Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tJ_27upNxV8og7AS-ekaVgMLYBg.roa
File: tJ_27upNxV8og7AS-ekaVgMLYBg.roa (raw, json)
Hash identifier: cxpCdHXTNHMrWlV+JUAvM1m+lQjLEggNrL0trEGTPNg=
Subject key identifier: B4:9F:F6:EE:EA:4D:C5:5F:28:83:B0:12:F9:E9:1A:56:03:0B:60:18
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192C80E12FF1690D97EA8C9EB88B963D9D8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tJ_27upNxV8og7AS-ekaVgMLYBg.roa
Signing time: Sat 26 Oct 2024 09:00:18 +0000
ROA not before: Sat 26 Oct 2024 09:00:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 06:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c8:0e:12:ff:16:90:d9:7e:a8:c9:eb:88:b9:63:d9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 26 09:00:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b49ff6eeea4dc55f2883b012f9e91a56030b6018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:11:cf:e0:4d:bc:9e:15:ae:52:f5:54:67:
85:2d:2c:71:ef:67:00:6d:38:0c:2e:62:f8:e8:98:
e3:6f:12:96:c1:2f:d7:b9:97:d3:97:0d:a5:49:bf:
3d:cd:fe:4a:07:ab:4d:86:56:af:b3:1d:7e:22:7e:
ef:09:2f:d6:60:d6:ad:0e:4e:e0:7a:19:e0:16:99:
e1:77:9b:d6:92:8a:01:53:b4:ce:56:6d:f3:a8:93:
70:2a:42:43:dc:07:b1:39:3c:45:25:61:3d:70:79:
f4:67:2f:81:87:4e:80:64:c2:15:2c:0c:c6:a9:41:
f8:30:d1:07:4a:2b:8a:2f:f5:ea:23:41:13:ea:0e:
32:d7:59:c0:5c:f4:85:e9:ef:2e:2a:ce:7d:8b:24:
65:ce:cd:fa:56:02:e3:19:9f:73:21:4f:2f:28:f3:
12:99:e9:10:cf:83:44:9d:62:e5:0b:5c:c5:16:5e:
18:02:cb:64:1c:e9:37:8f:05:dc:66:9a:c6:bf:31:
bc:db:ac:ef:55:70:fc:8f:5d:8d:67:68:e9:db:4c:
67:3b:35:b3:ee:f4:d5:e8:b8:8f:a3:45:17:17:04:
d4:55:0a:f7:14:54:91:dd:29:d0:08:c8:38:eb:98:
b4:93:a7:37:c8:66:b2:bd:ba:ee:ec:35:2b:25:6c:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9F:F6:EE:EA:4D:C5:5F:28:83:B0:12:F9:E9:1A:56:03:0B:60:18
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tJ_27upNxV8og7AS-ekaVgMLYBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
31.59.136.0-31.59.175.255
Signature Algorithm: sha256WithRSAEncryption
b0:76:be:32:05:ed:ff:fc:1c:74:99:72:6e:ad:09:05:67:65:
10:0b:00:fd:00:7e:a0:34:f4:3a:b7:e2:2c:27:9b:2e:61:23:
73:ef:ec:f0:92:2a:8d:e0:65:91:27:33:86:06:29:fa:91:56:
71:e7:51:b1:a3:06:34:00:19:c7:7d:d6:e0:47:7b:2f:4c:d7:
ec:cf:67:b9:b2:fa:c5:d5:fe:a5:2b:8e:2d:10:4f:5b:b0:18:
17:d2:dc:6e:22:31:af:b5:62:87:b6:a1:5f:a4:0a:0c:f2:b7:
90:8b:db:32:4f:fe:64:c1:b0:6c:0f:74:c1:72:df:63:84:d4:
be:0d:61:8d:81:33:f0:5e:7f:f8:00:c4:c2:ab:44:08:e6:d9:
69:19:2e:5a:bb:aa:69:e0:83:b2:bc:25:f2:29:22:26:a8:db:
5e:9b:b0:90:39:2d:c6:d7:15:de:57:b9:5f:14:e0:6f:37:ff:
20:20:ab:4f:f2:a9:82:f0:04:9e:65:62:7b:ab:ca:32:38:ca:
84:e4:c0:7c:3b:21:c2:a9:42:e6:70:ac:c5:d4:a1:25:73:38:
f1:84:b1:62:f1:aa:f4:33:73:b8:1f:88:2b:d9:f0:84:62:b6:
37:3b:72:f7:76:d3:a6:e5:ea:e6:3f:6d:99:bb:c2:42:b7:db:
92:04:48:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 08:11:24 2024 by rpki-client on console-fra.rpki-client.org