvhzMbtU3jVPC+6X1cSFuD+1
emiBZoOho86rPcFZ686MjS+R6Of3SiXWxNL3+5i3+EZQTCUIlu1lTclnxbPPNF+q
WpHUaK7TsjTDPEGSqjXCePH9tr6z6jRax9Pgq1g3ZkGhO613Vb+EqoKTOwIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFLfRl6NwCs9+wIv3b7z3ylMJ1XpbMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdDlHWG8zQUt6MzdBaV9kdnZQZktVd25WZWxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAMAwDBAAfOAED
BAAfOAIDBAAfOBcDBAAfOBkwDAMEAB84GwMEAB84IAMEAB84IgMEAB84JAMEAB84
JgMEAB84KDANBgkqhkiG9w0BAQsFAAOCAQEAd+8cL/W0N9VUyxlSmMrL6fgbwUhw
gXeXKEyCAoyNAyC+Q1NAnCWD9FsfHv2F/OXECYQa7K6X1hbSA742CVnF4lIUqVio
nNad8oTnniLF45xB9v9Gq/3oo5Pn01lqA/+Nh2MaHUTklbf/GAqsRXUj8DMIAk8e
0oiMRegcZmfnfSXbrB4CExv379OQe6i3sIEtFUG3YaSwyHVv6GL23vbqHEwhhIRx
tet30jc2FgLv+1MwAfpAo4OmOoN493Il84kjG4IMPWZ6J9VPhTaFdyiGUQLuAvnx
41QPhSdlb5+xOnmZC9FdRQePfMbcbsIW7Oy+tk1dHyzh1LP468sWdIlh2A==
-----END CERTIFICATE-----
Generated at Tue Aug 13 22:07:14 2024 by rpki-client on console-ams.rpki-client.org